Legal
Privacy Policy
Prepared in accordance with the EU General Data Protection Regulation (EU) 2016/679 and the Finnish Data Protection Act (1050/2018).
1. Data controller
Lehmijärven Suojeluyhdistys ry (registration number / PRO 30360429), Turuntie 22, 13130 Hämeenlinna, Finland. Email: info@lehmijarvi.org. Phone: +358 41 483 5595.
For any question about this notice or about your personal data, please contact us using the details above.
2. What personal data we process
Members and volunteers: name, postal address, email address, telephone number, membership start date and membership fee payment status.
People who contact us: the name, email address and message content you choose to send.
Event participants: name and contact details, and for minors the name and contact details of a guardian.
We do not collect special categories of personal data, and we do not process payment card details on this website.
3. Purpose and legal basis
Maintaining the statutory member register: legal obligation under the Finnish Associations Act (Yhdistyslaki).
Communicating with members, volunteers and partners, and organising events: legitimate interest of the association in carrying out its stated purpose.
Newsletters and other optional communications: your consent, which you can withdraw at any time.
4. Website and cookies
This website does not use advertising or tracking cookies and does not build visitor profiles.
The contact form does not store submissions on this website; it opens your own email application so the message is sent directly to info@lehmijarvi.org.
The contact page embeds a Google Maps frame. When it loads, Google may receive your IP address and set its own cookies under Google's privacy policy.
5. Sharing and transfers
We do not sell or rent personal data. Data may be shared with our accounting service provider, our email and hosting providers, and with authorities where required by law.
Where a service provider processes data outside the EU/EEA, the transfer is based on the European Commission's standard contractual clauses or another lawful transfer mechanism.
6. Retention
Member register data is kept for the duration of membership and for the period required by accounting and association law, after which it is deleted or anonymised.
Email correspondence is kept only as long as needed to handle the matter and to document our activities, normally no more than two years.
7. Your rights
You have the right to access your data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability where applicable, and to withdraw consent at any time.
To exercise these rights, email info@lehmijarvi.org. We respond within one month.
If you believe your data has been handled unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
8. Security
Personal data is stored in access-controlled systems, available only to board members and volunteers who need it for their role. Paper records are kept locked. Any personal data breach is assessed and, where required, reported to the supervisory authority within 72 hours.
9. Changes to this notice
We update this notice when our practices change. The current version is always published on this page.