Marketing Registry Privacy Policy
Päivitetty 26.3.2025
1. Data Controller and Contact Information
Data Controller
Musiikkikoulu Säveltie Oy
Business ID: 3449764-1
Address: Säveltie 5, 00720 Helsinki
Contact Person for Registry Matters:
Eetu Hämäläinen
Email: eetu.hamalainen@saveltie.fi
2. Registry Name and Purpose
Registry Name:
Musiikkikoulu Säveltie Oy's Marketing Registry
Purpose and Legal Basis for Personal Data Processing:
Personal data is processed for marketing and communication purposes. Individuals included in the registry have given their consent to receive electronic messages, newsletters, and other marketing materials from Musiikkikoulu Säveltie Oy. The processing is based on the individual’s voluntary consent as well as the legitimate interest in marketing and conducting business. The data is used to improve communication, target marketing efforts, and develop services.
3. Registry Maintenance and Data Collected
Registry Maintenance:
The marketing registry is maintained using the MailChimp service, an international cloud service for creating and sending email messages and newsletters. MailChimp may store data outside the EU/EEA, but it is committed to complying with GDPR requirements. Access to the service is restricted exclusively to those responsible for marketing at Musiikkikoulu Säveltie Oy.
Data Collected:
The information stored in the registry includes:
- The individual’s first and last name
- Email address
- IP address
4. Data Sources
Data is obtained, among other means, from information provided directly by the individual—for example, through website contact forms, social media platforms, events, or other marketing communications.
5. Data Disclosures and Transfers
Data pertaining to an individual is not routinely disclosed to external parties. However, due to the use of the MailChimp service, data may be processed internationally, including outside the EU/EEA. In such cases, MailChimp is committed to complying with GDPR requirements and ensuring the secure handling of data. Otherwise, data is not transferred outside the EU or EEA by the data controller.
6. Data Retention
Personal data is retained in the marketing registry for as long as the individual continues to receive newsletters or other marketing communications. An individual may withdraw their consent at any time, after which the data will be deleted as soon as possible, unless a legal obligation or other requirement necessitates longer retention.
7. Security Measures
Data processing in the marketing registry is carried out with due care. The data is stored electronically and protected by appropriate technical and organizational measures. Access rights are limited only to those employees whose job functions include managing marketing, and who have committed to confidentiality.
8. Data Subject Rights
Data subjects have the following rights:
- Right of Access: The right to obtain access to their personal data in the registry.
- Right to Rectification: The right to have inaccurate or incomplete data corrected.
- Right to Restrict Processing: The right to request that data processing be restricted.
- Right to Object: The right to object to receiving marketing messages.
- Right to Withdraw Consent: An individual may withdraw their previously given consent, after which the data will no longer be used for marketing purposes.
- Right to Data Portability: The right to receive their data in a transferable format, if the processing is based on consent.
- Right to Erasure: The right to request the deletion of their data from the registry, provided that this does not prevent the data controller from fulfilling its legal obligations.
Requests for access, rectification, or withdrawal of consent should be submitted in writing or from a verifiable email address (see Section 1). The data controller will respond to such requests generally within one month.
9. Right to File a Complaint
If an individual believes that their data has been processed in violation of data protection laws, they have the right to file a complaint with the national data protection authority.
This privacy policy provides a comprehensive overview of how Musiikkikoulu Säveltie Oy uses its marketing registry for marketing and communication purposes. If you have any questions about the processing of your data or wish to exercise your rights, please contact the data controller using the information provided above.
This privacy policy has been prepared in accordance with the EU General Data Protection Regulation (GDPR) and national data protection laws, and it will be updated as necessary to reflect changes in legislation or practices.
