Who are we

REGISTRAR

Behalf “RIGA OUTREACH” events in Latvia Via Baltica Ministry CPM-Finland ry, whose abbreviation entered in the register of associations is CPM-Finland

Kalliotie 5, 32740 Sastamala, FINLAND

REGISTRAR CONTACT PERSON

Contact person: Toivo Mäki tel. +371 24 555 778 

NAME OF THE REGISTER

CPM-Finland, customer register.

PURPOSE AND GROUNDS FOR THE PROCESSING OF PERSONAL DATA

The legal basis for the processing of personal data following under the EU General Data Protection Regulation is the customer relationship between a customer (incl. Sponsor, donor, user of services) or a member of Via Baltica Ministry, CPM-Finland and CPM-Finland, the person’s consent, the person’s other legal or substantive connection.

Personal data may be processed for the following purposes:

Management, implementation, development, and monitoring of customer relations, customer service, and related communications and marketing.

Analysis, grouping, and reporting of customer relationships, implementation of the loyalty program, and other purposes related to the development of the total customer base and Key Media operations.

Collection and processing of customer feedback and customer satisfaction data.

Conducting market research and opinion polls.

The profiling purposes are described in more detail in section 10 of this privacy statement.

Processing tasks may be outsourced to and within the limits set by data protection legislation.

What personal information do we collect and why do we collect it

INFORMATION CONTENT OF THE REGISTER

Information such as the following may be stored in the registration:

Name, customer number, address, telephone number, language, email address, and other necessary contact information.

Information on the use and purchase of services, donation information, the validity of loyal customers, and marketing and communications implementation information in various transaction channels, such as online services.

Content produced by the registrant himself, such as customer feedback, as well as additional information provided by himself, such as customer-related wishes, satisfaction information, interests, or other similar information.

Services requested and used by the registrant with payment information.

Prohibitions, Restrictions, Consents, and Other Choices.

Other customer-related information, such as what can be connected to the customer

CPM-Finland collects and processes only the necessary information about the recipients of our newsletter and we are responsible for the security of your information by following all laws. Due to the new GDPR (General Data Protection Regulation), we have updated our privacy policy to meet the new requirements.

STORAGE PERIOD OF PERSONAL DATA

CPM-Finland retains personal data in the customer register only for the time necessary for us to fulfill the purposes described in this report. In addition, some information may be retained for longer to the extent necessary to fulfill and demonstrate the proper fulfillment of statutory obligations, such as accounting and consumer trade responsibilities.

REGULAR SOURCES OF INFORMATION

Information is obtained primarily from the following sources:

The information stored in the register is obtained from the customer e.g. Messages sent via web forms, e-mail, telephone, social media services, contracts, customer meetings, and other situations in which the customer discloses their information.

A party that provides identification, verification, address, update, credit information, or other similar services.

The Population Information System of the Population Register Center, and other known systems.

Information provided by other CPM-Finland partners, such as members of the association and the partner organization, can also be added to the register.

REGULAR TRANSFER OF DATA AND TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION OR THE EUROPEAN ECONOMIC AREA

The information will be disclosed for the purposes described in section 4 of this data protection statement and to CPM-Finland’s direct marketing register and any other CPM-Finland personal registers, however always by following and within the limits set by data protection legislation.

Customer data will not be disclosed outside the parties involved in the production, development, or maintenance of services and communications on behalf of CPM-Finland, except by the following agreement, separate consent, and/or specific regulations.

Customer data may be transferred outside the European Union or the European Economic Area, by following and within the limits set by EU data protection law.

DESCRIPTION OF THE PRINCIPLES OF SECURITY OF THE REGISTER

Any manual material will be kept in a locked room, which can only be accessed by separately authorized persons. Access to digital material is only possible with the personal username and password of an authorized employee or partner. There are different levels of access and each user is given sufficient access to perform the task, but as limited as possible.

PROFILING

As part of the customer, CPM-Finland may also utilize the processing of personal data stored in the register for profiling purposes. Profiling is implemented by creating a customer identifier for the data subject, which can be used to combine various data about the data subject generated in connection with the use of the service. A profile created as described above can then be compared, for example, with profiles created by other registrants.

The purpose of profiling is to find out the demand for services and customer behavior.

RIGHT OF THE DATA SUBJECT TO OBJECT TO THE PROCESSING AND DIRECT MARKETING OF PERSONAL DATA (RIGHT TO PROHIBIT)

The data subject has the right, in connection with his or her special personal situation, to object to the profiling and other processing measures taken by CPM-Finland against the data subject’s data insofar as the processing of the data is based on the customer relationship between CPM-Finland and the data subject. The data subject may submit a statement of opposition by following section of this privacy statement. Sign up for the claim must identify the specific situation based on which he or she objects to the processing. CPM-Finland may refuse to execute a request for opposition on the grounds provided by law.

The registrant may give consent or prohibition to CPM-Finland regarding direct marketing on a channel-by-channel basis, including profiling for direct marketing purposes.

OTHER RIGHTS OF THE DATA SUBJECT RELATED TO THE PROCESSING OF PERSONAL DATA

12.1 Data subject’s right of access (right of inspection)

The data subject has the right to check what information about him or her has been stored in CPM-Finland’s customer register. The request for verification must be made by following section of this privacy statement. The right to inspect may be denied on the grounds provided by law. The exercise of the right of inspection is, in principle, free of charge.

12.2 The data subject’s right to request the rectification, erasure, or restriction of the processing

To the extent that the data subject or the user can act on his own, he shall, without undue delay, upon receipt of the error or, on his initiative, correct, delete, or supplement any incorrect, unnecessary, incomplete, or outdated information in the register.

To the extent that the data subject is unable to rectify the data himself, a request for rectification will be made by following section of this Privacy Statement.

The data subject also has the right to demand that the data controller restrict the processing of his or her data, for example in a situation where the data subject is awaiting a response from CPM-Finland to a request to correct or delete his or her data.

12.3 The data subject’s right to transfer data from one system to another

To the extent that the data subject has himself provided the customer register with data processed under the data subject’s consent or order, the data subject shall have the right to obtain such information in a machine-readable form and to transfer this information to another controller.

12.4 Right of the data subject to complain to the supervisory authority

The data subject has the right to complain to the competent supervisory authority if the controller has not complied with the applicable data protection rules.

12.5 Other Rights

If personal data is processed based on the data subject’s consent, the data subject has the right to withdraw his or her consent by notifying CPM-Finland by following section of this data protection statement.

CONTACTS

In all matters related to the processing of personal data and in situations related to the exercise of one’s rights, the data subject must contact CPM-Finland’s customer service either by phone at +371 24 555 778, by email at info@cpmfinland.info or by post locally in Latvia at CPM-Finland, Ūnijas Iela 99, RIGA, LV-1084. If necessary, CPM-Finland may ask the data subject to specify his / her request in writing, and if necessary, the data subject’s identity may be verified before other measures are taken.