This page concerns the treatment of our customers’ personal data. Please read the page thoroughly in order to understand our practices concerning personal data and their treatment.
Forum Virium Helsinki customer register and treatment of personal data
1 NAME OF REGISTER
Customer register database for Forum Virium Helsinki (FVH from here on), consisting of following parts:
- customer register
- register for sending newsletters, invitations and bulletins
- project database
2 REGISTER OWNER
The register controller referred to in the EU General Data Protection Regulation (EU) 2016/679 (”GDPR”) is:
Forum Virium Helsinki
Unioninkatu 24
FI-00130 Helsinki
3 RESPONSIBLE PERSON FOR REGISTER
The person responsible for the register is CIO Juhani Kantola.
His responsibilities for ensuring that the register is used for intended purposes include:
- check access rights frequently
- ensure proper security measures (including security updates)
- ensure that database users have adequate instructions for using the register
4 RESPONSIBLE PERSON FOR REGISTER DETAILS
The person responsible for register details is CIO Juhani Kantola.
His responsibilities is to maintain access rights for users, give out information about the register and inform customers about their rights for checking and updating their data stored in the register.
5 THE PURPOSE OF THE REGISTER
The register contains a database of FVH’s customers and partners, both companies and persons for maintaining business relationships.
The register is used for producing services for customers and partners. The register data is also used for marketing and dissemination targeting companies and persons. The data will not be shared with a third party. Anonymous usage data is used for research and statistics.
6 REGISTER DATA
The data stored in the register consists of the followind details:
- first and last names
- title
- company or organisation and department name
- profile data (eg. company industry)
- grouping data (mailing lists etc.)
- address details
- phone numbers
- fax numbers
- email addresses
- internet addresses
- target language
- any additional details given by the customer
- customer history, log data (eg. date of last contact)
- subscription status (eg. unsubscription for emails)
The register consists of several parts and not all parts contain the previous details.
7 REGISTER DATA SOURCES
The data is received directly from customers: companies, organisations and private persons. Additionally public databases may be used as source.
8 PERSONAL DATA SHARING GUIDELINES
Personal data will not be shared with third parties otherwise than permitted by current legislation. The data is stored in both EU/ETA server facilities as well as facilities in the Unites States. FVH maintains contracts with all of its service providers, which state that they will adhere to EU General Data Protection Regulations. Anonymous data (excluding names and identifying details) may be exported for research purposes.
9 REGISTER USAGE
The register is accessed, maintained and edited by FVH personnel. Access to the register is restricted and only available with a personal account and password combination. The account username is granted when access to the register is opened and will be closed when the employee’s contract is terminated or if the employee is assigned to a different role in FVH.
10 THE REGISTER IN RELATION TO OTHER PERSONEL REGISTERS
The register is solely for FVH’s use. Any updates will be performed by data submitted by customers or data available via public access.
11 SECURITY
All data in the register is used only by FVH. No social security numbers (or similar details) are stored. Several service providers provide servers and storage space where the register is stored. Servers are located in high security facilities with no unauthorized access. Register data is regularly backuped.
12 STORAGE OF PERSONAL DETAILS, REGISTER DATA, ARCHIVING AND DISPOSAL OF DATA
Register data is stored on a usage basis, archiving is not in use. The data is stored for the period for which the data is needed for the register. Any expired data is deleted manually.
13 INFORMING REGISTERED PERSONS
In connection with signing up for events, newsletters or providing personal details through a webform, the customer is informed of their rights to their data that is stored into the register. This Privacy Policy is accessible on the forumvirium.fi website.
14 RIGHT TO INSPECT, CORRECT OR REMOVE PERSONAL DATA
Persons have the right to inspect, correct or remove their stored data by request. The register does not have classified person data. Person data is usually validated when entered (either through public databases or other public sources) or periodically. Companies or persons can request correcting their data by request to the register owner. Requests can be made at this address: https://forumvirium.fi/en/change-delete-personal-information/
The request will be replied to as soon as possible and then carried out. The register does not include data for which these requests cannot be carried out.
15 RIGHT TO NON-DISCLOSURE
No data is exported or disclosed from the register without written consent from the customer company or person.
16 REGISTER MANAGEMENT
CIO Juhani Kantola is the owner and maintainer of the register.
The CIO is responsible for
- maintaining the Privacy Policy and description of the register
- usage policy and data model of the register, granting access rights, informing registered persons, responding to requests for data inspection and maintaining data integrity
- technical administration of the register
- security, archiving and backups, also any data deletions
- naming any additional responsible persons for the register
The register data is maintained collectively by FVH personnel.
17 INTERNAL INSTRUCTIONS AND TRAINING
Internal usage guidelines are maintained separately. Training is provided regularly.