Description of the subscriber data file

Personal Data Act (523/99), section 10

Controller

The Organisation for Respiratory Health in Finland

Name of the data file

Subscriber data file of the Organisation for Respiratory Health in Finland

Purpose of the data file

The purpose of the subscriber data file is the management of customer relations. Data is collected for the purposes of delivering, invoicing and marketing publications, newsletters and products.

Data contents of the file

The data file contains name and address details, telephone numbers, e-mail addresses and invoicing and payment details of customers, individuals and corporations.

Regular sources of data

The data is collected by electronic forms, forms posted to the Organisation for Respiratory Health in Finland, or via e-mail messages or telephone communications. The data of individual customers is updated with Posti’s address update service.

Regular disclosures of data

The controller will rectify, delete or supplement erroneous, unnecessary, deficient or obsolete personal data in the file, either on its own initiative or when requested by the data subject. The processing and registration of personal data is performed in accordance with the Personal Data Act. Data from the data file is not disclosed to third parties.

Transfer of personal data to outside the EU or European Economic Area

No transfers.

Principles of securing the data file

Only employees authorised by their duties and having the required passwords have access to the data file. The data file is protected with user IDs and passwords. The users are bound by a non-disclosure obligation. The interfaces to the information system are secured with technical measures. The information system and materials related to it are stored in a locked room.

Right of access

Registered customers have the right to inspect their data stored in the file. Inspection requests shall be submitted in writing to the Organisation for Respiratory Health in Finland.

Right to prohibit processing

Data subjects have the right to prohibit the disclosure and processing of their data for direct advertising, distance selling or other direct marketing.