How we collect, use and protect personal data

The controller of personal data described in this policy is Mikkelin auto- ja konealan ammattiosasto ry, a registered non-profit association in Finland, registration number 17780955, registered office Itämerenkatu 21, 00180 Helsinki, Finland. Contact for all privacy matters: info@mikkeliautokone.blog, telephone +358 10 538 2800.

• Membership data: name, date of birth, contact details, employer and occupational title, membership category, joining and termination dates, membership fee payments and workplace representative roles.
• Advisory and support case data: the description of the matter raised by a member, correspondence with the member, and records of actions taken. Such cases may involve data concerning trade union membership, health or employment disputes, which is processed with particular care and strict access limitation.
• Training and event data: course registrations, attendance and completed training records, and dietary or accessibility requirements provided voluntarily for events.
• Enquiry data: the name, email address and message content submitted through our contact page or sent to info@mikkeliautokone.blog.
• Technical data: limited technical information generated when this website is accessed, such as the browser type and pages requested, used only to keep the site secure and functioning.

We process personal data in order to administer membership, to represent and advise members in employment and occupational safety matters, to organise training and events, to communicate with members and enquirers, to manage the association's finances and to comply with legal obligations.

The lawful bases relied upon are: performance of the membership relationship and measures taken at the member's request; compliance with legal obligations, including accounting and association law; the legitimate interests of the association in administering its activities and answering enquiries; and, where special categories of data are involved, Article 9(2)(d) of the GDPR concerning processing carried out by a not-for-profit body with a trade union aim in respect of its members, or the explicit consent of the data subject.

Personal data is not sold, rented or traded. Data may be disclosed only where necessary: to service providers acting on the association's behalf under a written data processing agreement (for example, IT, email and accounting services); to legal counsel or an authority where required to handle a member's case, with the member's knowledge; and where disclosure is required by law. Data is processed within the European Economic Area unless an equivalent legal safeguard for a transfer is in place.

Membership data is retained for the duration of membership and thereafter for the period required by law and by the association's legitimate interest in evidencing the membership relationship. Accounting records are retained for the statutory period. Advisory case records are retained for as long as necessary to handle the matter and to protect the member's and the association's legal position. Enquiry correspondence is deleted once the matter has been concluded and no longer needs to be evidenced. Data no longer required is securely destroyed.

Access to personal data is limited to those officers, representatives and staff who require it for their duties, and is protected by access controls, authentication, secure storage of physical documents and confidentiality obligations. Any personal data breach is assessed and, where required, notified to the Office of the Data Protection Ombudsman and to affected data subjects.

Data subjects have the right to access their personal data; to have inaccurate data corrected; to request erasure where the conditions are met; to restrict or object to processing; to data portability where applicable; and to withdraw consent where processing is based on consent, without affecting prior lawful processing.

Requests should be made in writing to info@mikkeliautokone.blog or by post to Mikkelin auto- ja konealan ammattiosasto ry, Itämerenkatu 21, 00180 Helsinki, Finland. We may need to verify identity before acting on a request, and we respond within one month unless an extension is permitted. A data subject who considers that their data has been processed unlawfully may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

This website is operated with a minimal technical footprint. It does not use cookies for advertising or cross-site tracking. Any strictly necessary technical storage is used only to deliver the site securely and reliably. Should the association introduce analytics or other non-essential technologies in future, this policy will be updated and consent will be requested where the law requires it.

This policy may be updated to reflect changes in our activities or in the law. The current version is always published on this page. All privacy enquiries concerning Mikkelin auto- ja konealan ammattiosasto ry, registration / PRO 17780955, should be addressed to info@mikkeliautokone.blog or telephone +358 10 538 2800.