This is Finnish Artists’ Studio Foundation’s register and privacy statement in accordance with the Finnish Personal Data Act and the EU General Data Protection Regulation (GDPR). We comply with the EU General Data Protection Regulation 2016/679 (”GDPR”), which took effect on 25 May 2018. The purpose of the regulation is to improve the rights of individuals in the management and processing of their personal data.
Name of register: Studio Foundation’s customer and stakeholder register
Controller: Suomen Taiteilijaseuran Ateljeesäätiö sr., Lemuntie 4 D 21, 00510 Helsinki
Business ID: 0878982-7
Contact person: Director Alina Mänttäri, , +358 41 311 8911
Technical implementation of the register: Gruppo Software Oy and Fennoa Oy
Purpose and legal basis of the register
The purpose of the processing of personal data is to keep in contact with Finnish Artists’ Studio Foundation customers, tenants, residents and stakeholders. The legal basis for the processing of personal data under the EU General Data Protection Regulation is the consent of the person, an agreement in which the data subject is party to the legitimate interest of the controller (e.g., a customer relationship, an employment relationship or property management).
Data content of the register
The data stored in the register include: the person’s name, contact details (phone number, email address and postal address), invoicing information, other information related to the customer relationship and the services ordered. The personal identity code and date of birth/death are also recorded in the register in the case of Finnish Artists’ Studio Foundation tenants, subtenants, adults permanently residing in the foundation’s apartment or applicants for a workspace offered for rent.
In the application process for apartments, facilities and residences, the applicant’s information is stored in the register.
The data stored in the register will be deleted five years after the end of the tenant or housing relationship, the end of debt collection or the end of the processing of the application.
Data sources
The information stored in the register is obtained from the customer through application forms, email, telephone calls, agreements, customer meetings and other situations in which the customer discloses their information.
Register security
The register is stored behind protection in an electronic format. Carefulness and confidentiality are observed in the processing of the register. The register is only available to such employees of the Finnish Artists’ Studio Foundation who need the information it contains in their work. A record is left in the register for each procedure.
Data in the personal register or personal data collected for that purpose shall not be disclosed unless the data is disclosed:
- with the consent of the data subject or by commission of the data subject;
- in compliance with a law or decree or an order issued under them;
- in circumstances where the disclosure of personal data is a normal part of the pursuit of such operations; however, such disclosure is subject to the condition that the data subject can be expected to be aware of such disclosure and that it is not sensitive information;
- anonymous data for scientific research or statistics.
Data subject’s rights
The data subject has the right to request the deletion of their data unless the law requires the storage of personal data (e.g., the Accounting Act). The data subject also has the right to review what information about them has been stored in the personal data registers of the Finnish Artists’ Studio Foundation. The right of access is personal. The access request can be made by email or by visiting the office of the Finnish Artists’ Studio Foundation. The person accessing their data must in some way prove their identity before the data concerning them can be disclosed. Access requests are free of charge unless the requests are repeated frequently by the same person or manifestly unfounded.