In this privacy policy you will find information on how personal data is processed in the operations of the SISU project.
The rights to privacy and data protection are fundamental rights, and the organizations implementing the SISU project (University of Eastern Finland, Demos Helsinki, LUT University, University of Turku and XAMK) take them seriously.the organizations implementing the SISU project (University of Eastern Finland, Demos Helsinki, LUT University, University of Turku and XAMK) take them seriously. Our processing of personal data complies with all applicable legislation such as the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (1050/2018). Our aim is to inform you about the processing of personal data as transparently and openly as possible – and thus always remain worthy of your trust.
For information on how we use cookies on our website, please visit our Cookie Policy.
If there is anything unclear or you wish to exercise your data protection rights. please get in touch with us using the contact information below.
1. Data controller and contact details
Demos ry (business ID: 1978805-3)
email:
Address: Mechelininkatu 3D, 00100, Helsinki
Tel. +358 40 557 2730
2. Purpose, information and retention period
We may collect or receive personal data for several purposes related to our business, which can be the following:
Newsletter subscription and marketing messages
Sources of data
Data is collected from you when you subscribe to the newsletter.
Customer contact details, professional networking events or similar occasions.
Data categories collected and processed
Email address
Name, work-related contact details (email, phone number), work title or position.
Purposes of processing
Providing you with news and information connected to the SISU project as requested by you.
Legal basis for processing
Consent. You can withdraw your consent by clicking the ‘unsubscribe’ link in a newsletter email.
Consumer Marketing: Consent.
Research respondents
Sources of data
The data is primarily collected from the respondents themselves, usually either through a research interview or related questionnaire.
Data categories collected and processed
Name, organisation, position in the organisation, post address, e-mail address, telephone number. Segmentation and profiling information such as gender, birth year, educational information, economic and employment information.
Research responses.
Information on refusal to participate in research.
Research interviews may be recorded, in which case the interviewees will be informed in advance.
Purposes of processing
The information provided by respondents will be used to report and analyse the research results. In line with the industry practice, we are committed to protecting the anonymity of research respondents. The research results are therefore documented in a format that does not allow individual respondents to be identified. An exception is made for individual research cases where the respondent has given explicit consent to the documentation of responses in a way that allows the response to be linked to personal data. We will never disclose personal data provided by the respondent for marketing purposes.
Legal basis for processing
Consent or a service contract with a third party whereby the third party discloses respondents’ contact information.
3. How long is the data processed for?
Newsletter subscription
You can unsubscribe from our newsletter whenever you like: an unsubscribe link is included in every newsletter or marketing email that we send.
Marketing messages:
We market our services to persons whose work might benefit from our services. Your contact details are processed for marketing purposes while you are working on tasks where our services could be useful.. However, you always have the option to opt out of having contact information used for marketing purposes, by unsubscribing from our email list at any time or telling our contact person that you no longer wish to receive information about the SISU project.
Research respondents:
Personal data is stored for as long as necessary for the purpose for which it is collected.
4. The rights of the data subject, that is, your rights:
As a data subject, you have the following rights:
- The right to inspect the data concerning yourself.
- The right to demand the rectification or deletion of inaccurate data about you.
- Under certain circumstances, the right to object the processing or ask for the restriction of the processing of your data.
- The right to complain of the processing of personal data to the supervisory authority. In Finland the supervisory authority is the Office of the Data Protections Ombudsman.
If you wish to exercise your data protection rights, please contact us by using the contact details above.
5. Disclosure of personal data
As a rule, we do not disclose your personal data to third parties. However, we use external service partners when carrying out our business such as cloud services for data storage and communications. In these cases, data may be disclosed to them to the extent it is necessary for their service provision. These external service partners act as data processors on our behalf and do not have the right to process your personal data for any other purposes than those described in this privacy policy.
We have contractually ensured that our service providers comply with EU data protection legislation. The following third parties act as personal data processors:
- G-Suite (Google)
We use the G-Suite cloud service for data management. The aforementioned service provider is an American company, meaning that in some cases personal data is transferred outside the European Union. The data transfers are protected in the manner required by European legislation.
We may also disclose your personal data to our cooperation partners, who are involved and/or participate in the relevant research or development project for which your personal data was collected. Personal data may be disclosed in these cases if such disclosure is necessary to carry out research and development in accordance with the purposes of the project. Upon such disclosure, the recipient shall be deemed as a data controller to the disclosed personal data, and the recipient’s processing of personal data shall be subject to the recipient’s privacy policy.
6. Changes to our privacy policy
This privacy policy describes the processing of personal data in the SISU project. In case there are changes to the way we process data the privacy policy will be updated accordingly.
Updated: February 13th 2024
