1) Privacy Notice
Participation in an event, survey, or raffle

2) Data Controller
Linnan Kehitys Oy, Raatihuoneenkatu 21–23, 13100 Hämeenlinna, Finland
info@linnan.fi

3) Contact Person for Register Matters
Marco Björkskog, marco.bjorkskog@linnan.fi, +358 50 569 5213

4) Data Subjects
The register includes individuals who have participated in an event, survey, or raffle.

5) Legal Basis for Processing
The processing of personal data is based on the individual’s consent. Providing personal data is a prerequisite for participating in a survey or raffle.

6) Purpose of Processing Personal Data
Personal data is processed for organizing events, communication, and conducting raffles.

7) Data Content and Retention Period
The personal data consists of the information provided during registration.
The retention period is one (1) month or the time required for organizing the event.

8) Sources of Data
The data is provided directly by the individual.

9) Regular Disclosures of Data
Data is not regularly disclosed and is not transferred outside the EU.

10) Principles of Data Protection
The data is stored in an information system where users have personal usernames.
Access to the data is restricted to employees of the data controller who require it for their work.
Lawful processing is ensured through data classification and compliance with data handling policies.

11) Rights of the Data Subject
Under the EU General Data Protection Regulation (2016/679), the data subject has the following rights:

• Right to withdraw consent (Article 7)
  The data subject has the right to withdraw their consent at any time.
• Right of access (Articles 12 and 15)
  The data subject has the right to obtain confirmation as to whether personal data concerning them is being processed and to access their data.
  If multiple copies are requested, the controller may charge a reasonable administrative fee.
• Right to rectification (Article 16)
  The data subject has the right to request correction of inaccurate data or completion of incomplete data.
• Right to erasure (Article 17)
  The data subject has the right to request the deletion of their personal data if, for example:
  • the data is no longer needed for its original purpose
  • consent is withdrawn and there is no other legal basis
  • the data subject objects to processing and there are no legitimate grounds
  • the data has been processed unlawfully
  • deletion is required to comply with legal obligations
• Right to restriction of processing (Article 18)
  The data subject has the right to restrict processing in certain situations, such as when the accuracy of data is contested or processing is unlawful.
• Right to data portability (Article 20)
  The data subject has the right to receive their personal data in a structured, machine-readable format and transfer it to another controller, where processing is based on consent and carried out by automated means.

Requests related to these rights should be addressed to:
Linnan Kehitys Oy, Raatihuoneenkatu 21–23, 13100 Hämeenlinna, Finland

This translation has been generated using artificial intelligence.