Privacy Policy of Warrantti ry

1. Controller
Warrantti ry
Wolffintie 34, 65200 Vaasa

2. Contact Person Responsible for the Register
The current chairperson of the association, pj@warrantti.org.

3. Names of the Registers
The personal data processed by the association is contained in the following registers:

Member register maintained by Suomen Ekonomit

Registers maintained by Kide.app regarding participants of events

Warrantti ry’s email lists

4. Purpose of Processing Personal Data
The association uses the member register, through a separately agreed technical connection with Suomen Ekonomit, to verify the information of its members. The data is processed for membership verification and, when necessary, for communication.

The association uses personal data contained in the other registers mentioned in section 3 solely for communication, documentation of the association’s activities, and marketing of its own or its partners’ activities.

5. Data Content of the Registers
Through the member register maintained by Suomen Ekonomit, the association processes the following data: name, address, date of birth, student number, phone number, email address, and date of joining. The association does not store the data itself, but only processes it. The data is processed by the chairperson of the association.

6. Regular Sources of Data
The personal data stored in the registers originates from the individuals themselves. A member is added to the member register of Suomen Ekonomit once their contact information has been received and they have paid the membership fee.

7. Regular Disclosure of Data
Data is not disclosed to third parties. Data may be published to the extent agreed with the individuals concerned.

8. Principles of Register Protection
The register is handled with care, and data processed via information systems is appropriately protected. When register data is stored on internet servers, the physical and digital security of the equipment is ensured appropriately. The controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by persons who are authorized to do so.

9. Right of Access and Right to Rectification
Every individual whose data is stored in the register has the right to inspect their data and request correction of any inaccurate information or completion of incomplete information. If a person wishes to inspect their stored data or request rectification, the request must be sent in writing to the controller. The controller may, if necessary, ask the requester to verify their identity. The controller responds within the time limits set by the EU General Data Protection Regulation.

10. Other Rights Related to Personal Data Processing
Individuals have the right to request the deletion of their personal data from the register. Registered individuals also have other rights under the GDPR, such as the right to restrict processing in certain situations. Requests must be sent in writing to the controller. The controller may, if necessary, ask the requester to verify their identity. The controller responds within the time limits set by the GDPR, generally within one month.

The association’s contact person responsible for the registers cannot delete personal data from the member register maintained by Suomen Ekonomit or from the registers maintained by Kide.app regarding event participants. Therefore, individuals must contact these parties directly if they wish to have their data removed. The association’s contact person may do this on behalf of a member if the member submits a written request.

11. Retention Period of Register Data
The register contains only the data of individuals who are members of Warrantti ry. The data of individuals who have resigned or been expelled from membership is deleted within a reasonable time, no later than one month after the resignation or expulsion decision.

12. Exchange student membership
Exchange student membership bought through Kide.App is only being maintained by Warrantti ry and Kide.App. Our association prosessess the following data: name, address, email, phone number, student number, ending date of exhange studies and study program. The data can be prosessed by the board of warrantti. Expired membership data will be deleted no later than one year after the membership ends.