Privacy policy - recognition award and scholarship applicant register
Controller
Einari Vidgrén Foundation
Kirkonsalmentie 75, 74120 Iisalmi, Finland
Contact information for register-related matters
Sirpa Vidgren
sirpa@tilitulkki.com
Name of the register
Recognition award and scholarship applicant register
Grounds for and purpose of the processing of personal data
Grounds for the processing of personal data:
The Einari Vidgrén Foundation’s legitimate interest: the processing of personal data is necessary for processing the recognition awards and scholarships applied for from the Einari Vidgrén Foundation.
Personal data are collected and processed to give a recognition award or scholarship to the person (candidate) proposed by an applicant for the Einari Vidgrén Foundation. Personal data are collected and maintained for the following purposes:
maintaining contact with applicants; and
evaluating candidates.
Data content of the register
The register can include the following data necessary for the Einari Vidgrén Foundation:
the applicant’s name and email address, and the name of the company they represent; and
the candidate’s name, and the name of the company they represent.
Data sources of the register
Personal data are collected from applicants when they submit their application.
Disclosure of data
No data will be disclosed to third parties.
To process data as described in this privacy policy, the Einari Vidgrén Foundation can use subcontractors in building an electronic application system. Regardless of any subcontracting chain, the Einari Vidgrén Foundation remains, at all times, the controller of the personal data described in this privacy policy and is responsible for the activities of its subcontractors as for its own activities. The Einari Vidgrén Foundation will enter into data processing agreements with its subcontractors to ensure that they are committed to protecting the registered personal data as described in this privacy policy.
For technical reasons and the method of processing personal data, data may be held by a subcontractor.
We may transfer personal data outside the EU/EEA. Whenever personal data are processed outside the EU or the EEA, we will ensure that the subcontractor in question is committed to complying with the EU Commission’s standard contractual clauses concerning the processing of personal data.
Protection and retention of data
Only those who have the right to process data subjects’ data as part of their job description are entitled to use systems that contain personal data. The register is protected my necessary technical and organisational means. Each user has their own username and password for systems.
The personal data described in this privacy policy will be retained for as long as their data content is useful in the provision of the service in question.
When the use of personal data is no longer necessary for the aforementioned purposes, the data will be erased from the register manually.
Rights of data subjects
Data subjects have the right to access their personal data saved in the register and to request any incorrect data to be rectified or erased. Requests concerning the matter must be submitted in person or in writing to the contact person stated in Section 2.
As a data subject, you have the right to object to the processing of your personal data within the limits required by law or to request the processing of your personal data to be restricted, and to lodge an appeal on the processing of personal data with the supervisory authority.
For specific personal reasons, you also have the right to object to the processing of your data when data are processed on the grounds of legitimate interests. When submitting your request, you need to indicate the specific situation based on which you object to the processing of data. We may only refuse to fulfil your request in which you object to the processing of data on legal grounds.
Contact
With regard to all questions and requests concerning personal data, data subjects should contact the person responsible for the Einari Vidgrén Foundation’s personal data register stated in Section 2.