Data Protection Policy

This is the DATA PROTECTION POLICY of the Department of Culture of the Municipality of Inari in compliance with the General Data Protection Regulation by the European Union (GDPR). Created on 24 May 2018. Latest change 24 May 2018.

 

1. Controller

Municipality of Inari / Education and Culture Department / Department of Culture, Piiskuntie 2, 99800 Ivalo

 

2. Contact person

Secretary of Cultural Affairs, mirja.karjalainen@inari.fi, 040 776 7546

 

3. Name of the register

Inari Weeks marketing register

 

4. Legal basis and the purpose of processing personal data

The data stored in this register is used for the marketing and communication purposes of Inari Weeks.

 

5. Contents of the register

The register contains the email addresses of newsletter subscribers and their name, if the said subscribers provide their name when subscribing to the newsletter.

 

6. Regular sources of information

The data recorded in the register is received from those who subscribe to the newsletter on the Inari Weeks website (www.inariviikot.fi). Data on event organisers, partners and other interest groups collected through the communication of information related to Inari Weeks may be recorded in the register with their consent.

 

7. Regular disclosure of data and transfer of data outside the EU or EEA

The Marketing Register is located on the MailChimp server in the USA. MailChimp has a Privacy Shield Framework, which complies with EU legislation. For further information about MailChimp's privacy practices, visit https://mailchimp.com/legal/privacy/.

 

The Department of Culture of the Municipality of Inari does not disclose or transfer data outside the EU or the EEA.

 

8. Data protection principles

The marketing register is located in the newsletter software used by the Department of Culture of the Municipality of Inari. Access to the register is only permitted to the personnel of the Department of Culture and companies authorised by the Secretary of Cultural Affairs (Viestintätoimisto Lapin Loitsu, WTF Design Oy) in order to assist in the design and creation of marketing materials related to Inari Weeks. The newsletter software is password protected.

 

9. Data subject’s access to data, right to request the correction or deletion of personal data

Every data subject has the right to request access to their personal data in the register and the correction or completion of inaccurate or incomplete data. If you wish to access your personal data or have it corrected or deleted from the register, please send a written request to the controller. The controller will reply within the deadline set in the General Data Protection Regulation.