This is a privacy notice, which is based on articles 13 and 14 of the EU’s General Data Protection Regulation.
The register
Turku University of Applied Sciences, Theatre in Palm project
Joukahaisenkatu 3, 20520 Turku, Finland
Organization ID: E10012492
Contact person for register matters
Kaisa Adair, Project Manager, Theatre in Palm project (tip@turkuamk.fi)
Contact information of the Data Protection Officer
Data Protection Officer (Turku University of Applied Sciences, Finland)
Please contact in all data protection related matters: tietosuoja@turkuamk.fi
The messages sent to this address are processed by the Data Protection Officer (DPO) and a data protection specialist working with them and as their substitute.
Purpose of processing the personal data
Personal data is collected in order to provide the users the tools for connecting with other users, create posts, make comments and showcase the artistic profile. The personal data will not be used for direct marketing.
Legal basis for processing personal
The legal basis is consent and is based upon the full and transparent information which has been disclosed for those who register to the website. The information of the individuals in the register may be used in the following ways:
- the registered users may contact each other
- the registered users may be contacted by other users
Data contents of the register
The data collected from the website forms a user and stakeholder register of the online service. The register is owned by Turku University of Applied Sciences (until the end of the current project period 5/2025). The external BuddyBoss service provides functionality for data collection.
The following data will be collected upon registration:
- First name and last name
- Email address
- User name
- Profile type (artist/organization)
- Title/profession (optional)
- Expertise (optional)
The registered member can fill in optional data fields later in the profile section.
The visibility of the following data fields can be modified from public to all members/connections/only me. Most of the data fields below are not compulsory to fill in:
- Last name
- Profile type
- Title/Profession
- Expertise
- Description
- Country
- City
- Website
- Interests
- Working languages
The information is stored in a secured database and is kept there until the person decides to delete the account or the platform project and the website are terminated.
Regular information sources
The personal data is obtained when a person registers to the platform or fills in a contact form. The personal data is obtained from the data subjects themselves. The data will not be disclosed to any other third parties that are not mentioned in this statement.
Receivers or receiver groups of personal data
The personal data is received by the Theatre in Palm project coordinating team, which at the moment is Turku University of Applied Sciences (until the current project period ends by 5/2025). Nitro serves as a data processor with access to the relevant data.
Essential information regarding transfer of data to third countries (outside the EU or EEA countries)
The online tools used (see above) may collect data on the user’s visit according to the tools own terms of use and information security. The services’ own terms of use and information security are utilized in the applications of third parties.
Some of the services offered by third parties may be located in countries outside the European Economic Area. Such third parties are for example WordPress, BuddyBoss, Elementor, The Events Calendar and Google. Transfers of personal data are based on standard contract clauses approved by the EU.
Principles of data protection
The data is accessed only by people whose tasks require access to the data. Access to the data is limited with user IDs and user rights. The data is located on a secure server in Finland.
Data subjects’ rights
According to the General Data Protection Regulation, the data subject has the right:
- to receive information on the processing of their personal data, unless otherwise regulated by the law
- to request for access to their personal data and rectification regarding incorrect or insufficient information
- to erase their data (not applied, if the basis for processing is compliance with a legal obligation or performance of a task carried out in the public interest)
- to restrict the processing of their data
- to object to the processing of their data, if the basis for processing is general or legitimate interest
- to request the transfer of data they have submitted themselves from one controller to another, if the basis for processing is consent or agreement
- withdraw the consent they have given
- notification obligation of the controller on the rectification/erasure/restricting of processing of personal data
- not to be subject to automated decision-making (the data subject may allow automated decision-making by their consent)
Data subjects may exercise their rights by contacting the contact person mentioned in the privacy notice or the Data Protection Officer. More information on data subjects’ rights is provided by the contact person and/or Data Protection Officer.
If processing the data does not require identifying the data subject without additional information or the controller cannot recognize the data subject, the right to inspection, rectification, data erasure, restriction of processing, obligation to report and transmittal is not applied.
You have the right to file a complaint with the Data Protection Ombudsman’s office, if you consider that valid data protection legislation has been breached in processing your personal data. The contact details of the DPO can be found in the beginning of the privacy notice. All requests are processed on a case-by-case basis.
