Privacy Notice

1. Data Controller

Sillanrakentajat ry
Business ID: 3601806-9
Email: info@sillanrakentajat.org
Phone: 046 555 2448

The data controller is the association responsible for the personal data processing described in this notice.

2. Personal Data Processed and Purpose of Processing

This notice covers personal data processed in connection with the website and communications. Sillanrakentajat ry processes personal data in the following situations:

• Email communications: When a person contacts the association by email, the sender's email address, name (if provided in the message) and the message content are stored. The purpose of processing is to respond to the contact and to communicate in connection with the association's activities.
• Phone contacts: Calls are not recorded and callers' numbers are not logged. Notes may be taken where necessary to handle the matter.

Data is received directly from the individual. Providing personal data is voluntary, but without the necessary contact details the association may not be able to respond to an enquiry.

This website does not include forms through which personal data would be collected.

3. Legal Basis for Processing

The legal basis for processing email communications is Article 6(1)(f) GDPR: legitimate interests. Sillanrakentajat ry's legitimate interest is to respond to enquiries and manage communications relating to the association's activities. We have assessed that this interest does not infringe on data subjects' privacy, as the data processed consists solely of information that the individual has voluntarily submitted.

4. Retention Period

Personal data relating to email communications is retained for a maximum of two (2) years from the date of the last contact, unless otherwise required by law or unless the handling of a matter or an ongoing relationship with the association necessitates a longer retention period. Data that is no longer necessary will be deleted.

5. Recipients and Processors of Personal Data

Sillanrakentajat ry does not disclose personal data to third parties for marketing purposes or any other external use.

Website: This website is hosted on GitHub Pages (GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA). GitHub may process technical data, such as IP addresses and server logs, as part of providing the service, in accordance with its own privacy policies. GitHub's Privacy Statement is available at docs.github.com.

Email service: Emails sent to the association are processed within the infrastructure of our email service provider. The name of the provider will be disclosed upon request.

6. Transfers to Third Countries

This website is hosted on GitHub Pages, whose servers are located in the United States. GitHub may transfer technical usage data to the United States under its own privacy policies and applicable transfer mechanisms, such as EU Standard Contractual Clauses (SCC). Further information is available in GitHub's Privacy Statement.

Regarding the email service, the country in which data is held depends on the provider used. This information will be disclosed upon request.

7. Rights of Data Subjects

Under Articles 15–22 GDPR, data subjects have the following rights:

• Right of access (Art. 15): The right to obtain information about whether personal data concerning you is being processed and to access that data.
• Right to rectification (Art. 16): The right to require the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): The right to require the deletion of your data under certain conditions ("right to be forgotten").
• Right to restriction of processing (Art. 18): The right to require restriction of processing under certain conditions.
• Right to data portability (Art. 20): The right to receive personal data in a structured, commonly used and machine-readable format where processing is based on consent or a contract and carried out by automated means. The processing described in this notice is based on legitimate interests, so this right generally does not apply.
• Right to object (Art. 21): The right to object to the processing of your personal data on the basis of legitimate interests.

Personal data is not used for automated decision-making or profiling.

Requests to exercise these rights can be sent to info@sillanrakentajat.org. We will respond without undue delay and no later than one month from receipt of the request. This period may be extended by up to two additional months where permitted under the GDPR, and you will be informed separately if this is the case.

8. Right to Lodge a Complaint

Data subjects have the right to lodge a complaint with the competent supervisory authority if they consider that the processing of their personal data infringes data protection legislation.

Office of the Data Protection Ombudsman (Finland)
P.O. Box 800, FI-00531 Helsinki
Email: tietosuoja@om.fi
Website: tietosuoja.fi

9. Cookies and Tracking

The association does not use its own analytics, advertising or tracking services on this website and does not intentionally set non-essential cookies. The technical service provider GitHub Pages may process technical usage data in accordance with its own policies.

10. Changes to This Notice

Sillanrakentajat ry reserves the right to update this Privacy Notice as the association's activities or applicable legislation change. The current version of the notice is always available on this page. The date at the top of the page indicates when it was last updated.