Privacy Statement / Public Program
Controller and contact person
Controller: Museum of Finnish Architecture
Address: Kasarmikatu 24, 00130 Helsinki
Phone: +3584577310482
Email: mfa@mfa.fi, suvi.juvonen@mfa.fi
Contact person: Suvi Juvonen
Name of the register
Public Program Register of the Museum of Finnish Architecture
Registered data subject
The following data subjects are registered in the Public Program Register of the Museum of Finnish Architecture:
• Persons who have registered themselves or who have been registered by someone else to the events or occasions of the Museum of Finnish Architecture by using a Surveypal form or otherwise e.g. via email
• Persons who have been invited as guests to events and occasions of the Museum of Finnish Architecture
Basis and purpose of processing personal data
The processing of personal data in the Public Program Register of the Museum of Finnish Architecture is based on a legitimate interest (customer relationship or agreement). The information is used for communication and/or billing.
Personal data to be processed
The information processed by the Public Program Register of the Museum of Finnish Architecture varies, and detailed descriptions can be obtained from the person responsible for the registers. The registration log usually contains the following information:
First and last name of the data subject;
Address of the the data subject;
Email address of the the data subject;
Phone number of the the data subject;
Regular sources of information
Personal data is mainly collected from the data subject themself.
Protection and security of personal data
Digitally processed personal data is protected and stored in the systems of the Museum of Finnish Architecture, to which access is restricted only to persons who need such data in order to perform their work tasks. These people have personal usernames and passwords.
Personal information is protected from outside use and the use of member information is monitored. Members have a personal username and password protection.
Regular transfers and transfers of personal data
Personal data may be disclosed, within the limits permitted and required by the legislation in force at the time, to a processor of personal data who processes the data on behalf of the Museum of Finnish Architecture. The processor is obliged to comply with data protection law and the general EU data protection regulation.
Transfers of personal data outside the European Union or the European Economic Area
As a general rule, personal data will not be transferred outside the territory of the Member States of the European Union or the European Economic Area unless necessary for the purposes of the processing of personal data described above or for the technical implementation of the processing, in accordance with data protection law.
Retention period of personal data
Personal data stored in the registration log is retained for a period of time relevant to the nature of each event. As a general rule, personal data will be retained for approximately one year after each registration, provided that all payments related to the registration have been made.
Profiling
The data is not used for automatic profiling.
Rights of the data subject
In principle, the data subject has the right, in accordance with applicable data protection law, at any time to:
• receive information about the processing of their personal data;
• gain access to their own data and check personal data concerning themselves processed by the Museum of Finnish Architecture;
• require the correction and supplementation of inaccurate and incorrect personal data;
• demand the deletion of their personal data;
• withdraw their consent and object to the processing of their personal data in so far as the processing of personal data is based on the data subject’s consent;
• oppose the processing of their personal data on the basis of their specific personal situation, in so far as there is a legitimate interest in processing the personal data;
• require restrictions on the processing of their personal data.
The data subject must submit a request to exercise the above mentioned right in accordance with the Contacts section of this privacy statement. The Museum of Finnish Architecture may ask the registered data subject to specify their request in writing and verify their identity before processing the request. The Museum of Finnish Architecture may refuse to comply with the request on the grounds provided for in the applicable law. The Museum of Finnish Architecture may refuse to delete data on grounds of public interest when the data is retained for historical research and archiving purposes.
The right to appeal to the supervisory authority
Each data subject has the right to lodge a complaint with the relevant supervisory authority or the supervisory authority of the Member State of the European Union where the data subject is domiciled or employed if the data subject considers that their personal data have not been processed in accordance with applicable data protection law.
Contacts
Requests regarding the exercise of the data subject’s rights, questions about this privacy statement and other contacts should be made by e-mail to Suvi Juvonen at suvi.juvonen@mfa.fi. The data subject may also contact them in person or in writing at the address below:
Museum of Finnish Architecture
Suvi Juvonen
suvi.juvonen@mfa.fi
+3584577310482
Kasarmikatu 24, 00130 Helsinki
Changes to this Privacy Statement
This privacy statement is updated occasionally, for example as legislation changes. This privacy statement was last updated on November 24, 2020.
–
Helsinki 24.11.2020