PRIVACY

Privacy Policy

Last updated: 2026-08-22

This Privacy Policy describes how we process and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act when you apply to join our association.

1. Data Controller & Contact Information

During the establishment phase, the founding committee operates as the data controller (Contact: Antti Hernesniemi, email: hernesniemi.antti@outlook.com). Upon official registration with the Finnish Patent and Registration Office (PRH), all data controller rights and responsibilities transfer automatically to the registered non-profit association.

2. Personal Data Collected

We collect information provided directly by you through the membership form: full name, municipality of residence, email address, and confirmation of your AYY (Aalto University Student Union) membership status.

3. Legal Basis and Purpose of Processing

We process your data to evaluate membership eligibility, maintain the mandatory register of members in accordance with the Finnish Association Act (Yhdistyslaki 503/1989), verify student union affiliation, and communicate about association activities. Processing is based on pre-contractual and contractual relationship, compliance with legal obligations, and legitimate interest.

4. Data Processors and Third Parties

We use Supabase (Supabase Pte. Ltd.) as our cloud database provider. Data is processed securely in accordance with a Data Processing Addendum (DPA) and Standard Contractual Clauses (SCCs). We do not sell or disclose your personal data to unauthorized third parties.

5. Data Retention and Security

Access to the member data is restricted strictly to authorized founding committee members and future board members. Data is retained for the duration of your membership and will be deleted upon termination of membership or if your membership application is rejected.

6. Your Rights and Supervisory Authority

Under the GDPR, you have the right to request access to, rectification of, or erasure of your personal data, as well as the right to restrict or object to its processing. To exercise these rights, contact us at hernesniemi.antti@outlook.com. You also have the right to lodge a complaint with the national supervisory authority (Office of the Data Protection Ombudsman / Tietosuojavaltuutetun toimisto, www.tietosuoja.fi).