Privacy policy for the notification channel

Privacy policy for the Children’s Day Foundation notification channel

Created on: 30 November 2021

Updated on: 30 November 2021

  1. Name of the register

Children’s Day Foundation notification channel

  1. Controller

Children’s Day Foundation / Linnanmäki Amusement Park
Tivolikuja 1, FI–00510 Helsinki, Finland
Tel.: +358 10 5722 200
Business ID: 0116659-8

  1. Contact person in matters related to the register

[email protected]

  1. What personal data do we collect, and why?

In the Children’s Day Foundation notification channel, we only collect and process personal data that is required to fulfil the legal and ethical obligations of the Children’s Day Foundation and to appropriately investigate received notifications. 

Using the notification channel, you can submit notifications anonymously without providing any data on the basis of which you could be identified. The system does not save any data about you that you do not provide.

If you want to submit a notification in your own name or provide other contact details when submitting your notification, we will only use the data to investigate the notification you have submitted. We will not use the data you have provided in any other way.

Personal data also includes any details you have provided in your notification regarding other people, such as their name or position in the company. Please note that if you attach any documents with your notification, it is possible that they include personal data about you or other people. This personal data disclosed intentionally or accidentally with your attachment will be processed appropriately in accordance with this privacy policy, following the confidentiality obligation.

The only source of personal data is the online notification channel service, through which each person submitting a notification provides the personal data they want.

  1. How long do we retain personal data?

We only retain data received through the notification channel to the extent and for as long as is necessary for the processing of each notification. As a rule, any data you have provided through the notification channel will be retained in the system for six months after submitting your notification. If your case is forwarded to the authorities or a court of law, for example, we may retain your data longer as is required to process your case.

  1. How do we protect data?

The system is maintained by the Central Chamber of Commerce, which is responsible for the system’s information security and the fulfilment of the statutory requirements set for the system. The Central Chamber of Commerce will not process any notifications submitted through the Children’s Day Foundation notification channel.

Notifications submitted through the notification channel will be processed by persons appointed by the Children’s Day Foundation. The processors are committed to complying with the confidentiality obligation and to the appropriate processing of data. We protect any data received through the notification channel using appropriate protection measures, such as firewalls, the protection of physical server rooms, access control systems, user rights, and encryption technologies.

Personal data will only be processed in Finland. We will not transfer or disclose any registered data, unless when required to do so by the Finnish authorities if a reported case enters in the criminal investigation process, for example.

  1. What are the rights of data subjects?

When you submit a notification, you will receive a notification code from the system, with which you can log in to the service, access the data you have provided, and monitor the progress of your notification. As the notification code provided by the system is the only way to access your notification afterwards, please keep it safe. We cannot give you another code to access a previously submitted notification. The notification code is only valid during the processing of your notification, until the processor has marked your notification as processed and closed in the system.

As a data subject, you have the right to

  • obtain information about the processing of your personal data, and
  • be notified of any data breach.

If you wish to obtain more information about the processing of your personal data, please contact the controller defined in this privacy policy. Please note that we will always verify the identity of anyone requesting further information before processing their request, and we will assess the conditions of fulfilling each request on the basis of the EU General Data Protection Regulation.

You can contact the Data Protection Ombudsman (www.tietosuoja.fi/en) if you consider that your data has been processed in breach of data protection provisions.