Privacy Notice

Drafted 26 May 2020

1. Data controller

Finnish Arbitration Association
c/o Valle-Veikko Eronen, Secretary of the Association
Krogerus Attorneys Ltd
Fabianinkatu 9, 00130 Helsinki
+358 (0) 29 000 6626

2. Contact person in matters concerning the register

In matters concerning the register, please contact the association by email at info@faa.fi.

3. Name of the register

Member register

4. Purpose of and grounds for processing personal data

The processing of personal data is based on the association's legal obligation to maintain a member register (Associations Act 503/1989, section 11) in accordance with Article 6(1)(c) of the General Data Protection Regulation (EU 2016/679) (GDPR) and on the legitimate interests pursued by the association in accordance with Article 6(1)(f) GDPR.

Personal data is processed for the following purposes:

• maintenance of member register pursuant to section 11 of the Associations Act (503/1989)
• membership management, such as informing the members, management and collection of member-ship fees and other communication with members
• organising events, discussions and training seminars
• development of the association's activities, research, statistics and reporting.

Processing tasks can be outsourced to external service providers in accordance with and within the limitations of data protection laws.

5. Personal data in the register

Inter alia, the following data on the data subject may be stored:

• the name and place of residence of the member
• the title of the member and organisation that they represent
• information concerning membership fees and other possible invoices
• contact information (postal address, email address, telephone number)
• participation in events, such as seminars or other trainings and/or participation in organising thereof
• other possible personal data provided by the data subject themselves.

6. Storage period of personal data

The data controller will store personal data for as long as the data subject is a member of the association and no more than one year after the data subject's membership has ended. However, personal data may be stored even longer if it is necessary in order to fulfil the association's rights or obligations or the purposes of data pro-cessing described in this privacy notice.

7. Regular sources of data

The data subject themselves.

8. Regular disclosure of data and groups of recipients

Data processing tasks can be outsourced to service providers in accordance with and within the limitations of data protection laws. The association ensures that service providers acting on its behalf process personal data in accordance with this privacy notice.

9. Transfer of data outside the EU or the EEA

Personal data can be transferred outside the EU or the EEA in accordance with and within the limitations of data protection laws.

10. Automatic decision making

Personal data will not be subject to such automatic decision making that would have legal or similar effects on the data subjects.

11. Data subject's right to object to processing of personal data

On grounds relating to their particular personal situation, the data subject has the right to object to processing directed to their personal data by the data controller in so far as the data processing is based on the data controller's legitimate interest.

The data subject may make a claim concerning the objection in accordance with Section 14 of this privacy no-tice. The data subject must cite the particular situation on which the objection is grounded in the claim. The data controller may refuse to accept the request on grounds provided for in the law.

12. Data subject's right to object to direct marketing

The data subject has the right to consent to or prohibit direct marketing separately for different marketing channels.

13. Data subject's other rights relating to processing of personal data

Right of the data subject to access their own data (right of inspection)

The data subject has the right to inspect information concerning themselves stored in the register. The request concerning the right of inspection should be made in accordance with the instructions given in Section 14 of this privacy notice. The request concerning the right of inspection may be refused on grounds provided for in the law. Generally, exercising the right of access is free of charge.

The data subject's right to claim rectification, erasure or restriction of processing of personal data

Upon receiving information of or discovering an error, the data subject must, without undue delay, request the data controller to rectify, erase or complete the data stored in the register that is contrary to the purpose of the register or that is incorrect, unnecessary, inaccurate or outdated. Such a request shall be made in accordance with Section 14 of this privacy notice.

In addition, the data subject has the right to request the data controller to restrict processing of their personal data, for example in situations where the data subject is waiting for the data controller's answer to the data subject's request for rectification or erasure of data concerning themselves.

The data subject's right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority if the data controller has failed to comply with the applicable data protection laws in its activities.

14. Contacts

In all questions concerning the processing of personal data and in situations concerning the exercise of rights, the data subjects should contact the data controller. The data subjects may exercise their rights by email by contacting info@faa.fi.