Sections 10 and 24 of the Finnish Personal Data Act (523/1999)

Privacy policies drafted 18 May 2018

Download the privacy policy (PDF) and the privacy policy for recruitment (PDF).

1. Controller

EHYT Finnish Association for Substance Abuse Prevention (hereinafter referred to as ‘EHYT’)
Elimäenkatu 17–19, FI-00510 Helsinki, Finland
Kari Vuorinen, kari.vuorinen (a) ehyt.fi

2. Contact person for data file

Kari Vuorinen
Elimäenkatu 17–19, FI-00510 Helsinki, Finland
E-mail: kari.vuorinen (a) ehyt.fi

3. Name of data file

Toiminnanseuranta ja yhteystietorekisteri (‘Operations control and contact information data file’)

4. Purpose of personal data

EHYT collects follow-up data on all of its operations and is obligated to report to the providers of funding in accordance with legislation. See the Finnish Act on Discretionary Government Transfers, for example.

5. Content of data file

Participants of events are requested to provide follow-up data that is stored in the follow-up data system for each activity. Personal identification data will not be stored in the follow-up system; the data stored in the system will cover the age and gender of the person as well as the event which they attended. After storing the follow-up data, the information on the person’s name and contact details will be removed.

EHYT may contact the person in question later if the person has given their consent when the follow-up data was collected. In that case, EHYT will store the following contact information: name, address, e-mail address, reference of the person’s organisation and the event in which the information was collected.

This contact information will be stored for as long as it is valid or until EHYT receives a written request for their erasure.

6. Regular sources of data

The data is collected in connection with orders for training or other activity. The data is collected in connection with signing up for events and customer feedback surveys.

EHYT uses the follow-up data when reporting its operations to various providers of funding as obligated by the Finnish Act on Discretionary Government Transfers, among other things.

7. Regular disclosures of data

EHYT does not disclose personal data to external parties; the follow-up data produced on the basis on the personal data is disclosed to various authorities and providers of funding in annual or other reports as required by legislation as a compilation that excludes all personal data.

EHYT does not disclose any address or contact information.

8. Transfer of data outside the EU and the EEA

EHYT does not disclose personal data to third parties.

9. Principles of protecting the data file

A. Manual materials: stored in locked facilities.

B. Information processed by IT: a limited group of users has access to the data, and the access is protected by passwords. EHYT has carried out the appropriate IT measures to ensure that no outsiders can access its operational area.

10. Right of access

The follow-up data does not contain personal data. An individual may request access to their contact information accrued through various functions by submitting a written request to EHYT Finnish Association for Substance Abuse Prevention. Access may be requested free of charge once a year.

11. Right to rectification

An individual has the right to demand the rectification of their data by submitting a written claim to EHYT Finnish Association for Substance Abuse Prevention.

12. Other rights related to the processing of personal data

EHYT does not disclose contact information to outsiders and only uses it in its own operations.