Privacy Notice

1. Data Controller

HEH – Hyvän elämän hautomo, Good Life Think and Do Tank ry
(Business ID: 3599345-2)

Registered office: Helsinki, Finland

The members of HEH are individual members. Maintaining the association’s membership register requires the processing of personal data.

For matters concerning the processing of personal data, the Board of the association can be contacted at: board@hehthinktank.com

2. Name of the Register

Membership Register of HEH – Hyvän elämän hautomo, Good Life Think and Do Tank ry

3. Purpose and Legal Basis for Processing Personal Data

Personal data are processed for the following purposes:

● maintaining membership
● member communications (e.g. meeting invitations, events, notices)
● fulfilling statutory obligations under the Finnish Associations Act
The legal bases for processing are:
● performance of a contract (membership relationship)
● compliance with a legal obligation of the data controller (Finnish Associations Act)
● consent of the data subject for voluntary data; consent may be withdrawn at any time

4. Contents of the Register

The register contains the following data:
● name
● municipality of residence
● email address
● membership start and end date

Voluntary data:
● phone number
● participation in a working group
● areas of interest in the association's activities

The association maintains a membership list as required by law. The data required for membership (name, city / town of residence, email address) are necessary for the administration of membership. Without these data, membership cannot be processed.

5. Regular Sources of Data

The data are obtained directly from the member through the membership application form.

6. Disclosure and Transfer of Data

Personal data are not disclosed to third parties without a lawful basis.

Member communications are managed using Google Workspace (Google). Personal data may also be processed outside the EU/EEA due to the technical implementation of the service provider. Any such transfers are carried out in accordance with applicable data protection legislation and appropriate safeguards.

7. Data Retention

Personal data are retained for the duration of the membership.

After termination of membership, personal data are retained for a maximum of two (2) years, after which they are deleted.

Accounting-related data are retained for the period required under Finnish accounting legislation.

8. Rights of the Data Subject

Requests concerning the exercise of rights must be submitted in writing to the data controller.

The data subject has the right to:
● obtain information about the processing of their personal data
● access their personal data
● request rectification of inaccurate data
● request erasure of their data where there is no lawful basis for processing
● request restriction of processing in certain situations
● lodge a complaint with a supervisory authority

The supervisory authority in Finland is the Office of the Data Protection Ombudsman.

9. Data Security

Personal data are processed confidentially.

Data are stored in electronic systems with restricted access.

Access to the membership register is limited to members of the association’s Board to the extent necessary for the performance of their duties.

10. Changes to the Privacy Notice

The association may update this Privacy Notice as necessary.