Privacy policy for the raffle and competition register
General
Ifolor organizes raffles or competitions for its customers or other stakeholders, in which the person participating in the raffle or competition provides Ifolor with their name, contact information and other information that may be provided for the purpose of the raffle or competition.
Ifolor is committed to complying with the EU General Data Protection Regulation (GDPR), which applies in all EU member states from 25 May 2018. With this privacy policy, we inform individuals about the processing of their personal data. Participants must accept the terms of this privacy policy in order to participate in competitions and raffles organized by Ifolor.
Data controller
The data controller of the personal data processed is:
Ifolor Oy (Business ID 0871712-9)
Karhumäenkuja 2
01530
Vantaa
You can ask more about data protection and the processing of personal data:
by email tietosuojavastaava@ifolor.fi or
Ifolor Oy
Data protection officer
Karhumäenkuja 2
01530 Vantaa.
Legal basis and purpose of processing personal data
According to the EU General Data Protection Regulation, the legal basis for processing personal data is the person's consent (documented, voluntary, specific, informed and unambiguous).
The data is not used for automated decision-making or profiling, and the data is not disclosed to third parties.
In connection with raffles and competitions, we collect data so that we can conduct the raffles, contact the winner of the raffles and reward the persons who participated in the raffles or competitions.
Data content of the register
We need your name and contact information to organize a prize draw or competition.
Data disclosure and data transfer outside the EU or EEA
Ifolor transfers personal data to personal data processors to perform services or tasks assigned to them by Ifolor, such as information system maintenance tasks or other data processing tasks. When transferring personal data, we have ensured, among other things, through contractual arrangements that the personal data processor acting on our behalf processes personal data only in accordance with the written instructions we have given to perform the processor's tasks and only for the processing purposes specified in this statement, and that access to personal data is limited to persons who have a need to access personal data related to their tasks.
Data will not be transferred outside the territory of the Member States of the European Union or the European Economic Area, unless it is necessary for the purposes of the processing of personal data or the technical implementation of the processing of data, in which case the transfer of data will comply with the requirements of personal data legislation.
Principles of data protection
The data will be processed with care and the data processed by information systems will be protected appropriately.
The data of the persons participating in the draw will be stored for 30 days after the end of the draw. We will store the data of the winners in accordance with the lottery tax legislation for the current year and the following five years. We will store the data contained in our accounting documents for the current year and the following six years.
In order to better understand our customers' needs and to be able to respond to them, we use the online survey tool of Surveypal Oy, Kauppakatu 3 B 25, 33200 Tampere, Finland ("Surveypal") as part of order processing, which automatically collects and stores data. The data protection of the data collected through the Surveypal form is ensured in accordance with the processing agreement between the controller and Surveypal Oy, which acts as the personal data processor.
Surveypal uses the data it collects to create anonymized reports for us from the online survey. The use of our online surveys and the provision of data is always voluntary. Surveypal's current data protection provisions can be found at https://surveypal.fi/privacy-policy/
Rights of the data subject
A person registered in the register has the right to request that personal data concerning him or her be deleted from the register. Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of the processing of personal data in certain situations.
The request should be sent by email to the controller at tietosuojastovastaava@ifolor.fi.
