PRIVACY STATEMENT
Registrar
Tanhuvaara Sports Institute and Sport Resort (Business ID 0166930-4)
Moinsalmentie 1042, 57230 Savonlinna
044 715 0400, sales@tanhuvaara.fi
Contact person
Anu Hakkinen
Moinsalmentie 1042, 57230 Savonlinna
044 715 0405, anu.hakkinen@tanhuvaara.fi
Name of the register
Event participant and customer register
Purpose and legal basis for processing personal data
Personal data is processed for the purpose of implementing the agreement between the Controller and the data subject and, where applicable, based on the consent given by the data subject, in connection with and to enable orders, registrations, contacts, transactions, marketing, reporting and other measures related to customer management.
Purchase and transaction data and location data processed in the register can also be used for profiling and to target marketing measures and customer communications that are of interest to the data subject. Personal data is also processed in connection with sending newsletters, participating in events and other marketing measures.
If the data subject does not provide the requested information insofar as the information is related to registration for the event, the Data Controller cannot accept the data subject's registration or bind the data subject to an agreement between the Data Controller and the data subject regarding participation in the event.
Personal data retention period
Personal data will be retained for as long as necessary to enable the registration and related transaction by the registrant. The data will be deleted after the retention period specified above has expired.
The register's categories of persons, data content and personal data categories
The groups of persons whose data may be processed are participants in an event organized by the Controller, or those who have given marketing permission. The register may process, among other things, the first and last name of the data subject who has registered for the Controller's event, as well as any contact information and necessary information provided in connection with the event. The registration information for the event entered by the data subject himself may include, among other things, the following information: email, telephone number, address, date of birth, or allergy information.
Regular sources of information
Information provided by the participant, customer information system and billing database.
Regular data transfers
Register data may be shared within the organization, as well as among stakeholders of the event. In addition, register data is transferred to a designated personal data processor. Data is not transferred outside the EU or EEA.
Principles of Registry Security
The data is kept technically protected. Physical access to the data is prevented by access control and other security measures. Access to the data requires sufficient rights and multi-step authentication. Unauthorized access is also prevented, for example, by firewalls and technical protection. Only the controller and separately authorized persons have access to the register data. Only authorized persons have the right to process and maintain the register data. Users are bound by a duty of confidentiality. The register data is backed up securely and can be restored if necessary.
Rights of the registrant
A person in the register has the right, among other things:
• request from the Controller access to personal data concerning him/her, as well as the right to request rectification or erasure of such data, restriction of processing or objection to processing, and the right to transfer the data from one system to another;
• check and, if necessary, have the information about him/her corrected in the register. The request must be made in writing to the registrar. The person registered has the right to make changes to the information about him/her that has been incorrectly entered in the register.
• to the extent that the processing of personal data is based on the consent of the data subject, the right to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal
• file a complaint about the processing of personal data with a supervisory authority
Register description in accordance with Section 523 of the Personal Data Act (99/10)
1. Registrar
Tanhuvaara Sports Institute
Moinsalmentie 1042
57230 Savonlinna
2. Registry matters
Our customer service will respond to questions and feedback regarding the register within two business days at the latest.
3. Name of the register
Tanhuvaara Newsletter
4. Purpose of personal data processing
The purpose of the processing is to manage the customer relationship, implement the rights and obligations of the customer and Tanhuvaara, and process personal data in accordance with the Personal Data Act for purposes related to online services, research activities, and directing Tanhuvaara's advertising and/or direct marketing based on customer data through Tanhuvaara's media and services without disclosing personal data to a third party.
5. Content of the register
Email
First name
Last name
Object of interest
6. Regular data sources of the register
The register is compiled from voluntary mailing list subscriptions made through Tanhuvaara's website.
7. Regular data transfers
The data controller does not disclose Customers' personal data to third parties, except when required by Finnish authorities.
8. Deletion of data
Data may be deleted at the Customer's request or due to the end of the customer relationship.
9. Principles of data protection
Personal data is kept confidential. Tanhuvaara's information network and equipment on which the register is located are protected by a firewall and other necessary technical measures.
10. Right of prohibition
The customer has the right to prohibit the disclosure and processing of their information for direct advertising and other marketing purposes.
Visma InSchool Primus registration statement
REGISTER DESCRIPTION
Personal Data Act (523/99) Section 10
Visma Enterprise Oy
Keskuskatu 3
00100 Helsinki
http://www.visma.fi/inschool
1. Registrar
Name: Tanhuvaara Sports Institute / Tanhuvaara Foundation sr
Address: Moinsalmentie 1042, 57230 Savonlinna
2. Contact person for matters concerning the register
Name: Satu Kosonen, Education Secretary
3. Name of the register
Visma InSchool Primus system
4. Purpose of the information system
The Visma InSchool Primus system is a comprehensive school administration system that manages the school operations of an educational institution. It does not require any other software or system.
The core software of the information system is Visma InSchool Primus.
From the perspective of the Freedom of Information Act, all other programs included in the system can be considered auxiliary or tool programs. Other programs included in the system include the lesson planning program Kurre and the shared www interface Wilma of Primus and Kurre.
5. Content of the register
Primus includes the following personal registers: student register (including guardian information), teacher register, staff register, substitute register, applicant register, workplace trainer register.
Personal data is also included in, for example, the assessment register and the registers of pedagogical documents, support measures, on-the-job learning and recognition of competence.
6. Regular sources of information
The information in the registers has been obtained from the registrants themselves or their guardians. The registration of personal data is based on the person's consent or on another basis specified in law. Some of the data is generated from information about the student's education, which is recorded in the register by the teacher or school administration. The most important sources are the suomi.fi online service and the Population Register, the municipal/city education service and other administrative sectors, as well as teachers, students and their parents. Information is also obtained from the students' previous educational institutions, regional state administrative agencies and the Finnish Matriculation Examination Board.
7. Regular data transfers
In principle, the student's personal data is not disclosed outside the controller or third parties acting on behalf of the controller. However, the student's personal data may be disclosed to authorities for the purpose of organizing, monitoring and compiling statistics on studies, and Tanhuvaara Sports College may disclose information about the student to another controller (new educational institution) in connection with a change of educational institution.
8. Data transfer outside the EU or EEA
The controller does not transfer or disclose personal data outside the European Union or the European Economic Area.
9. Principles of data protection
Use of the information system requires a personal user ID. Access rights are granted by user group. Access rights are only granted to those employees of the controller who need the information in their work.
10. Right of inspection
The data subject has the right to inspect the information concerning him or her. The right to inspect is exercised by making a request for inspection in person to the contact person responsible for the register mentioned in section 2 with a signed or similarly certified document or by visiting the controller.
11. Right to request correction of information
The controller, on its own initiative or at the request of the data subject, corrects incorrect, unnecessary, incomplete or outdated information that the data subject cannot edit themselves.
