Privacy Policy

1. The Controller

North Savo Entrepreneurship Society or NSES is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). As the controller, this policy explains how we collect, use, store, and protect your information. 

2. Data We Collect

We collect personal data such as your name, email address, phone number, affiliation, and any relevant details you provide when registering for events or participating in our programs. We do not collect sensitive personal data unless necessary and with your explicit consent. 

3. Purpose and Legal Basis

Your data is used to organize and manage events and programs, communicate with participants, fulfill legal obligations, and inform you about future activities. Processing is based on your consent, contractual necessity, legal obligations, or our legitimate interests.

We process your personal data on the basis of the commercial agreement between you and us (GDPR Art. 6.1(b)), our legitimate interests that arise when you register for an event/a program organised by us (GDPR Art. 6.1(f)), and to comply with the legal obligations applicable to us (GDPR art. 6(c)), such as accounting and consumer protection.

4. Data Retention

We retain personal data only as long as you are a member of NSES or as long as the information is needed. Event-related data is deleted or anonymized after its purpose is fulfilled. Data required for legal compliance, such as accounting, is retained in accordance with applicable laws.

5. Data Sharing and Transfers

Your data may be shared with trusted partners involved in organizing our events and disclosed to authorities if required by law.

These providers cannot use your data for any other purpose: Google for analytics and cloud operations, Tally for forms and data collection, and Luma for event management and registrations.

If data is transferred outside the EU or EEA, we ensure appropriate safeguards in line with GDPR requirements.

6. Your Rights

You have a right: 

  1. to request access to and rectification or erasure of your personal data;
  2. to request that the processing of your personal data is restricted or to object to the processing of your personal data; 
  3. to certain preconditions, to receive your personal data in a structured, commonly used and machine-readable format and to transmit that data to another controller. 

You may exercise the aforementioned rights by contacting the contact person defined above. Where the processing is based on your consent, you have the right to withdraw your consent at any time. Please notice that this will not affect the lawfulness of processing based on consent before the withdrawal.

In case you consider that your rights under the data protection laws are infringed, you may also lodge a complaint with the Finnish Data Protection Ombudsman.

7. Marketing 

Your contact information, such as email addresses, may be retained and used for sending communications about NSES events, programs, and other relevant activities. You have the right to object to such use of your personal data at any time by contacting us.

8. Contact

For any questions or data requests, contact us at [email protected] or you can contact an NSES board member by email from [email protected]..