Lahti International Writers’ Reunion – Privacy Policy
This is the privacy and data protection statement of the Lahti International Writers’ Reunion (Lahden kansainvälinen kirjailijakokous ry), prepared in accordance with the Finnish Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared on 22 January 2019. Last updated on 22 January 2019.
Controller
Lahti International Writers’ Reunion (Lahden kansainvälinen kirjailijakokous ry)
P.O. Box 91
FI‑15141 Lahti, Finland
Contact Person Responsible for the Register
Data Protection Officer Lahti International Writers’ Reunion
Lahti International Writers’ Reunion
P.O. Box 91
FI‑15141 Lahti
Finland
paasihteeri@liwre.fi
Data subjects must contact the above‑mentioned address in writing regarding all matters related to the processing of personal data and the exercise of their rights.
Name of the Register
Participant Register of the Lahti International Writers’ Reunion
Purpose of Processing Personal Data
The personal data register is maintained to enable communication between the event organiser and the participants. The register contains the contact information of those participating in the Lahti International Writers’ Reunion.
Data Content of the Register
The register contains the following information about participants:
- name
- contact details
- year of birth
- possible dietary restrictions
Contact Person Responsible for the Register
Data Protection Officer Lahti International Writers’ Reunion
Lahti International Writers’ Reunion
P.O. Box 91
FI‑15141 Lahti
Finland
Data subjects must contact the above‑mentioned person in writing regarding all matters related to the processing of personal data and the exercise of their rights.
Name of the Register
Participant Register of the Lahti International Writers’ Reunion
Purpose of Processing Personal Data
The personal data register is maintained to enable communication between the event organiser and the participants. The register contains the contact information of those participating in the Lahti International Writers’ Reunion.
Data Content of the Register
The register contains the following information about participants:
- name
- contact details
- year of birth
- possible dietary restrictions
The introductory text and photograph requested on the registration form will be published in the event’s brochure for participants and on the website of the Lahti International Writers’ Reunion. Participants’ contact details or any other personal information stored in the register will not be published in the brochure or on the website.
Regular Sources of Data
The information stored in the register is collected from participants via the registration form.
Regular Disclosure of Data and Transfer of Data Outside the EU or EEA
As a rule, data is not disclosed to third parties. Information may be published only to the extent agreed with the participant. The controller does not disclose personal data to external parties except when required by Finnish authorities. Data is not transferred outside the EU or the EEA.
Principles of Register Protection
The register is processed with due care, and data processed through information systems is appropriately protected. The physical and digital security of internet servers and related equipment is ensured. The controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose duties require such access.
Right of Access and Right to Rectification
Participants have the right to inspect their personal data in the register. Requests must be made in writing and addressed to the contact person responsible for register matters (contact details above).
Other Rights Related to the Processing of Personal Data
A person whose data is stored in the register has the right to request the deletion of their personal data (“right to be forgotten”). They also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Requests must be submitted in writing to the controller. The controller may, if necessary, request the person making the request to verify their identity. The controller will respond within the time frame set out in the GDPR (generally within one month).