Data controllers
Website: liikuntaleikki.fi
Contact person for data matters
Jussi Korpinen, tel. +358 44 335 7003, hallitus@liikuntaleikki.fi
Name of the register
The personal data registers of Liikuntaleikki Helsinki ry, Liikuntaleikki Vantaa ry and Liikuntaleikki Espoo ry.
Legal basis and purpose of processing
Personal data is processed in accordance with the EU General Data Protection Regulation (EU) 2016/679. The purpose of processing is managing and developing customer and participant relationships, marketing, recruiting members and customers, and opinion and market surveys. Data is processed only to the extent necessary for these purposes.
Data content of the register
- Child's name and year or date of birth (date of birth in Helsinki and Vantaa)
- Child's address (optional, except for a player pass)
- Guardian's name, phone number and email address
- Registration date, how you heard about us, daycare centre (optional)
- Health and allergy information (optional)
- Chosen group, permissions and consents, and invoicing and collection details
- Email address and subscription date of home-games update subscribers (only if you subscribe)
Regular sources of data
The data is obtained from the data subject at registration and stored in the customer register.
Disclosure of data
Helsinki: data for the Puotila, Herttoniemenranta and Myllypuro groups is disclosed to Puotinkylän Valtti ry, and data for the Aurinkolahti and Vuosaari groups to Vuosaaren Viikingit ry, in order to obtain player passes.
Vantaa and Espoo: personal data is not disclosed to third parties.
Information systems
The systems are located on a third-party server maintained by Tietoverkko FI Oy.
Home-games updates are sent through a newsletter service (MailerLite). For subscribers we store only the email address and the subscription date. You can unsubscribe at the end of every message, after which the address is removed from the subscriber list.
Retention period
Data is kept for three years after the end of the customer relationship or the last marketing activity, unless legislation, an unpaid invoice or debt collection requires longer retention.
How the register is protected
- The systems are protected by firewalls and other technical measures.
- Access requires personal user IDs and passwords and is restricted to staff or authorised service providers. Access is logged.
- Any manual material is kept in premises with restricted access.
- Coaches have name lists for handing out prizes and have been instructed to dispose of them securely.
- Written agreements have been made with data processors.
Rights of the data subject
Requests must be made in writing and signed, to the contact person. The data subject also has the right to lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman).
Changes to this policy
The controller may update this policy, for example when legislation changes. We recommend reviewing the policy regularly.