Suomen Yrittäjät marketing register data protection notice

This privacy statement has been replaced by a new one in January 2021. You can find Suomen Yrittäjät’s current privacy statement here »

1. Controller

Suomen Yrittäjät ry

Postal address:
PL 999
00101 Helsinki

Visiting address:
Mannerheimintie 76 A
00250 Helsinki

Contact details for membership matters

Suomen Yrittäjät ry / Arttu Talvela
PL 191
00251 Helsinki
arttu.talvela@yrittajat.fi
Suomen Yrittäjät switchboard tel. 09 229 221

2. Data subjects

potential clients, members and website users
Suomen Yrittäjät member businesses

3. Basis and purpose for maintaining the register

Personal data are processed on the basis of the controller’s legitimate interest and the consent of the data subject.

Personal data are only processed for purposes defined in advance, which are the following:

Customer relations and customer service — legitimate interest
Finding potential customers and members, and member acquisition — consent or legitimate interest
Newsletter subscriptions — consent
Targeting of marketing — consent or legitimate interest

4. Data stored in the register

The marketing register contains both business data and businesses’ contact persons’ data.

Personal data in the register:

name
email
contact details
occupation
consent given
IP addresses (customer service and analytics of chat service)
In the case of member businesses, data from the member register.

5. Data subject’s rights

You, the data subject, have the following rights. If you have questions about exercising them, contact: arttu.talvela@yrittajat.fi.

Right of inspection and rectification

You have the right to check the personal data we store about you. If you notice any inaccuracies or defects in your data, you can ask us to correct or complete the data correctly.

Right of objection

You have the right to object to the processing of your personal data at any time if you feel that we have processed your personal data unlawfully or that we do not have the right to process some of your personal data.

Right of withdrawal

With email marketing, you can always refuse to be the recipient of marketing messages in question any longer.

If you feel that processing some of your data is not necessary for our tasks, you have the right to ask us to erase such data. We will process your request, after which we will either erase your data or provide you with a justified reason the data cannot be erased. If you disagree with our decision, you have the right to lodge a complaint with the Data Protection Ombudsman. You also have the right to demand that we restrict the processing of controversial data until the matter is resolved.

Right of appeal

You have the right to file a complaint with the Data Protection Ombudsman if you feel that we are violating your personal data when we process existing data protection legislation.

6. Regular sources of data

The company, organization and personal data contained in the marketing register are obtained, as a rule:

Regarding member businesses, from the Suomen Yrittäjät customer management system and marketing automation.

In the case of potential members and clients, from the data subject himself or herself via the likes of website forms, email, telephone, participation in training and events, and other situations in which the data subject discloses data.

In addition, personal data may be collected from publicly available sources for the purpose of member acquisition:

from the Patent and Registration Office’s list of registered businesses
from partners, with the data subject’s consent
from public sources of information on the internet
from commercial sources of information

7. Regular disclosure of data

We do not sell or rent data from the marketing register to third parties. We disclose data to third parties only in the following cases:

We may disclose data subjects’ data to third parties if the data subject has given his or her consent.

If we merge or otherwise reorganize our operations, the data subject’s personal data may be disclosed within the new organization.

8. Duration of processing

As a rule, personal data will be processed for as long as necessary with regard to the processing basis.

You can unsubscribe from our email marketing list by following the unsubscribe link in any of our marketing campaign emails.

9. Processors of personal data

Marketing register data are processed by employees of Sypoint Oy, owned by Suomen Yrittäjät ry and Suomen Yrittäjät, in accordance with current data protection legislation.

We can also partially outsource the processing of personal data to a third party, in which case we guarantee through contractual arrangements that personal data will be processed in accordance with the applicable data protection legislation and otherwise appropriately.

We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers:

Postiviidakko
Mailchimp
Typeform
Webropol
Giosg
Eventilla
GoToWebinar
Microsoft Dynamics
Custom Audience
Media Metrics

For the purposes of membership acquisition, the data are processed by Suomen Yrittäjät and its regional associations’ employees in accordance with current data protection legislation.

We use the following service providers for membership acquisition:

Bookers
Connection house

10. Transfer of data outside the European Union

As a rule, we choose secure data centres in Europe as data storage sites.

Some of these service providers may back up data outside the European Union/European Economic Area in the United States. The data are backed up to protect your data even in situations where the main servers fail.

Privacy Shield

We ensure that our service providers have joined the EU–US Privacy Shield, the aim of which is to ensure the security of EU citizens’ data processing in the US.

11. Cookies and browsing monitoring

We may collect data on the data subject’s terminal device using cookies and other similar technologies, such as the local browser repository. A cookie is a small text file that the browser stores on the data subject’s device. Cookies often contain an anonymous, unique identifier that allows us to identify and calculate the browsers used to visit our website.

Some cookies are essential for the functionality of the website. Some cookies are used to measure the number of visitors and analyse the use of the site in order to improve our service. We can also use cookies to target advertising. Cookies enable us to provide website visitors with content that best serves their needs.

Third parties may set cookies on the data subject’s device when the data subject visits our services in order to record the number of visitors to different websites. “Third parties” refer to bodies other than Suomen Yrittäjät ry, such as providers of measurement and monitoring services.

We ask for consent to use targeting cookies, performance cookies and functional cookies. At any time, the data subject has the right to cancel the cookie consent or to change his or her own cookie settings. Cookie settings can be changed via the link below.

Our services may also contain links to other websites and social networks, but we are not responsible for the privacy policies or content of these external websites. We recommend that you read the privacy terms and conditions of these services.

12. Privacy protection terms for mobile applications

Our mobile apps, which are made available to you through, for example, Apple App Store, Google Play or Microsoft Store, are subject, in addition to this Privacy Statement, to the terms and conditions of the service provider in question. In addition, the data subject must accept the application terms of use.

Updated June 2020