Privacy Statement for the Processing of Customer Data at Business Turku Ltd
1. Controller
Business Turku Ltd
Joukahaisenkatu 3 A,
FI-20520 Turku, Finland
2. Contact information for matters concerning the register
tietosuoja@businessturku.fi
3. Purpose of the processing of personal data
The purpose for the processing of personal data is to manage the customer and collaboration relationships of Business Turku Ltd, project management and project activities, providing and developing services, organizing events, and communicating about and marketing the services.
4. Groups of data subjects and categories of data
We process personal data of the following groups:
- Customers and company representatives
- Potential customers and representatives of companies belonging to target groups
- Project participants
- Event participants
The categories of data depend on which group you belong to and what data you have provided in the context of the services.
- Contact details, such as name, email address and phone number
- Customer relationship data, such as the content of communications and service history
- Booking and meeting data, such as notes related to meetings
- Marketing communication data, such as marketing permissions/prohibitions, email open and click data, and areas of interest
- Service-specific data, such as services used and feedback given
- Project- and programme-specific data, such as the person’s role in the project
- Event participation and event-specific data, such as registration details, dietary requirements and feedback
- Photographs and videos
5. Legal Basis for Processing Personal Data
Legitimate Interests
Business Turku Ltd processes personal data only to the extent necessary to fulfil the purposes described below and in ways that data subjects can reasonably expect when providing their information.
The legitimate interests of Business Turku Ltd include managing customer relationships, providing and delivering services related to the company’s operations, including organising and marketing events both independently and in cooperation with partners. Photography and video recording at events are announced in advance, and the photos and videos are used solely for the marketing and communications of Business Turku Ltd and its project and programme partners.
Consent of the Data Subject
We process personal data based on the data subject’s consent when required by law or when the processing is not based on legitimate interests or a contract. Processing based on consent includes:
• electronic marketing communications targeted at private individuals
• tracking data related to marketing communications (e.g., email open and click data)
• the use of photographs and videos insofar as consent is required
Performance of a Contract
We process personal data to fulfil a contract to which the data subject or the organisation they represent is a party, or to take steps prior to entering into a contract.
6. Sources of personal data
The data is primarily received from the data subjects themselves, collaborators of Business Turku Ltd and organizations and individuals within the scope of the services of Business Turku Ltd. In addition, data is received from websites and other public sources.
7. Disclosure and transfer of personal data
Personal data may be disclosed to service providers and collaborators of Business Turku Ltd, such as co-organizers of events and financiers of projects. Project data may also be disclosed to others participating in the project and project coordinators.
As a general rule, the data is not transferred outside the EU/EEA countries. In individual cases, contact information may also be disclosed to partners located outside the EU.
8. Storage times for the data
The data is removed at the latest 10 years after the last customer contact. Project data is stored according to project-specific archival times.
9. Profiling and automated decision-making
The processing of personal data does not include profiling or automated decision-making.