Tietosuojaseloste / Privacy Policy / GDPR

Bosnialaisten kulttuurikeskus Suomessa ry Nisse Kavon katu 3 FIN-20610 Turku Finland, Europe

Business ID (Y-tunnus): 2331229-3 [email protected]

The contact person for data protection matters is the chair of the association.

Member register of Bosnialaisten Kulttuurikeskus Suomessa ry.

Under the Finnish Associations Act (yhdistyslaki), a member's name and municipality of residence are entered in the member register.

The law does not actually require any other data. In practice, however, most associations also collect other data needed to manage membership. In addition to the data above, Bosnialaisten Kulttuurikeskus Suomessa ry collects members' email addresses for the association's communications. Giving an email address is voluntary.

When following up membership fees, the association processes the payer's name, the payment date, the amount paid and any information given in the message field. If other data are needed when registering for an event organized by the association – for example a year of birth required by a camp center in addition to name and municipality – the association collects these data from those registering for that purpose.

Data of minors are collected with a guardian's consent or provided by the guardian.

The association's website may use cookies to ensure the site works and to follow visitor numbers and site use. Cookies are not used to identify individual users.

Personal data are as a rule obtained from the data subject, or for a minor from their guardian. Data on membership fees are also obtained from bank statements and accounting records.

Data may be disclosed to authorities where the law requires it. Data necessary for organizing events may, where needed, be disclosed to partners taking part in the event, such as a camp center, only to the extent the event requires.

Data are not disclosed to third parties for marketing, sales, opinion polling or market research purposes.

As a rule, the association does not transfer personal data outside the European Union or the European Economic Area.

Member register data are kept for as long as the membership is valid.

After membership ends, personal data are deleted within a reasonable time unless there is a legal reason to keep them.

Data collected when registering for events are deleted when they are no longer needed to organize the event.

Accounting data are kept for 10 years, as required by the Finnish Accounting Act.

The Associations Act does not set an exact retention period for member register data. The retention period should be based on the purpose of the data and on the requirements of other laws, such as the Accounting Act.

Register data are protected technically and organizationally. Only people who need the data to carry out the association's tasks have access to them. Register data are backed up regularly and the ability to restore them is ensured. The controller reports any data breaches directly to the authorities or to the user in accordance with applicable law.

The data subject has the right to:

• receive information about the processing of their personal data
• access the data concerning them
• request the correction of inaccurate data
• request the deletion of data within the limits allowed by law
• restrict the processing of their personal data
• object to the processing of their personal data
• withdraw any consent to email communication

Requests for access and other requests concerning the processing of personal data should be sent to the association's email or postal address or through the contact form on the website. The data subject may also attend an open board meeting and make the request there in person.

Exercising these rights is free of charge as a rule. However, we may charge a reasonable fee covering the administrative costs of carrying out a request, or refuse to act on it, if the request is manifestly unfounded, excessive or repetitive. If we intend to charge for carrying out your request, we will contact you.

Personal data are not used for profiling or automated decision-making.

The controller reserves the right to update this privacy policy. Where the law or the association's activities require it, data subjects will be informed of changes.

The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) if they consider that personal data have been processed in breach of applicable data protection law.

Tietosuojavaltuutetun toimisto PL 800, 00531 Helsinki Phone: 029 566 6700 www.tietosuoja.fi

When you write to us through the contact form, we store your name, email address and the content of your message, and, to protect against spam, a shortened, irreversible hash of your IP address. We use the data only to reply to your message and delete them when they are no longer needed for that purpose.