Register Description for Marketing & Communications
1 Introduction
This is a record of processing activities for the processing of personal data on the basis of consent given to MyData Global. The GDPR survey determined that MyData Global is a controller with regard to the marketing register. The register includes the personal data of both company representatives and private individuals. Consent for marketing communications is requested from both types of data subjects.
For the management of joint projects and reporting on them, data from the marketing register is shared with a number of systems containing views or copies of the register in question. Master data is stored in the CRM system. Personal data is also stored in the marketing automation system.
2 Controller, contact information and the Data Protection Officer
MyData Global ry
Maria 01, Lapinlahdenkatu 16
00180 Helsinki
Contact: hello@mydata.org
On detected/suspected information leakage, please send a notice by email to hello@mydata.org
Please note that access to the registry is entitled to the board, core team and if needed, assistants of the core team
3 Basis for processing personal data
The processing of personal data contained in MyData Global’s marketing register is based on the individual’s consent to the processing of his or her personal data.
The personal data will be stored until the data subject requests its erasure, or for a maximum of five years. If requested, personal data will be erased from the marketing register within 30 days.
Only designated users with appropriate roles have access to the register.
4 Description of the categories of personal data and their processing
We collect information so that we can provide you with the best possible visitor experience and personalised service. We aggregate data for profiling intended to target marketing measures and for internal reporting purposes. For instance, we may use the forms on our site to ask for information such as your name, company, email address and phone number plus additional information such as title, job title or organisation.
The information we collect using cookies helps us to find out how and for how long visitors use our site. The information includes the browser and operating system, the number of visits, visiting times and the pages used. A cookie also contains a unique identification number that allows your browser to be identified the next time you visit our site. We also track what kind of searches users make on our site and what browsers, operating systems and computers they use. We may record mouse clicks.
Use of cookies
We use cookies or other third-party methods, for instance, to deliver customised content, to test the site and to search for problems pertaining to the site and to using the site.
We do not use cookies to identify you. Neither do we associate your IP address with you unless you voluntarily send us this information.
Third-party methods
We use third-party service-providers to implement some of the data collection functions with cookies. The functions enable more personalised and engaging communication. MyData Global will not sell, lease or transfer individualised personal information. By using the MyData Global’s or any of its associated websites you agree to data processing in accordance with the above. The collection and processing of data from our websites by third-party service-providers is in accordance with this privacy policy.
Automatic marketing
The automatic marketing tools used by MyData Global utilise third-party cookies. When a user visits our site, an individualised cookie linked to the visit is stored on the user’s web browser. If the user discloses personal information, for instance, by filling in a contact sheet or clicking links in email messages sent by MyData Global, an individualised cookie is linked to the personal information.
Network marketing
MyData Global might use partner services to produce customised network marketing content (such as Twitter ads). Service providers may add cookies to collect information from your visit to the MyData Global website and to provide you with customised and engaging communication produced by MyData Global. The data collected by the service provider is limited to the IP address and cannot be connected to an individual.
E-mail marketing and the distribution of releases
We only share news on MyData Global’s services by e-mail with those who have given their consent. At any time, you can use a link at the bottom of the email newsletter to remove your email address from your selected distribution lists. Email messages may contain cookies, which will let us know if you have opened, read clicked the message. This information helps us to understand if our messages are going through.
The email communication tool used by MyData Global is Mailerlite, a European-based email marketing and automation software as a service. Mailerlite’s Privacy Policy.
Analytics
We use third-party network analytics service Matomo, on MyData Global’s website. We use the information collected by the tool for the development and monitoring of web page use. Matomo’s Privacy Policy.
Links to third-party services
Our website contains links to third-party services, such as share buttons for Twitter and Facebook, through which the service providers may install cookies into the user’s device. The further use of such cookies is beyond MyData Global’s control.
5 Description of the categories of recipients of the data
MyData Global does not disclose personal data from the marketing register to third parties.
6 Information on the transfer of personal data to outside the European Union or European Economic Area
The data are stored within the EU/EEA area. Each transfer of data will be evaluated individually.
With regard to the transfer of personal data to outside of the EU and European Economic Area, MyData Global complies with Directive 95/46/EC of the European Parliament and of the Council and other valid national and international regulations.
7 Description of the storage and deletion of personal data
The personal data will be stored until the data subject requests its erasure, or for a maximum of five years. If requested, personal data will be erased from the marketing register within 30 days.
8 List of Sub-Processors used for the processing of personal data
MyData Global doesn’t use sub-processors for the processing of personal data.
9 Reports on audits
The register has not been audited by the supervisory authority.
10 Rights of data subjects
1. Data subjects have the right to request access to their personal data from the controller, the right to ask for the rectification or erasure of their data, the right to request the restriction of processing or object to the processing, and the right to data portability. Please address queries to hello@mydata.org
Enclose the following information to your query:
information by which you can be identified (at minimum, the e-mail address to which you have subscribed the newsletter)
the role in which you are contacting us (tell us whether you are MyData Global’s current or former employee, job applicant, customer or employed by our customer, recipient of MyData Global’s marketing communications and e-mail newsletters, or other equivalent)
whether you wish to know what data MyData Global has collected on you
whether you would like to rectify the data MyData Global has collected on you
whether you wish to withdraw your consent for receiving MyData Global’s customer communications
2. Data subjects have the right to withdraw their consent at any time. Please address the withdrawal request to hello@mydata.org.
3. Data subjects have the right to file a complaint with the supervisory authority (see tietosuoja.fi).
4. The processing of the register is based on the consent given by the data subject.
5. The data subject has the right to be informed of the existence of automated decision-making, such as the profiling referred to in Article 22, paragraphs 1 and 4, and, at least if such decision-making exists, of the essential details of the logic involved in the processing, along with the significance and possible consequences of the automated processing for the data subject.
6. If MyData Global intends to process the personal data further for other purposes than those for which it was collected, MyData Global will notify the data subject of this other purpose and provide all relevant additional information before beginning such further processing.