General Data Protection Regulation (EU) 2016/679, Articles 12, 13, 14 and 19
Fleminginkatu 34, FI-00510 Helsinki, Finland
Contact information of the Data Protection Officer
Contact information of the Data Controller
Telephone: +358 10 768 0820
Name of the register
S-Business Oy’s campaign, prize draw and competition register
Purpose of personal data processing
Personal data is collected and temporarily stored in order to organise a campaign, prize draw or competition. The data is used for implementing the campaign, prize draw or competition, contacting the winner and delivering a potential prize.
Those participating in a competition or prize draw can provide their separate consent to allow the organiser of the competition to publish the winner’s name and place of residence and/or the participant’s picture or other content in media chosen by the organiser without any separate notification or reimbursement.
Grounds for personal data processing
Personal data is processed based on the following grounds:
- Consent to personal data processing as a part of a campaign, prize draw or competition
- Consent to the publishing of the winner’s name in media chosen by the organiser of the competition or prize draw
- Consent to the publishing of the participant’s answer, picture or other content in media chosen by the organiser of the competition or prize draw
Processed personal data
We may process the following personal data:
- phone number
- email address
Processed personal data groups
- Name and contact information
From where is the personal data obtained?
The personal data is obtained from S-Business Oy’s customer register or collected directly from a person participating in a campaign, prize draw or competition or, upon their consent, through the campaign, prize draw or competition form or social media channel.
Processing of personal data
Transfer of personal data to third countries or international organisations and data protection safeguards used
We do not transfer personal data to third countries outside the European Union or the European Economic Area or to international organisations.
Period for storing personal data or criteria for determining the storage period
The data is stored in S-Business Oy’s campaign, prize draw and competition register and is deleted within one (1) month after the campaign, prize draw or competition has ended.
Rights of the data subject
The right to receive information
Everyone entered in the register has the right to receive information about what personal data is collected, to what purposes it is used, what is the basis for processing the data, and to which receivers data is disclosed.
The data subject has the following rights:
- Right to access the information and right to correct incorrect information
- Right to remove the information when there is no other legal basis for storing the information
- Right to restrict processing
- Right to prohibit direct marketing
- Right to transfer data to another system (in case of automatic processing)
- Right to be informed of personal data breaches
If a data subject wishes to exercise their rights or to get more information on the handling of their personal data, they can contact the S-Business customer service at email@example.com.
The data subject also has the right to file a complaint with the supervisory authority if they consider that the processing of the personal data does not follow the applicable data protection legislation
Significant information related to automated decision-making or profiling
There is no automated decision-making connected to the processing of personal data, and individuals are not profiled.
Impact of personal data processing and general description of technical and organisational security measures
We protect the personal data carefully for the whole duration of its life cycle by using appropriate data protection and information security measures. Only designated employees of S-Business Oy and companies working on the assignment and on behalf of S-Business Oy whose job description requires it have the right to use S-Business Oy’s campaign, prize draw and competition register.
The data system is protected and only designated users have access to it, using personal usernames and passwords. Everyone who processes information contained in S-Business Oy’s competition register has signed a non-disclosure agreement.
We regularly provide training to our personnel who participate in the processing of personal data, and ensure that our partners’ personnel also understand the confidential nature of personal data and the importance of secure processing. We choose our subcontractors with care. We continuously update our internal practices and guidelines.
If, in spite of all our safety measures, personal data ends up in the wrong hands, it is possible that the personal data is misused to the detriment of the account holder. If we notice that such an event has happened, we will immediately begin an investigation and will make efforts to prevent any damage from occurring as a result. We will inform the relevant authorities and data subjects of any information security breaches in accordance with legislative requirements.