DESCRIPTION OF PERSONAL DATA FILE IN COMPLIANCE WITH SECTION 10 OF THE PERSONAL DATA ACT (523/1999)

(Drawn up on 22 February 2018)

Controller: Finnish Marine Industries Federation Finnboat

Data file characterisation: Events organised or commissioned by Finnboat

Contact person in matters relating to the data file: Jarkko Pajusalo, +358 40 673 4032, jarkko@finnboat.fi

Purpose of processing personal data (the use of the data file)

Gathering of data concerning registrations to events organised or commissioned by Finnboat; communication related to these events.

Contents of the data file

The data gathered on the participants and stored in the data file include the following: Name, e-mail address, mobile phone number, participation in the event and other data provided by the participants upon registering to the event.

Regular data sources

Data provided by participants upon registering to the event.

Regular data disclosures

Where necessary, the controller can disclose gathered data to companies organising events on commission by Finnboat as required for a given event. The controller will not disclose personal data of the participants to other external parties except when duly required by Finnish authorities.

Regular disclosures of data and transfer of data outside the European Union or the European Economic Area: No personal data will be disclosed or transferred outside the European Union or the European Economic Area.

Personal data file security

The personal data are maintained as confidential. Eventilla Oy’s data network and equipment containing the personal data file are protected by a firewall and other technological means necessary.

Any printouts of the gathered data are maintained at the Federation’s office premises that are appropriately locked and protected with a security alarm system. Once the data are no longer used, or following the expiry of the required storage period, the data will be placed into a lockable data protection storage facility. This facility will subsequently be handled and appropriately emptied by an external service provider specialised in data protection matters.

Deletion of data

Data concerning a participant may be erased from the file upon the participant’s request or upon termination of their customer relationship.

Right of refusal

Participants have the right to refuse disclosure and processing of their data for direct advertising and other marketing. The refusal requests must be made to the controller of the data file in writing.