European Union General Data Protection Regulation (EU) 2016/679, Articles 12, 13, 14 and 19.
Koy Rewell Galleria, c/o Shopping Mall Rewell 203, 65100 Vaasa. Business ID: 0726791-2
Contact person for related matters
Phone number 050 369 4456 firstname.lastname@example.org
Name of the register
Short-term processing of the customer’s personal data.
(This type of registration includes various competitions and lotteries, where it is typical to destroy the information after a fixed processing time)
The purpose of the processing of data personal
Personal information is collected and stored temporarily for a lottery or competition. The information is used in connection with the lottery or competition, to contact the winner and hand over the possible prize.
By participating in the competition or lottery, the participants give the competition organizer the right to publish the winner’s name and place of residence without separate notice or compensation in the media chosen by the competition organizer.
Reason for the containment of personal data
Personal data is processed as follows:
- Species. 6.1 a) Consent
- Consent of the processing of personal data as part of a competition or lottery
- Consent of publication of the winner’s name and place of residence in media selected by the organizer of the competition or lottery.
Controller’s legitimate interests
The processing of personal data is not based on the legitimate interest of the data controller.
- email adress
In contact with the winner
- phone number
- zip code
- postal district
Processing of personal data groups
Name and contact details
Source and description of the data whether the data was collected from public sources
The personal information is collected for a lottery or competition by the participant himself via a lottery or competition form
We receive the information from the person himself either in writing or orally when contacting the winner
Recipient of personal data
We will not pass on the information in the register to any third party, except to the extent that the information is disclosed to the authorities within the limits permitted and required by applicable law, for example in response to requests for information from authorities.
Transfers of personal data to a third country or international organization and use of protective measures
We do not transfer personal data to third countries outside the European Union or the European Economic Area or to international organizations.
For Facebook and Google Analytics, the website’s statistics and analysis data will be transmitted outside the European Union or the European Economic Area.
Retention period of personal data or the retention period definition for criteria
Personal data in accordance with this report shall only be stored for as long as and to the extent necessary for the purposes of the data processing of the personal data controller.
Lottery or competition: All personal data collected will be destroyed no later than 1 month after delivery of the prize.
Rights of the data subject
The registered person has the following rights:
- The right to access personal data
- Right to correction of information
- Right to delete data
- Right to limited treatment
- Right of objection (on direct marketing)
- Right to revoke approval
- Right to transfer data from one system to another (for automatic processing)
- The right to receive information about the security breach of personal data
If the person wants to exercise their rights or get more information about how his or her personal data is processed, he or she can be in contact with the said contact person for this register.
The person also has the right to make a complaint to the supervisory authority if he or she considers that the personal data is being handled incorrectly in accordance with the data protection regulations.
Withdrawal of consent
The person has the right to revoke his or her consent to the processing of personal data if he or she so wishes. Withdrawal of consent does not affect the legality of the treatment performed before the revocation.
Withdrawal of consent is done by contacting the organizer of the competition or lottery.
Impact of failure to disclose personal information on the agreement
You will not be able to participate in the competition or the draw.
Relevant information for automated decision-making or profiling
The processing of personal data does not involve automated decision-making or profiling based on personal data.
The effects of the processing of personal data and a general description of the technical and organizational security measures
We carefully protect personal information throughout its life cycle by using appropriate data protection and security measures. The system providers of the competition or lottery register process personal data in secure server rooms. Access to personal information is limited and staff are bound by professional secrecy.
We protect personal data through, among other things, proactive risk management and security planning, telecommunications security measures and the use of secure equipment facilities, access control and security systems. Licensing and monitoring are controlled. We regularly train our staff who are involved in the processing of personal data and ensure that the staff of our partners also understand the confidential nature of the personal data and the importance of secure processing. We carefully select the subcontractors we use. We are constantly updating our internal policies and guidelines.
If, despite all our protection measures, personal data ends up in the wrong hands, it is possible that personal data will be misused. If we detect such an incident, we will immediately investigate and try to prevent damage. We will inform the necessary authorities and registrants about the security breach in accordance with the requirements of the law.
A cookie is a small text file that is stored on a user’s terminal and stored there. The information collected via cookies is anonymous and does not contain any personal information. The information can thus not be linked to individuals. Cookies do not damage the user’s terminal or the files stored on it.
Cookies used by the website
- 3 months
- Google Analytics
- 2 years
- Google Analytics
- 1 dag
- For now
- For now
- 15 days
- For now
- 1 year