Rekisteriseloste & Tietosuoja
1. General information
The purpose of this notice is to provide privacy information required by the EU General Data Protection Regulation (hereinafter "GDPR").
2. Data Controller
Kaminun Oy is the controller in accordance with this privacy policy.
The contact person of the data controller is Elina Mikkola.
Address: Prinsessantie 4f 49 00820 Helsinki
Email: [email protected]
3. The Register
The name of the register is customer register.
The register covers Kaminun Oy’s customers, prospective customers, and other parties who receive marketing material.
4. Purpose and Legal Basis for Processing
The following table provides a summary of the purposes and the applicable legal basis for the use of personal data.
|
Purpose of Use |
Legal Basis |
Categories of Personal Data |
|
Providing services |
Legitimate interest, fulfillment of a contract |
Basic information |
|
Marketing |
Legitimate interest Consent |
Basic information, consents |
5. Categories of Personal Data
The table below defines the categories of personal data.
Analytics data from online course platform. Possible personal information provided by the data subject in the course of family constellations sessions.
|
Category of Personal Data |
Information |
|
Basic information |
Name and contact details (email, telephone number, addresses) of the data subject, age. |
|
Consents |
The consents given by the data subject for different purposes of processing of personal data. |
|
|
|
|
|
|
6. Recipients of Personal Data
Personal data may be disclosed, for example, to authorities in statutory situations.
7. Transferring Personal Data
The data controller uses subcontractors in the processing of personal data. Personal data processed by subcontractors is only transferred outside of the EU or the EEA in accordance with the GDPR.
8. Data Retention
The necessity of retaining customers’ and prospective customers’ personal data for sales and marketing purposes, as well as the data's correctness, is reviewed annually. Unnecessary and outdated data will be erased in accordance with the reviewing of the data's correctness, and also at other times when deemed necessary.
9. Sources of Personal Data
Personal data is collected from the data subject itself and also when the data subject uses the services.
Personal data may also be collected and updated based on emails sent by the data subject to us.
10. Rights of the Data Subject
The data subject has the right to receive confirmation from the data controller as to whether or not personal data concerning the data subject are being processed, or whether personal data has been processed.
The data subject is entitled to receive a copy of the processed personal data and the personal data undergoing processing.
Whether the data subject makes the request by electronic means and he or she has not requested it by any other means, the information shall be provided by electronic means.
The data subject has also the right to obtain from the controller the rectification or erasure of personal data concerning him or her and the data subject has the right to prohibit the processing of personal data for direct marketing purposes.
In certain cases, the data subject has also the right to request from the controller restriction of processing of personal data or otherwise object to processing. Furthermore, the data subject may require the transmission of the personal data, which he or she has provided to the controller in a machine-readable format based on the GDPR.
All requests mentioned here shall be provided to the above-mentioned contact person of the controller.
Whether the data subject finds the processing of his or her personal data unlawful, he or she has the right to lodge a complaint with a supervisory authority.
11. Right to Withdraw Consent
Where processing of personal data of the data subject is based on consent, the data subject shall have the right to withdraw his or her consent. However, the withdrawal of consent may affect the usability and functionality of the service in question.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
12. The Protection of the Register
The location and protection of the equipment for storing documents has been carefully maintained and the documents are stored in a secured space. The access control at the premises has been appropriately arranged.
The right to access to the documentation is within the personnel who have the obligation of confidentiality.
