Personal Data Act (523/99), section 10
Controller
The Organisation for Respiratory Health in Finland
Name of the data file
Subscriber data file of the Organisation for Respiratory Health in Finland
Purpose of the data file
The purpose of the subscriber data file is the management of customer relations. Data is collected for the purposes of delivering, invoicing and marketing publications, newsletters and products.
Data contents of the file
The data file contains name and address details, telephone numbers, e-mail addresses and invoicing and payment details of customers, individuals and corporations.
Regular sources of data
The data is collected by electronic forms, forms posted to the Organisation for Respiratory Health in Finland, or via e-mail messages or telephone communications. The data of individual customers is updated with Posti’s address update service.
Regular disclosures of data
The controller will rectify, delete or supplement erroneous, unnecessary, deficient or obsolete personal data in the file, either on its own initiative or when requested by the data subject. The processing and registration of personal data is performed in accordance with the Personal Data Act. Data from the data file is not disclosed to third parties.
Transfer of personal data to outside the EU or European Economic Area
No transfers.
Principles of securing the data file
Only employees authorised by their duties and having the required passwords have access to the data file. The data file is protected with user IDs and passwords. The users are bound by a non-disclosure obligation. The interfaces to the information system are secured with technical measures. The information system and materials related to it are stored in a locked room.
Right of access
Registered customers have the right to inspect their data stored in the file. Inspection requests shall be submitted in writing to the Organisation for Respiratory Health in Finland.
Right to prohibit processing
Data subjects have the right to prohibit the disclosure and processing of their data for direct advertising, distance selling or other direct marketing.