Privacy Policy (2022-09-05)
This is a report on the processing of personal data in accordance with the EU General Data Protection Regulation (2016/679) (GDPR).
Data controller
The physical or legal person who alone or together with others determines the purposes and means for the processing of Personal Data.
Personal Data Assistant
The physical or legal person who processes personal data on behalf of the person responsible for personal data.
Personal Data
Any information relating to an identified or identifiable physical person, hereinafter also referred to as a registered person, an identifiable physical person being a person who can be directly or indirectly identified specifically with reference to an identifier such as a name, identification number, location information or online identifiers or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the physical person.
Processing of Personal Data
The measure or combination of measures linked to Personal Data which, regardless of whether they take place automatically or not, via e.g. collection, registration, organization, structuring, storage, processing or modification, production, reading, use, disclosure by transmission, dissemination or other provision of data, adjustment or merging, restriction, deletion or destruction.
Concerning the processing of personal data and in situations concerning the exercise of their personal rights.
Basis and purpose for the processing of personal data
The legal basis for the processing of personal data is:
- The data subject’s consent to the processing of personal data
- Compliance with the personal data controller’s statutory obligations
The purposes of the processing of personal data are marketing
Personal data that is processed
The personal data controller only collects the personal data from the data subject that are relevant and necessary for the purposes described in this privacy policy
- Email address
- ip-address
Data storage time
The person responsible for personal data processes personal data for 6 months. After this period, the person responsible for personal data deletes or anonymises the data within 1 year in accordance with his deletion processes.
The person responsible for personal data may be obliged to process some of the personal data contained in the register for a longer period than what is stated above in order to comply with legislation or regulatory requirements
The data subject’s rights
The right to access personal data
The data subject has the right to receive confirmation of whether his or her personal data is being processed and whether they are being processed, the right to receive a copy of his or her personal data.
Right to correct data
The data subject has the right to request that incomplete and incorrect personal data concerning him be corrected. The data subject also has the right to supplement incomplete personal data by submitting the necessary additional data.
Right to delete data
The data subject has the right to request deletion of his personal data if
a. Personal data is no longer needed for the purposes for which they were collected,
b. The data subject withdraws the consent on which the processing of personal data is based and there is no other legal basis for the processing, or
c. personal data has been processed in an unlawful manner.
Right to restrict processing
The data subject has the right to restrict the processing of his personal data if
a. the data subject disputes the accuracy of his personal data,
b. the processing is illegal and the data subject opposes the deletion of his personal data and instead demands that their use be restricted, or
c. the data controller no longer needs the personal data for the original purposes of the processing, but the data subject needs them to establish, exercise or defend a legal claim.
Right to withdraw consent
The data subject has the right to withdraw his consent to the processing at any time without prejudice to the legality of the processing previously carried out on the basis of the consent.
Right to transfer data from one system to another
The data subject has the right to have his personal data and the personal data that the data subject himself has submitted in a structured, generally used and machine-readable format and the right to transfer this data to another personal data controller.
Right to lodge a complaint with the supervisory authority
The national supervisory authority for matters relating to personal data is the privacy authority. The data subject has the right to transfer your case to the supervisory authority if the data subject considers that the processing of his or her personal data violates
