Data Protection

13.11.2024

This is a translation of the official Finnish registration statement.

1. Registrar

Student Union of Metropolia University of Applied Sciences (ID: 2165831-1)

Myllypurontie 1 (PL 4000)

Helsinki (00079 Metropolia)

2. Persons responsible for the register

Name: Sanni Lehtinen

Postal address: Zone – University of Applied Sciences sports services, PO Box 4000, 00079 Metropolia

Email: sanni.lehtinen(at)metkaweb.fi

Phone: 0447696718

3. Contact information for the controller

Name: Sanni Lehtinen

Postal address: Zone – University of Applied Sciences sports services, PO Box 4000, 00079 Metropolia

Email: sanni.lehtinen(at)metkaweb.fi

Phone: 0447696718

4. Processing of personal data

Your personal data can be collected in different ways. As a general rule, we collect and process personal data that;

  • You have given us when you are in contact with us or do business with us, e.g. when you buy our services or register for a service, subscribe to our newsletter or contact us to request an offer or information;
  • Occur when using the service or when visiting the website, e.g. when you log into the service; and
  • Obtained from other sources, to the extent permitted by the applicable laws, e.g. the Student Union member register or the university’s student register, however without limiting the sources to the aforementioned.

You are not obliged to provide us with your personal information, but if you choose to do so, we may not be able to provide you with our service.

We collect and process, for example, the following groups of personal data:

  • Basic information, such as name, contact information (email address, address and phone number, gender, age) and language
  • Information related to the customer relationship, such as service and/or product and order information, payment information, invoicing information, marketing permits and prohibitions;
  • Customer contacts and related correspondence as well as records regarding the rights of data subjects;
  • Personal data generated during the use of our service or data collected in connection with the use of our website, e.g. usernames, passwords, information related to identification, log data regarding the use of the service, data collected from our website using cookies or similar technologies (device ID and type, operating system and application settings); and
  • Other information defined on a case-by-case basis based on your consent, such as, if necessary, information necessary to provide the service, e.g. allergies or other similar information

5. Purpose and legal basis of personal data processing

We only collect and process personal data that is necessary to carry out our activities, manage the customer relationship and for appropriate purposes.

Those registered are in a customer relationship with the Metropolia University of Applied Sciences’ student union.

Information about the customer is obtained according to the rules:

  • From the customer himself via the internet, when dealing at a service point, by phone, using a customer card, by e-mail or in another similar way
  • Using cookies or other similar technologies

We process your personal data for the following purposes:

  • Service provision and customer relationship management
  • We process personal data primarily to offer and deliver our services and products to you or the company/community you represent. In order to do so, we maintain and manage the customer relationship between you or the company/community you represent and us. In this case, the processing of personal data is based on an agreement between you or the company/entity you represent and us.
  • Development of services and products, information security and internal reporting
  • We also process personal data to take care of the data security of the services, products and website, to improve the quality of the service and website, and to develop services and products. We can also prepare internal reports based on personal data for the use of management and our various functional units for the proper management of our operations. We segment our customers for marketing measures based on, for example, the use of services and/or behavior on our website. In these cases, the processing of personal data is based on our legitimate interest to ensure the appropriate data security of our services and websites and to obtain sufficient and appropriate information for the development of services and the management of our operations.
  • Compliance with laws
  • We can process your personal data in order to fulfill our statutory obligations, e.g. regarding accounting or to implement the information requests of the authorities (e.g. the tax authority) based on the law.
  • Customer profiling
  • We collect statistics on, among other things, the use of services on site and when you shop on our website for customer segmentation for the purpose of our sales processes and the development of services and products.
  • Marketing
  • We may contact you to inform you about new features of the service or to market and sell you other services. We can also process your personal data for our own marketing research and customer surveys. The processing of personal data is based on our legitimate interest to provide information as part of the service and to market our other services to you. You have the right to object to the processing of your personal data at any time. Personal data will not be disclosed to third parties for direct marketing (see section 9 of this statement).

6. Transfers and disclosures of personal data

  • The transfer of personal data within the student union is based on our legitimate interest to carry out our activities and manage our customer relationships effectively and to inform customers about our other services.
  • We may also disclose personal data to third parties:
    • to the extent permitted or required by law, e.g. to fulfill a request for information presented by a competent authority or in connection with legal proceedings;
    • when our partners process personal data on our behalf and in accordance with our instructions. We always take care of the proper processing of your personal data;
    • if we are involved in a merger or reorganization of part of our operations;
    • when we believe disclosure is necessary to enforce our rights, protect your safety or the safety of others, investigate misconduct, or respond to a government request;
    • if your user data has been ordered and/or linked by your employer and/or to your employer’s data, we will, for example, hand over your performance data to designated contact persons; and
    • with your consent to the parties to whom the consent applies.
  • Information is not disclosed or transferred outside the EU or the European Economic Area;

7. Cookies

  • We use cookies and other similar technologies on our website. Cookies are small text files that are placed on your device to collect and remember useful information, to improve the functionality and usability of our website. We may also use cookies and other similar technologies for statistical purposes, such as compiling statistics on website usage to understand how users use the website and to improve the user experience.
  • You can prevent the setting of cookies, limit the use of cookies or delete cookies from your browser. Since cookies enable our website to function, restricting the use of cookies may affect the usability of the website.

8. Storage of personal data

  • Personal data is stored only as long as it is necessary to fulfill the purposes of use defined in this statement.
  • Personal data is stored for the duration of the customer relationship. Personal data can be stored to the extent permitted or required by the applicable law even after the end of the customer relationship. For example, after the end of the customer relationship, we typically retain personal data that is necessary to respond to claims or lawsuits in accordance with applicable statutes of limitations. We can also, for example, store personal data to the extent necessary to comply with your direct marketing ban and to develop our services.
  • Personal data is deleted when its storage is no longer necessary to fulfill the law or the rights or obligations of either party.

9. Your rights

  • You have the right to check your personal data. You can also request to correct, update or delete your personal data at any time. Please note, however, that personal data that is necessary for the implementation of the purposes defined in this statement or that is required to be stored by law cannot be deleted.
  • You have the right to object to or limit the processing of your personal data to the extent required by applicable law.
  • When we process your personal data based on consent, you have the right to withdraw your consent at any time. After that, we will not process personal data, unless there is another legal basis for the processing.
  • You can use your rights by sending us a request to info@zonesports.fi or by contacting our customer service.
  • The registered person has the right to check what information about him is stored in the register. The inspection request must be sent in writing to the person in charge of registry matters, or a request for inspection rights must be submitted to our customer service.

10. Data security

  • We take appropriate measures (including physical, digital and administrative measures) to protect personal information from loss, destruction, misuse and unauthorized access or disclosure. For example, only people who need it to perform their work have access to personal data.
  • Note that even appropriate measures cannot prevent all possible data security breaches. In the event of a security breach of personal data, we will notify you in accordance with the applicable laws.

11. Changing the description

  • We reserve the right to change this statement.

12. Contact us

  • You can ask about this statement or the processing of your personal data by contacting us at info(at)zonesports.fi.