Privacy Policy

EU’s General Data Protection Regulation, 2016/679, entry into force 25 May 2018

Appendix to the Data Protection Policy

Data controller

Finnish Cultural Foundation (Foundation), hereafter the Cultural Foundation
0116947-3
Bulevardi 5 A, 00120 Helsinki
telephone + 358 9 612 810
email yleisinfo@skr.fi or firstname.familyname@skr.fi

Person responsible for the registers

Susanna Pettersson, CEO
contact information as above
email firstname.familyname@skr.fi

Basis

The basis for collecting data is partly a legitimate interest (competitors, jury members and other actors) and partly consent (incl. ticket buyers as customers). Data is collected from data subjects themselves via websites or from enterprises and/or public registers. Data are also obtained from the Finnish Cultural Foundation’s other registers.

Purpose

Data are required to organise the competition and to inform about it.

Register content

The register contains the names and contact information of competitors, jury members and other actors. Regarding competitors, the register might also contain information about other earlier competitions and career in general. Regarding hosts, other information notifiable to them separately may be collected.

Regarding other individuals (customers) name and contact information is collected.

The register is in electronic format only. E-registration forms are printed out on paper.

Data storage

Information about competitors and other actors is stored for 10 years from the end of each singing competition. Regarding each competition, printouts of the registration forms, the results of each competitor and the composition of the jury (names only) are stored in perpetuity.

Customer data are stored for the duration of the customer relationship.

Disclosure of personal data

Personal data are not transferred for commercial purposes.

Data may be transferred, as professional email communication (nowadays Koodiviidakko), for the purpose of organising and providing information about the Competition to individuals in a customer relationship with the Finnish Cultural Foundation or to enterprises engaged in printing operations.

Rights of the data subject

The data subject has the right to request access to personal data concerning him or her, the right to request the rectification of inaccurate information, the erasure of data or the restriction of processing of personal data. The data subject also has the right to object to data being transferred from one system to another.

The data controller has the right to request further information that the controller deems necessary to verify the identity of the data subject making the request.

Requests will be responded to within one month of having been received. Any protraction of the time allowed and the reasons for the delay will be notified in the same context.

Right to withdraw consent

The data subject has the right to withdraw his or her consent to data registration at any time.

Restriction of processing

Processing has been restricted (see below).

Right to file a complaint

The data subject has the right to file a complaint to the supervisory authority should he or she consider that processing his or her data is in breach of the EU’s General Data Protection Regulation.

Automated decision-making

The register is not used for automated individual decision-making without explicit consent being requested for this purpose.

Principles of register protection

Data systems: The electronic register is on a computer owned by the data controller and in the use of the executive director. No-one else has access to this computer. The computer log can be monitored. The executive director is under a secrecy obligation based on employment contract.

Paper archive: Archive documents stored in paper format are stored in the data controller’s archives in accordance with archive instructions.

Access control: There is access control on the data controller’s premises.

See also the Finnish Cultural Foundation’s Data Protection Policy