PRIVACY POLICY

General Data Protection Regulation (EU) 2016/679, Articles 12, 13, 14 and 19

Data controller

S-Business OyFleminginkatu 34, FI-00510 Helsinki, Finland 
Business ID 2389183-8

Contact information of the Data Protection Officer

tietosuojavastaava@sok.fi

Contact information of the Data Controller

S-Business Oy
Email: s-business@sok.fi 
Telephone: +358 10768 0820 

Name of the register

S-Business Oy’s campaign, prize draw and competition register

Purpose of personal data processing

Personal data is collected and temporarily stored in order to organise a campaign, prize draw or competition. The data is used for implementing the campaign, prize draw or competition, contacting the winner and delivering a potential prize.

Those participating in a competition or prize draw can provide their separate consent to allow the organiser of the competition to publish the winner’s name and place of residence and/or the participant’s picture or other content in media chosen by the organiser without any separate notification or reimbursement.

Grounds for personal data processing

Personal data is processed based on the following grounds:

• Consent to personal data processing as a part of a campaign, prize draw or competition 
• Consent to the publishing of the winner’s name in media chosen by the organiser of the competition or prize draw 
• Consent to the publishing of the participant’s answer, picture or other content in media chosen by the organiser of the competition or prize draw

Processed personal data

We may process the following personal data:

• name 
• phone number 
• email address 
• address

Processed personal data groups

• Name and contact information

From where is the personal data obtained?

• The personal data is obtained from S-Business Oy’s customer register or collected directly from a person participating in a campaign, prize draw or competition or, upon their consent, through the campaign, prize draw or competition form or social media channel.

Processing of personal data

The personal data is processed in digital systems and services for the purposes specified in this Privacy Policy. We use external service providers in the production of system and support services. Personal data can be transferred to said service providers insofar as the service providers in question participate in the implementation of measures within the framework of the relevant assignment.

Transfer of personal data to third countries or international organisations and data protection safeguards used

We do not transfer personal data to third countries outside the European Union or the European Economic Area or to international organisations.

Period for storing personal data or criteria for determining the storage period

We store the personal data according to this Privacy Policy only for the time and in the extent to which they are necessary, and we utilise them for activities connected to the reported purposes for processing.  

The data is stored in S-Business Oy’s campaign, prize draw and competition register and is deleted within three (3) months after the campaign, prize draw or competition has ended.

Rights of the data subject

The right to receive information

Everyone entered in the register has the right to receive information about what personal data is collected, to what purposes it is used, what is the basis for processing the data, and to which receivers data is disclosed.

The data subject has the following rights: 

• Right to access the information and right to correct incorrect information 
• Right to remove the information when there is no other legal basis for storing the information 
• Right to restrict processing  
• Right to prohibit direct marketing  
• Right to transfer data to another system (in case of automatic processing) 
• Right to be informed of personal data breaches 

If a data subject wishes to exercise their rights or to get more information on the handling of their personal data, they can contact the S-Business customer service at s-business@sok.fi.  

The data subject also has the right to file a complaint with the supervisory authority if they consider that the processing of the personal data does not follow the applicable data protection legislation.

Significant information related to automated decision-making or profiling 

There is no automated decision-making connected to the processing of personal data, and individuals are not profiled.

Impact of personal data processing and general description of technical and organisational security measures

We protect the personal data carefully for the whole duration of its life cycle by using appropriate data protection and information security measures.  
 
Only designated employees of S-Business Oy and companies working on the assignment and on behalf of S-Business Oy whose job description requires it have the right to use S-Business Oy’s campaign, prize draw and competition register. 

The data system is protected and only designated users have access to it, using personal usernames and passwords. Everyone who processes information contained in S-Business Oy’s competition register has signed a non-disclosure agreement. 

We regularly provide training to our personnel who participate in the processing of personal data, and ensure that our partners’ personnel also understand the confidential nature of personal data and the importance of secure processing. We choose our subcontractors with care. We continuously update our internal practices and guidelines. 

If, in spite of all our safety measures, personal data ends up in the wrong hands, it is possible that the personal data is misused to the detriment of the account holder. If we notice that such an event has happened, we will immediately begin an investigation and will make efforts to prevent any damage from occurring as a result. We will inform the relevant authorities and data subjects of any information security breaches in accordance with legislative requirements.