Privacyseloste
This policy describes how Taruma ry handles personal data and cookies. We comply with the EU General Data Protection Regulation (GDPR) and Finnish data protection law. We handle data carefully and openly — if anything is unclear, ask directly.
IData controller
Taruma ry (Business ID: 3619185-7)
Kuhmo, Kainuu, Finland
Email: info@taruma.fi
IIPurpose of processing
We process personal data for the following purposes:
- Maintaining the member register and communicating with members
- Membership fee invoicing and tracking
- Event communication (newsletters, event invitations)
- Anonymised website visitor analytics
- Fulfilling legal obligations (accounting)
IIILegal basis for processing
We process data on the following grounds (GDPR Article 6):
- Contract: membership and its maintenance
- Legitimate interest: informing members about the association's activities
- Consent: website analytics cookies (Google Analytics)
- Legal obligation: accounting and taxation
IVProcessed data
From supporting members we process the following data:
- Name
- Address
- Email address
- Phone number
- Membership fee information
On the site we use cookies to support site functionality and visitor analytics (see section V).
VCookies
The site uses cookies for two reasons:
- Essential cookies: store your cookie consent choice (localStorage). These do not contain personal data.
- Analytics cookies (optional): Google Analytics 4 (GA4). We measure visitor numbers, page popularity and behaviour anonymously (IP address is anonymised). These are not set before your consent.
You can change cookie consent at any time from this link or from your browser settings.
VIData retention period
We retain member data for as long as membership is valid and one year after membership ends. Accounting-related data is retained according to Finnish Accounting Act requirements (6 years). Analytics data is retained in Google Analytics by default for 14 months.
VIIData transfers
We do not sell or transfer personal data to third parties for marketing purposes. Use of Google Analytics may transfer data outside the EU (Google LLC, USA). Google has committed to EU Standard Contractual Clauses (SCC) to guarantee data protection.
VIIIData subject rights
Under GDPR you have the right to:
- Check the data stored about you
- Demand correction of incorrect data
- Demand data deletion ("right to be forgotten")
- Restrict data processing
- Withdraw your consent at any time
- File a complaint with the data protection authority (tietosuoja.fi)
You can exercise your rights by contacting info@taruma.fi.
IXChanges to the policy
We may update this policy as our activities or legislation change. We'll announce significant changes on the home page and to members directly.