Privacy policy
This is the privacy policy for ruskeattytot.fi site. Everything that we do is guided by our values – including our editorial approach and how we use data.
We use your personal data for many reasons, from understanding how our users engage with our content to informing our marketing and advertising. This allows us to publish content that you want to read.
These are the main reasons why we collect and use data about our users:
To show you content that is relevant to you and to improve your experience on our site
To provide the services you sign up for, such as the newsletter or raffles
To conduct marketing analysis and communicate with you when we have your permission, or when it is permitted by law
To enable advertising on our sites.
We think carefully about our use of personal data, and below you can find the details of what we do to protect your privacy. This policy covers, among other topics:
Clarity about our dealings with you and transparency about how we collect and use your personal data
Commitments on how we protect your personal data
Commitments on how we will facilitate your rights and respond to your questions.
Information about your rights and our obligation.
1. Data Controller
Ruskeat Tytöt ry
Email: info(at)ruskeattytot.fi
2. Group of data subject
People who have signed up for our content eg. newsletters and raffles.
3. The purpose of processing personal data
Data protection law in European Union requires a lawful basis for collecting and retaining personal data from citizens or residents of the European Economic Area. These lawful bases include:
Performing a contract between Ruskeat Tytöt and the customer
Legal compliance with laws and regulations
Legitimate interests for operating, in a way that does not materially impact our customer’s right, freedom or interest.
Personal data stored at Ruskeat Tytöt ry is used for managing the relationships with customers. The collected data may be used for digital marketing purposes and possible future customer satisfaction surveys pursuant to applicable laws.
4. Information Collected
The following data may be processed by Ruskeat Tytöt ry:
customer name, date of birth, gender, e-mail address(es), telephone number(s) and mailing address(es).
information related to the customer relationship
information related to other communication, services and campaigns directed at and offered to the customers/readers, other communication, and measures related to the customer relationship
5. Regular sources of information
Most of the basic information is collected from the data subjects themselves at the beginning of and during the customer relationship. Any possible updates done to information is done by the request of the data subject themselves.
6. Protection of data during transfer
Ruskeat Tytöt may disclose personal data within the limitations imposed by effective legislation as follows:
on the basis of a data subject’s consent
to authorized third parties to the extent they participate in the fulfilling of the agreement between Ruskeat Tytöt and the customer. Ruskeat Tytöt obliges third parties to keep confidential all personal data disclosed to them and to secure such personal data in an adequate manner
on the basis of mandatory legislation.
Disclosures and transfers outside of the European Economic Area:
Ruskeat Tytöt may transfer personal data outside of the European Economic Area.
for the purpose of fulfilling its obligations, Ruskeat Tytöt may transfer customer personal data to internal or external recipients who may be in countries offering different levels of personal data protection.
For technical and practical reasons relating to usage, data may be stored on servers of third-party service providers used by Ruskeat Tytöt.
7. Rights of the data subjects
Data subjects are, within the limitations imposed by applicable law, entitled to
check what data Ruskeat Tytöt ry has collected of them
require that any incorrect, useless, incomplete or outdated information be corrected or removed.
prohibit Ruskeat Tytöt from processing their personal data for the purposes of direct marketing, market research and opinion polls.
request a downloadable copy of their personal data.
request deletion of customer account – Ruskeat Tytöt may retain certain information as required by law or as necessary for legitimate business purposes.
Data subjects may use their above rights by contacting Ruskeat Tytöt at the addresses stated at the beginning of this policy.
8. Retention
Tangible material (paper registration forms) is disposed of after the data has been saved into the register. Before the disposal, the material will be saved in a locked space. Use of the data within the Data Controller’s organisation has been instructed, and access to the personal data file is restricted so that access to the information stored in the system and the right to use that information is only vested in those employees of the Data Controller who have such right on the basis of their work assignments. The data processing system is protected by data protection software for the operating system. Access to the system requires that each user of the register enters a user ID and password.
Ruskeat Tytöt will retain customer information as long as customer account is active, as necessary to provide the customer with the services or otherwise set forth in this Policy. Ruskeat Tytöt will also retain and use this information as necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements and protect Ruskeat Tytöt’s rights.
9. Links to other websites and services
Ruskeat Tytöt website may include links to other websites or services whose privacy may differ from Ruskeat Tytöt. When the customer uses a link to an external site or service, the privacy policy and data processing disclosures for that site or service governs over Ruskeat Tytöt’s.
10. Data Protection Authority
Subject to applicable law, if customer is a citizen or resident of the European Economic Area, they also have the right to
object to Ruskeat Tytöt site’s use of their personal information, and
lodge a complaint with their local data protection authority or the European Union Information Commissioner’s Office.