1. Controller and contact person information
Name of register: Tampere Conversations
Controller: Tampere Chamber of Commerce and Industry (business ID 0206122-9) [later referred to as CCI]
Address: Kalevantie 2, 33100 Tampere
Telephone: +3583 230 0555
Contact person for data protection issues: Katriina Nousiainen firstname.lastname@example.org
2. For which purposes do we process your personal data?
Personal data is used for managing event packages by Tampere Conversations, communications, and customer relations. For sending newsletter(s) related to event packages organised by Tampere Conversations, for targeting invitations to interest group events organised alone or together with partners, and for various events and workshops. If the event is non-public, we will notify participants in advance regarding photography or other forms of recording at the event. This material is used for marketing, promotion, and communication purposes regarding Tampere Conversations event packages and partners.
The following subparagraphs of Article 6 of the EU General Data Protection Regulation constitute the lawful basis for processing personal data:
1. Data subject has provided their consent to the processing of their personal data for one or several specific purposes.
2. Data processing is necessary for the fulfilment of a contract where the data subject is one of the parties, or to take precontractual steps at the data subject’s request.
3. The processing of personal data is necessary for the controller’s fulfilment of a legal obligation, and/or
4. The processing of personal data is required to guarantee the legitimate interests for the controller or a third party, except in cases where the data subject’s interests or basic rights and freedoms that require data protection override these interests.
CCI will primarily process your personal data in their membership register based on the Chamber of Commerce Act and the Associations Act. CCI may also process your personal data if obliged to do so by other legislation, for example, on the basis of the Bookkeeping Act’s obligation to retain data.
CCI has certain legitimate interests related to their operations, such as further operational development and investigating potential violations, and your personal data may be processed also based on the above-mentioned grounds.
Personal data is processed either by automatic data processing or manually. Processing of personal data does not involve automated decision-making.
3. What data do we collect?
The personal data CCI collects may include, among other things, the following types of data and changes to this data:
The following are registered: organisation’s name, person’s name and title, email address, postal address, country, and telephone number. For events that include served food, allergy information is collected together with event registration; this information will be removed after the said event.
This data is received directly from companies, communities, and private persons via event package-related activities, such as cooperation projects, meetings, events, and newsletter subscriptions. Data sources also include public data sources such as organisations’ own websites, social media, LinkedIn, and various internet search engine services.
4. With whom can we share your personal data?
CCI will not give, sell, or otherwise reveal your personal data to third parties outside of the Tampere CCI community, unless otherwise stated below.
CCI may share the personal data of persons who participate in CCI events to others who participate in the same event by, for instance, sharing the list of participants in connection with other event materials.
CCI may share your personal data with partners, with whom CCI jointly manages and carries out a Tampere Conversations event package (City of Tampere, University of Tampere, and Finnish Innovation Fund Sitra)
5. Do we transfer your data to outside the EU area?
In providing services, CCI may use resources and servers that reside in different parts of the world. CCI’s membership register resides on a server in the EU area. Consequently, CCI may transfer your personal data to outside the country where you use the services, and possibly also to countries outside the EU and ETA areas where legislation does not provide special personal data protection or where the data protection legislation is very different. In these cases, CCI will ensure that legal grounds for data transfer exist, and that users’ personal data is protected in compliance with applicable legislation by using (when required), for example, standard contracts approved by the appropriate authorities and by requiring compliance with appropriate technical and practical data protection procedures.
6. For how long do we process your personal data?
7. How can you exercise your rights related to your personal data?
Your personal rights are:
1. Right to access your collected personal data.In practice, after receiving your appropriate and identified request, we will send you a report of all the personal data related to you found in our register.
2. Right to request data rectification of your personal data. If you notice mistakes or missing information in your personal data, you can send us a rectification request.
3. Right to request the removal of your personal data. We are obliged to comply with your request to remove personal data from our register if one of the following reasons is fulfilled and other legislation or statements by public authorities do not constitute an obligation to retain data:
a) Your personal data is no longer needed for the purposes that it was processed.
b) You withdraw your consent and there are no other legal grounds for processing.
c) You object to the processing of your personal data based on personal and special circumstances and there are no justifiable grounds for processing; or you object to the processing of your personal data for direct marketing purposes.
d) Your personal data has been processed in an unlawful manner.
e) Your personal data must be removed to fulfil a legal obligation, based on European Union law or on Finnish legislation, applied to CCI; or
f) Your personal data has been collected in connection with the provisioning of information society services, such as in connection with subscribing to CCI’s digital data services.
4. Right to request restricting the processing of your collected personal data. You can request that CCI restrict the processing of your personal data if:
a) You deny the correctness of your personal data.
b) The processing is done in an unlawful manner, and you request that the data be restricted instead of removing it.
c) CCI no longer needs the said personal data for the purposes of processing, but you require it to present, create, or defend a legal claim.
d) You have objected to the processing of your personal data while waiting for verification of whether CCI’s legitimate interests override your interests.
5.Right to transfer the personal data you have provided from one system to another. If the automated processing of your personal data is based on your consent or a contract, you have the right to receive the personal data you have provided to CCI in a machine-readable, generally used format, and the right to transfer the said data to another controller.
6. Right to withdraw consent. If all or part of your personal data is processed based on the consent given by you in this register, you have the right to withdraw your consent.
7. Right to make a complaint to a supervisory authority. If potential disputes related to the processing of your personal data cannot be amicably settled between you and CCI, you have right to refer the issue to the Data Protection Ombudsman.
8. Is it absolutely necessary that you give us your personal data?
In order to manage the Tampere Conversations event package(s), CCI needs your personal data and your consent to its processing.If we do not have the required personal data, we are unable to offer you a high-quality and successful event package that we need the personal data for.
9. The processing of data is subject to the laws of which country?
CCI is a Finnish organisation operating in Finland. Finnish law and the EU law directly applied in Finland, such as the EU General Data Protection Regulation, shall be applied to this person register and the related processing of personal data. CCI uses Matomo Analytics as a website analytics software.
10. Protecting the register
The register is protected both in terms of the infrastructure and with user access control. Only technical support personnel and those employees who have been granted the required rights have access to the register data.