Register and Privacy Policy in accordance with the General Data Protection Regulation
This privacy policy describes how DocPoint Film Events Association processes personal data of customers and users of online services and how you can influence the processing of personal data. In this case personal data refers to any information from which an individual can be directly or indirectly identified. The association complies with the applicable data protection legislation. The Data Controller and the Data Processor will comply with the applicable General Data Protection Regulation in their activities.
1. Registrar and the contact details
DocPoint-elokuvatapahtumat ry (1736848-5)
Simonkatu 12 B 13, 00100 Helsinki, Finland
docpointfestival.fi/en
2. The person in charge of register matters
Producer Emilia Saarela, emilia.saarela@docpoint.fi
3. Name of the register
The customer, newsletter and accreditation register
4. Collected personal data
The DocPoint Film Events Association’s register contains data necessary for communication and operations. The register controller processes the data only to the extent necessary for the purpose for which it is used. The data is collected in accordance with the purpose of use and its scope varies depending on the purpose of use. Personal data include name, e-mail address, telephone number, address, language, date of birth, country of residence, organisational data, data related to direct marketing authorisations, and other data required for the provision of services.
Personal data is collected when purchasing tickets, subscribing to newsletters, accreditating to the festival, from the customer register of our partners Eventio and when collecting cookie data.
5. For how long are personal data stored?
Personal data are kept in the registers only for as long as necessary and for the purpose for which they were collected. Obsolete and unnecessary data will be destroyed in an appropriate manner. Personal data will be entered in the register in the form in which they were provided by the data subject and will be updated on the basis of the data subject’s instructions or request.
6. How do we use personal data and who do we transfer it to?
Third parties do not have the independent right to use the information they receive from us for purposes beyond the scope of the mandate. We ensure that all our service providers comply with data protection legislation.
The register controller uses the services of Eventio to carry out its ticket sales. Please see the Data Protection Policy of the Register Controller and Eventio here.
We use Mailchimp to send newsletters and press releases, where we collect customer email addresses. Mailchimp is the processor of the personal data held by the Register Controller.
Accreditation for the festival, registration for events, recruitment and responding to enquiries is done through Airtable. Airtable is the processor of the personal data held by the Register Controller.
DocPoint – Helsinki Documentary Film Festival films are viewed online via Eventive. DocPoint’s customer registers as an Eventive user.
DocPoint – Helsinki Documentary Film Festival uses Eventive, a US-based online platform for online viewing and ticketing. By purchasing a ticket through the system, the customer gives permission for their data to be collected by the Eventive system.
For some of the data processed, we use a service provider that may have access to data from outside the EU/EEA, for example from the USA. We are responsible for ensuring that the data is transferred in an appropriate and lawful manner.
7. How do we protect personal data?
The register is password-protected in an electronic system. Access to the register is restricted to employees of the register controller or to employees of service providers with a limited contractual relationship with the controller who need the data for their tasks. Their employees are trained to use the data properly and the processing of customer data requires password authentication. Users of the data in the register are bound by the obligation of professional secrecy.
8. Your rights as a registered individual
The Data Protection Regulation strengthens your rights to influence the processing of your personal data. As a general rule, your request will be implemented within 30 days.
As a data subject, you have the right to access, rectify and erase data stored in the register concerning you. You have the right to restrict and object to the processing of your data, the right to prohibit direct marketing and the right to withdraw your consent.
If you wish to check your stored data, request that it be supplemented/corrected or request that it be deleted from the register, please send your request in writing to the Register Controller. The controller may, if necessary, ask the applicant to prove his or her identity. Contact emilia.saarela@docpoint.fi
For information about your other rights, please visit the website of the Data Protection Ombudsman: https://tietosuoja.fi/en/know-your-rights
9. Changes to the statement
The controller reserves the right to amend this register statement.
DocPoint Film Events association aims to develop its services and offer new ways to participate in DocPoint events. As a consequence, there may also be changes to the storage and use of personal data. In such cases, the privacy policy will be updated. Changes in data protection legislation may also necessitate changes to this policy or parts of it. We will notify customers of any significant changes to the email address provided to us. Minor changes and revisions will be notified in this statement.