Suosikit

Privacy policy for Greenreality services

Data Controller

Vitality and Urban Development Committee (Elinvoima- ja kaupunkikehityslautakunta)
Villimiehenkatu 1
FI-53100 Lappeenranta
Tel.: +358 (0)5 6161 (exchange)
E-mail: kirjaamo@lappeenranta.fi

 

Contact person for the data resource


The contact person is the party in charge of organising the event. The contact person’s details are indicated separately in connection to each event registration.

 

Data protection officer


Ilona Sidoroff

tietosuoja@lappeenranta.fi
Tel.: +358 (0)40 768 1336

 

Purpose of processing personal data


The personal data is processed for the following purposes related to events organised by the City of Lappeenranta’s Greenreality services:
• Registration
• Managing and communicating about event-related arrangements
• Collecting event-related feedback

 

Personal data to be processed


The data subjects are persons who have registered for any event organised by the Greenreality services.
The following details may be collected directly from the data subjects in the context of registration:
• First name and last name
• E-mail address
• Telephone number
• Company/organisation
• Job title
• Special diet
• Name of possible companion or escort
• Permission for photography
Only the details that are necessary for registering for and participating in the event in question are collected in the context of registration.

 

Are special categories of personal data processed (GDPR, Article 9)?


Information on special diets can be requested for possible meals.

 

Grounds for the processing


The processing of personal data is based on the public interest of the controller (GDPR, Article 6(1)(e)).

 

Information sources of the data resource


The information is collected from the data subjects themselves.

 

Is the provision of information required by law or an agreement? What are the consequences of refusing to provide the information?


Registrants who do not provide the requisite details cannot take part in the event in question.

 

Systems used to maintain the data resource


Depending on the person organising the event, registrations are collected either by e-mail or through a registration system. The City of Lappeenranta uses the following applications: Lyyti, Questback, MS Forms, Tapahtumakone.
The register is maintained in MS Teams, the M-Files document and the content management system.

 

Is the information contained by the data resource in digital or physical format?

The data is primarily processed in digital form.

 

Have any of the data processing activities been outsourced?


As a general rule, personal data is not disclosed to parties outside the City of Lappeenranta. However, event organisation may require information to be disclosed to the parties involved in the arrangements.
The City of Lappeenranta has entered into a framework agreement on the provision of conference and facilitation services.

 

Principles of data protection


Using the information systems requires a personal username and password.
Personal data is only processed by persons involved in event organisation.

 

Disclosure of information contained by the data resource


No information in the register is disclosed to other parties.
However, event organisation may require information to be disclosed to the parties involved in the arrangements.
Furthermore, personal data may be processed by the service provider responsible for the invoicing of sales and purchases, Meidän IT ja talous Oy (Meita).

 

Automated decision-making and profiling


No automated decision-making is related to the information collection.

 

Disclosure of information outside the EU/EEA area


As a general rule, personal data is not disclosed to parties outside the City of Lappeenranta. If the event is part of an international project, information must be disclosed to the financing authority and the project partners, if so necessitated by the financial terms and conditions.
In the exceptional event that an event partner is located outside the EU or EEA, information on the disclosure of data to any such partner will be provided separately in the context of event registration.

 

Data storage periods or the principles based on which they are determined


The City of Lappeenranta will process personal data for as long as it is necessary for event participation. If the event is part of an international or national project, the storage period is determined by the financing authority. The typical data storage period is 10 years from the last payment of the project.

 

Rights of data subjects


Right to receive information on the processing of personal data


The controller must describe the processing of personal data in a clear and transparent manner.


Right to access one’s own data


As a data subject, you can check which of your personal details are being processed. We recommend using an electronic form that requires strong authentication. 


Right to request the rectification of personal data


If you notice that your personal data is erroneous or inaccurate, you can request the rectification of your data. To do so, please contact the person responsible for the register.


Right to restrict the processing of your personal data


In some specific cases, you are entitled to request the processing of your data to be restricted until your data has been appropriately checked and rectified or supplemented.


Right to lodge a complaint with a supervisory authority


If you find that your rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Finland, this supervisory authority is the Data Protection Ombudsman.