Privacy Policy

Climatechangemaker -project’s privacy policy

DATA CONTROLLER
The Finnish National Youth Council Allianssi
(hereinafter “the National Youth Council Allianssi”)
(Business ID: 0116583)
Asemapäällikönkatu 1, FI-00520 Helsinki
tel. +358 44 416 5202, info@alli.fi

CONTACT PERSON
Project Coordinator Juuso Puurula
tel. +358 44 491 4699, juuso.puurula@alli.fi

CATEGORIES OF PERSONAL DATA PROCESSED
The Finnish National Youth Council Allianssi maintains personal data registers in relation to the application for and awarding and monitoring of Climatechangemaker grants.

GROUNDS FOR AND PURPOSE OF PROCESSING PERSONAL DATA
The data controller processes personal data on a legal basis. The personal data register is used in the grant application process for young people’s climate-related projects, processing and evaluation of grant applications, awarding of grants as well as monitoring the allocation of grants awarded. 

REGULAR SOURCES OF INFORMATION
The National Youth Council Allianssi obtains applicant and application data as well as data about the use and allocation of an awarded grant from the applicant directly.
The designated employees of the National Youth Council Allianssi record data necessary for the administrative processing and disbursement of grants as well as decisions to award a grant. 

DISCLOSURE OF PERSONAL DATA
The National Youth Council Allianssi has outsourced the processing and retention of data that might contain personal data to third parties (e.g. accounting services). These third parties have the right to process personal data only where necessary for the proper functioning of the contracted services. The National Youth Council Allianssi remains the sole data controller of this data.

The National Youth Council Allianssi may use service providers located outside the European Union or the European Economic Area for the processing of personal data. Personal data is always transferred outside the European Union or the European Economic Area on one of these legal bases:
– The European Commission has concluded that the country of reception in question can ensure an adequate level of data protection.
– The data subject has authorised the transfer of the personal data in question.
– The personal data may be transferred under some other legal basis.
Third parties are authorised to access personal data only where necessary for the proper functioning of the contracted services. The National Youth Council Allianssi transfers personal data outside the European Union and the European Economic Area on the basis of and in accordance with valid legislation on the processing of personal data.

The National Youth Council Allianssi may be forced to disclose data to authorities or administrators of justice on a legal basis (e.g. taxation).

PROTECTION OF PERSONAL DATA
As a data controller, the National Youth Council Allianssi is responsible for taking the necessary technical and organisational measures to duly protect the personal data it manages.
The National Youth Council Allianssi has instructed the personnel processing personal data on how to process personal data in an appropriate and confidential manner. The National Youth Council Allianssi’s protective measures prevent the personal data from being accessed and used by unauthorised actors.

The National Youth Council Allianssi’s and its subcontractors’ data network and equipment are protected by a firewall, passwords and other appropriate technical measures.

Manual material is avoided. Manual material is stored in a secure place that only the relevant parties can access.

RETENTION OF PERSONAL DATA
Personal data shall be erased without delay when the processing of the data in question is no longer necessary.

Personal data retained due to a legal or other legitimate reason shall be erased immediately when the retention of the data in question is no longer necessary.

RIGHTS OF THE DATA SUBJECT
The data subject has the right to obtain information on the processing of their personal data and demand the rectification of incorrect personal data as well as restrict or object to the processing and transferring of their data. In addition, if the processing of data is based on consent, the data subject has the right to revoke their consent at any time. This does not affect the lawfulness of consent-based processing done before the revocation.

The data controller is obligated to rectify incorrect, unnecessary, incomplete or outdated data on its own initiative or at the request of the data subject.

If you suspect that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority (data protection ombudsman).

All requests must be sent to the data controller in writing.

PRIVACY STATEMENT REVISIONS
The National Youth Council Allianssi has the right to revise this privacy statement in the future.

Created 25 February 2021