Lottery and competition register
1. Register owner
HelsinkiNYC International Oy
Lapinlahdenkatu 16, 00100 Helsinki, Suomi
2. Contact person responsible for the register
Head of Product Development, Data Protection Officer
3. Name of the register
HelsinkiNYC International Oy - Lottery and competition register
4. Legal basis and purpose of the processing of personal data
HelsinkiNYC International Oy organizes competitions and raffles, for example, on social media and various events. Contact information will be collected from participants to announce the competition or raffle results and to carry out the prize distributions.
5. Information content of the register
Depending on the competition or lottery, the first name, surname, year of birth, address, e-mail address, telephone number, and other such information might be collected in the register.
6. Deletion of the contents of the register
The controller retains the lottery contest participants' data for six months, after which the data in either physical or electronic materials will be destroyed and no longer available.
7. Sources of information
Competition and lottery forms (paper or electronic) as well as the social media accounts of the participants and additional information provided by the participant.
8. Data disclosures and transfers of data outside the EU or the EEA
The information is not regularly disclosed to other parties. Some of the data is located in cloud services used by TinyApp, which may be located outside the EU and the EEA. Information may be published to the extent agreed with the competition participant.
9. Security principles of the register
The register is handled with great care, and the information processed by information systems shall be adequately protected. When register information is stored on Internet servers, the physical and digital security of these servers is adequately addressed. The controller shall ensure that the data stored, as well as the access rights to the servers and other information critical to the security of personal data, are treated confidentially and only by the employees whose job description it is. Paper lottery and competition forms will be archived correctly in a locked cabinet located in an access-controlled room.
10. Right of inspection and right to request correction of information
Every person in the register has the right to check the information stored in the register and to request the correction of any incorrect information or the completion of incomplete information. If a person wishes to review or request the correction of data stored about him or her, the request must be sent in writing to the data controller. If necessary, the controller may ask the applicant to prove his or her identity. The controller will respond to these requests within the timeframe set out in the EU Data Protection Regulation (generally within one month).
11. Other rights related to the processing of personal data
A person in the register has the right to request the removal of his or her personal data from the register ("the right to be forgotten"). Data subjects also have other rights under the EU's general data protection regulation (GDPR), such as restrictions on the processing of personal data in certain situations. Requests must be sent in writing to the controller. If necessary, the controller may ask the applicant to prove his or her identity. The controller will respond to these requests within the timeframe set out in the EU Data Protection Regulation (generally within one month).