We update this Privacy Policy as necessary. We encourage you to regularly check the latest version of the statement on our website.
Privacy Policy for the customer register of Vedä Henkeä ry.
Date: 14 April 2026
1. DATA CONTROLLER
Vedä Henkeä ry, Myllymäenkatu 7 as. 1, 68600 Pietarsaari, Finland
2. CONTACT PERSON FOR REGISTER MATTERS
Contact person: Mika Ahonen, info (at) hurttimurtti. fi
3. NAME OF THE REGISTER
Customer register of Vedä Henkeä ry.
4. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
The legal basis for the processing of personal data under the EU General Data Protection Regulation is the customer relationship between a customer, including a supporter, donor, user of services, or member, of Vedä Henkeä Unelma ry (Hurttimurtti) and Hurttimurtti; the person’s consent; an assignment given by the person; or another lawful or relevant connection.
Personal data may be processed for the following purposes:
Managing, implementing, developing, and monitoring the customer relationship, customer service, and related communications and marketing.
Analyzing, grouping, and reporting customer relationships, implementing the loyalty customer program, and other purposes related to the overall customer relationship and the development of Hurttimurtti’s activities.
Collecting and processing customer feedback and customer satisfaction data.
Conducting market research and opinion surveys.
Profiling purposes described in more detail in section 10 of this Privacy Policy.
Processing tasks may be outsourced to external service providers in accordance with data protection legislation and within the limits set by it.
5. DATA CONTENT OF THE REGISTER
The following types of data, among others, may be stored about the data subject:
Name, customer number, address, telephone number, language, email address, and other necessary contact details.
Data concerning the use and purchase of services, donation data, validity of loyalty customer status, and data concerning the implementation of marketing and communications in various service channels, such as online services.
Content produced by the data subject themselves, such as customer feedback, and additional information provided by the data subject about themselves, such as wishes related to the customer relationship, satisfaction data, interests, or other similar information.
Services desired and used by the data subject, including payment details.
Prohibitions, restrictions, consents, and other choices.
Other information related to the customer relationship, such as data collected from website use that can be linked to the customer, including the user’s IP address, time of visit, visited web pages, browser type used, the web address from which the user arrived at the website, and the server from which the user arrived at the website.
Data related to the processing of information, such as the storage date and data source.
6. RETENTION PERIOD OF PERSONAL DATA
Hurttimurtti stores personal data in the customer register only for as long as necessary to fulfill the purposes described in this Privacy Policy. In addition, certain data may be retained for a longer period insofar as this is necessary to fulfill statutory obligations, such as responsibilities related to accounting, and to demonstrate their proper fulfillment.
7. REGULAR SOURCES OF DATA
Data is primarily obtained from the following sources:
Data stored in the register is obtained from the customer, for example through messages sent via web forms, by email, by telephone, through social media services, from contracts, customer meetings, and other situations in which the customer discloses their data.
Parties providing identification, verification, address, updating, credit information, or other similar services.
The Population Information System of the Population Register Centre and other known systems.
Data provided by other Hurttimurtti partners, such as members of the association, may also be added to the register.
8. REGULAR DISCLOSURES OF DATA AND TRANSFERS OF DATA OUTSIDE THE EUROPEAN UNION OR THE EUROPEAN ECONOMIC AREA
Data is disclosed for the purposes described in section 4 of this Privacy Policy, as well as to Hurttimurtti’s direct marketing register and possible other personal data registers of Hurttimurtti, always in accordance with data protection legislation and within the limits set by it.
Customer data is not disclosed outside parties involved in the production, development, or maintenance of services and communications on behalf of Hurttimurtti, except on the basis of an agreement, separate consent, and/or explicit legal provisions.
Customer data may be transferred outside the European Union or the European Economic Area in accordance with EU data protection legislation and within the limits set by it.
9. DESCRIPTION OF THE PRINCIPLES OF REGISTER PROTECTION
Any manual material is stored in a locked space accessible only to persons who have been separately authorized. Digital material is accessible only through the personal username and password of an authorized employee or partner. There are different levels of access rights, and each user is granted access rights that are sufficient for carrying out their duties, but as limited as possible.
10. PROFILING
As part of the processing of personal data stored in the customer register, Hurttimurtti may also use the data for profiling purposes. Profiling is carried out by creating a customer identifier for the data subject, which allows various data concerning the data subject, generated in connection with the use of the service, to be combined. A profile created in the manner described above may then, for example, be compared with profiles created from other data subjects.
The purpose of profiling is to determine the demand for services and customer behavior.
11. DATA SUBJECT’S RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA AND DIRECT MARKETING (RIGHT TO PROHIBIT)
The data subject has the right, on grounds relating to their particular personal situation, to object to profiling and other processing activities concerning them that Hurttimurtti applies to the data subject’s personal data, insofar as the processing of the data is based on the customer relationship between Hurttimurtti and the data subject. The data subject may submit their objection in accordance with section 13 of this Privacy Policy. In connection with the request, the data subject must specify the particular situation on the basis of which they object to the processing. Hurttimurtti may refuse to comply with the objection request on grounds provided by law.
The data subject may give Hurttimurtti consents or prohibitions concerning direct marketing on a channel-by-channel basis, including profiling carried out for direct marketing purposes.
12. OTHER RIGHTS OF THE DATA SUBJECT RELATED TO THE PROCESSING OF PERSONAL DATA
12.1 Data subject’s right of access to data
The data subject has the right to check what data concerning them has been stored in Hurttimurtti’s customer register. The access request must be made in accordance with section 13 of this Privacy Policy. The right of access may be denied on grounds provided by law. Exercising the right of access is generally free of charge.
12.2 Data subject’s right to request rectification, erasure, or restriction of processing
Insofar as the data subject or user is able to act themselves, they must, without undue delay after becoming aware of an error or after detecting the error themselves, on their own initiative rectify, delete, or supplement any incorrect, unnecessary, incomplete, or outdated data in the register.
Insofar as the data subject is unable to correct the data themselves, the correction request must be made in accordance with section 13 of this Privacy Policy.
The data subject also has the right to request that the controller restrict the processing of their personal data, for example in situations where the data subject is awaiting Hurttimurtti’s response to a request concerning the rectification or erasure of their data.
12.3 Data subject’s right to data portability
Insofar as the data subject has themselves provided data to the customer register that is processed on the basis of the data subject’s consent or assignment, the data subject has the right to receive such data, as a rule, in a machine-readable format, and the right to transfer this data to another controller.
12.4 Data subject’s right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with the competent supervisory authority if the controller has not complied with applicable data protection regulations in its activities.
12.5 Other rights
If personal data is processed on the basis of the data subject’s consent, the data subject has the right to withdraw their consent by notifying Hurttimurtti in accordance with section 13 of this Privacy Policy.
13. CONTACTS
In all questions related to the processing of personal data and in situations concerning the exercise of their rights, the data subject must contact Vedä Henkeä ry customer service at info (at) hurttimurtti. fi or by post at: Vedä Henkeä ry / Customer Service, Myllymäenkatu 7 as. 1, 68600 Pietarsaari, Finland.
Hurttimurtti may, if necessary, ask the data subject to specify their request in writing, and the identity of the data subject may, where necessary, be verified before any further measures are taken.