Description of personal data file in accordance with Personal Data Act (523/1999) 10 §
The Startup Shortcut Oy (Business ID 2759222-9)
Lapinlahdenkatu 16, 15B
2. Contact person
3. Name of the register
The Startup Shortcut Oy’s register of persons participating in the activities or events organized by The Startup Shortcut Oy.
4. The purpose for processing the personal data
The purpose of the register is to keep track of people attending the events organized by The Startup Shortcut Oy in order to collect data based on which the events may be further developed.
In addition, the purpose of processing personal data is to send newsletters to the user by The Startup Shortcut Oy.
Other purpose of the processing of personal data is to collect the general statistical information of the visitors for the development of the service on the http://theshortcut.kokku.fi/ website of the The Startup Shortcut Oy.
The data may also be used for marketing of events and other activities organized by The Startup Shortcut Oy.
5. Content of the register
The register contains information about persons signed for newsletter or registered/attending events organized by The Startup Shortcut Oy.
The following information types may be handled in the register:
Basic information on the persons who have attended or registered for events organized by The Startup Shortcut Oy, such as
− first and last names
− contact information
Information relating to events, such as,
− information on attended events
− information on given information
The register may contain amendment information in relation to all types of data listed above.
The Startup Shortcut Oy collects information about the user through third-party services, Google Analytics, Eventbrite and MailChimp services.
6. Regular sources of information
The information is collected in connection with the events organized by The Startup Shortcut Oy, including registration therefor and information given in the events. Information may further be collected when a person on his or her own initiative expresses a wish to, partly or wholly, not to attend events organized by or receive marketing from The Startup Shortcut Oy.
7. Regular destinations of disclosed data
Personal data contained in the register may be disclosed to competent authorities in accordance with and pursuant to the applicable laws.
8. Transfer of data to countries outside the EU or the EEA
Data included in the register may be transferred outside EU member states or the EEA if it is necessary for the aforementioned handling of personal data or the appropriate technical processing of personal data. Applicable data protection legislation will be complied with in connection with such transfer.
9. The principles how the register is secured
Personal data in electronic format is protected by generally accepted technical methods, such as firewalls, user names and passwords. Backups of the register are made on a regular basis. Material containing personal data in any other format is stored in premises with restricted unauthorized access.
Data in the register may only be handled by persons employed by the controller, who, from time to time, need to handle the data as part of their professional tasks and the investigation of the report in question.
The company takes account of applicable laws and provisions issued by the authorities as well as industry association guidelines in order to ensure the confidential treatment of personal data.
10. Rights of the registered person
The data subject has in accordance with Section 26 of the Personal Data Act, right of access to the data on him/her by contacting the controller in person or in written and personally signed form.
The data subject has in accordance with Section 29 of the Personal Data Act, the right to demand that the controller rectifies, removes or supplements data in the register that is erroneous, unnecessary, incomplete or obsolete, taking into consideration the exclusions referred to above. If the controller does not accept the data subject’s request to have the data rectified, a written certificate of this shall be issued to the data subject.