This is a disclosure in accordance with the General Data Protection Regulation of the EU (679/2016) regarding the processing of personal data.

​

Data Controller

Frendie / Social Welfare Consulting Oy

Business ID: 3395990-4

Address: Fredrikinkatu 40 A 2, 00100 HELSINKI

​

Contact for Privacy Matters

Timo Kuusisto

timo@kaverisovellus.fi

​

In all matters related to the processing of personal data and situations concerning the exercise of individual rights, the data subject is encouraged to contact the aforementioned contact person.

​

Legal Basis and Purpose of Personal Data Processing

The legal basis for the processing of personal data is:

• Consent given by the data subject for the processing of personal data

• Contractual relationship between the data subject and the data controller
   

The purposes of processing personal data include marketing, maintaining customer and partnership contractual relationships.

​

Processed Personal Data

The data controller only collects personal data from data subjects that are essential and necessary for the purposes described in this privacy policy.

​

The following information about data subjects is processed:

- Email address

- Image

​

Disclosure of Personal Data

Personal data will not be disclosed to external parties unless required by law. Information may be disclosed exceptionally, for example, to authorities as required by law.

​

Transfers of Personal Data to Third Countries

Personal data will not be transferred outside the EU and the European Economic Area.

​

Data Retention Period

The data controller processes personal data for a period of five years. After this period, the data controller will delete or anonymize the data within one year in accordance with the deletion processes followed. The data controller may have an obligation to process some personal data belonging to the register for a longer period to comply with legal or regulatory requirements.

​

Rights of the Data Subject

 

1. Right of access to personal data

The data subject has the right to confirm whether personal data concerning them is being processed and, if so, the right to obtain a copy of their personal data. To receive a copy of the personal data held in the register, the data subject must contact the data controller in writing (timo@kaverisovellus.fi).

​

2. Right to rectification of data

The data subject has the right to request the correction of inaccurate and incorrect personal data concerning them. The data subject also has the right to have incomplete personal data supplemented by providing the necessary additional information.

​

3. Right to erasure of data

The data subject has the right to request the deletion of personal data concerning them if:

a. The personal data is no longer necessary for the purposes for which it was collected;

b. The data subject withdraws the consent on which the processing of personal data is based, and there is no other legal basis for the processing; or

c. The personal data has been processed unlawfully.

 

To delete their information from the register, the data subject must contact the data controller in writing (timo@kaverisovellus.fi). Upon request, all information about the data subject, including personal data and any other information entered by the data subject into the application, will be deleted.

​

4. Right to restriction of processing

The data subject has the right to restrict the processing of their personal data if:

a. The data subject disputes the accuracy of their personal data;

b. The processing is unlawful, and the data subject opposes the deletion of their personal data and instead requests the restriction of its use; or

c. The data controller no longer needs the personal data for the original purposes of processing, but the data subject needs it for the establishment, exercise, or defense of legal claims.

​

5. Right to withdraw consent

The data subject has the right to withdraw their consent to the processing at any time without affecting the lawfulness of the processing carried out based on the consent before its withdrawal.

​

6. Right to data portability

The data subject has the right to receive their personal data provided by them in a structured, commonly used, and machine-readable format and has the right to transfer that data to another data controller.

​

7. Right to lodge a complaint with a supervisory authority

The national supervisory authority for personal data matters is the Office of the Data Protection Ombudsman, operating within the Ministry of Justice. You have the right to lodge a complaint with the supervisory authority if you believe that the processing of personal data concerning you violates applicable legislation.

​

How to Exercise Your Rights

The aforementioned rights can be exercised by contacting the data controller in writing or by sending us a letter or email to the addresses mentioned under the Data Controller section, including the following information: the email address used in creating the profile.

​

Changes to Privacy Practices

The data controller continuously develops its operations and may, therefore, need to change and update its privacy practices as necessary. Changes may also be based on changes in data protection legislation.

​

If the changes involve new purposes for the processing of personal data or otherwise significantly change, the data controller will notify in advance and, if necessary, seek consent.