Privacy Policy OTTY Career Boost

Privacy Policy

1. Controller

Omaehtoisen Työllistymisen Tuki OTTY ry, Business ID 0959876-6

Konepajankuja 1

00510 Helsinki

Tel. 0400-338677

E-mail info@tyonhakuveturi.fi

Contact person: Päivi Korhonen

2. Name of the Register

Participant and customer register of events

3. The basis and purpose of processing of personal data

Personal data is collected in connection with enrollment, communication, filing, marketing, reporting, and other customer relationship management measures. Data are also collected for reporting the registered data of the Data Subjects involved in the project as the authority duty to the TE -Office and the KEHA-Centre within the time period set by the authority. Personal data are also processed in connection with sending newsletters, events and other marketing participation activities.

The basis for processing of personal data is the authority duty and the legitimate interest of the association.

4. Personal data to be processed

The Register deals with personal data and contact details of the persons involved in OTTY’s activities, as well as other necessary information related to the activities. These details are:

• Given name and surname of Data Subject

• Date of birth of Data Subject

• Address details of Data Subject

• E-mail addresses of Data Subject

• Phone numbers of Data Subject

• Membership in member organisations of Data Subject

as well as in addition to the Data Subjects in the project:

• Educational background of Data Subject

• Employment details of Data Subject

• Situation regarding job search of Data Subject

• Commencement date and duration of unemployment

• Status of enrolment in the TE -Office

• Duration of unemployment benefit

5. Source of information

All information is obtained from the individuals themselves using the customer information system form.

6. Protection and transfer of personal data

Digitally processed personal data are protected and stored in OTTY’s customer data system, which is restricted to persons who need such data to perform their duties. The persons in question have their own user names and passwords. A form used for data transfer is protected by the technical administrator for the customer data system. Used workstations and storage media are encrypted. Any information sent as the authority duty is sent in encrypted form as specified by the authority.

Personal data may be disclosed to OTTY´s background associations for the purpose of implementing and reporting on measures and services related to the events and the project.

Personal data may also be transferred to other service providers for the technical maintenance of the personal register. The Controller performing technical maintenance of the personal register may transfer personal data pursuant to applicable privacy protection legislation and this Privacy Policy.

7. Transfer of personal data beyond the EU and the EEA

In principle, OTTY does not transfer data beyond the EU and the EEA. However, OTTY may also use other service providers in the personal data register system beyond the European Union or the European Economic Area.

Access to personal data is not given more than is necessary to implement the services. The transfer of personal data beyond the European Union or the European Economic Area is always based on the applicable legislation on the processing of personal data and is performed pursuant to that legislation.

8. Storage period for personal data

Personal data are kept in the Register as long as the person is involved and, in relation to the project, for the whole duration of the project and for a period of time determined by the authority in accordance with the authority duty.

9. Rights of Data Subject

In principle, the Data Subject has the right to be informed at any time, pursuant to applicable data protection legislation, of the processing of their personal data and examine their personal data processed by the OTTY and to require the rectification of inaccurate and erroneous personal data as well as updating them. Any request should be made to the Controller in writing.

10. Right to appeal to the supervisory authority

The Data Subject has the right to appeal to the supervisory authority regarding the processing of personal data if the Data Subject considers that his or her personal data have not been processed pursuant to applicable data protection legislation.

11. Amendments

This Privacy Policy can be updated in the event of significant information changes, e.g. contact details.

This Privacy Policy was last updated on 10 Apr 2019