Privacy Policy

Effective Date: 29.6.2018

Patteri Entrepreneurship Society Ry (“we”, “us” or “our”), which hosts the annual *Ship Startup Festival places the highest value on protecting the personal data of our users (“User”, “you” or "your"). This Data Protection Notice ("Notice") explains how we collect, use, disclose, safeguard and retain your personal data when you access and use our mobile application (“Application”) and/ or our web service ("Service", Notice or Service alone or both together, depending on the context, also "Offering"). We will store your personal data in our Offering Data File.

We process your personal data always in accordance with all applicable laws. European Union general data protection regulation (EU 2016/679) is the primary data protection enactment applicable to our Offering and processing of your personal data.

Please read this Notice carefully. If you do not agree with the terms and content of this Notice, you must stop using our Offering immediately.

OUR ROLE AS DATA CONTROLLER AND CONTACTING US

We are the controller of your personal data. Therefore, we are responsible for the processing of your personal data and we define the purposes and means for the processing. Our identification and contact information are as follows:

Patteri Entrepreneurship Society ry.
Y:27051991
Pääskysentie 1, 48220, Kotka, Finland.
info@shipfestival.org

Contact Person: Antti Viitanen, Main Organiser, antti@shipfestival.org

Use the above contact information to reach us if you have any questions or requests related to your personal data or the processing of it.

YOUR ROLE WHEN USING OUR OFFERING

You may access and use our Offering in three manner, namely as:

Pseudonymous User: Registration of your personal data to access some areas of our Offering is not required – therefore no contact data related directly to you is collected or processed as part of the Offering. However, to provide you with personal communication features we need to generate an unique identifier related to your device. If you use are using our Offering through a single device, which is exclusively in your possession, you could be indirectly identified e.g. by a 3rd party with access to other identifying data sources, such as your device serial number, mobile network identifiers, and personal data associated with them. For example, your mobile operator and legal authorities might have such data collection and combination capabilities. Due to e.g. these 3rd party capabilities we will consider all Pseudonymous User data as personal data and protect it as such. To learn more about the ways and conditions how 3rd parties, such as mobile network operators and legal authorities, can collect necessary data to identify you personally we, recommend you to review your mobile operator’s privacy policies and privacy laws of your country.
Registered User With a Hidden profile: To access restricted content in our Offering registration of your personal data is required during the sign up process. Registered user with a hidden profile is identifiable by Us, but your personal data is not visible, or accessible to other users beyond of what you reveal about yourself during your interactions with them.
Registered User With a Public profile: If you want to have a public profile visible to other users, registration of your personal is required during the sign-up. Registered user with a public profile is identifiable by Us, and your personal data is visible to other users of the service who have access to groups you are associated with. If you wish to prevent other users seeing your personal data, use your personal the settings to hide your profile or ask your group manager to remove you from the groups you no longer wish to associated with.

As all Users are at least indirectly identifiable to us, we will comply with applicable data protection legislation for all our Users. Our data record consists of the personal data of the Users belonging to any of the three above described user categories. Your profiles and your interactions with other users has implications to the quality and culture of this service. Therefore We as a service provider reserve the rights to use your personal data to uphold quality of the service and enforce code of conduct. We are obliged by the law and by contracts with 3rd parties to prevent abuse, spread of inappropriate content, and criminal use of this service to infringe copyright, or national security laws. To find out more about the particular rules and code of conduct applicable to your country of residency, please refer to our terms of service, the terms of service your Internet Service Provider, Network Operator, and your country’s privacy legislation.

OUR PERSONAL DATA COLLECTING METHODS

We may collect your personal data in a variety of ways. Depending on your activities related to the Offering (e.g. sign-up), you may be required to personally actively submit to us your personal data. This may occur e.g. through completing and submitting a digital form in any of our Offering interfaces available to you (i.a. in connection with your sign-up) or answering a questionnaire.

We may also collect your personal data in connection with your using of the Offering (i.a. related to your use of chat or any other interactive communication feature of the Offering).

Furthermore, our servers automatically collect your personal data of technical nature when you access or use the Offering (i.a. software versions, phone model and timestamps) or of your native actions that are integral to the Offering features (i.a. the number of messages you have sent and received, or other data based on your similar interactions with the Offering or with other users of the Offering).

Finally, in order to function as intended, the Application (but not the Service) will require the access to the following mobile phone features, some of which are technically used as part of the above defined personal data collection methods:

Microphone;
Notifications;
Mobile Data & Wifi;
Storage;
Background Modes;
Photos (optional);
Camera (optional);

If you wish to change our access or permissions, you may, circumstances allowing do so in your device’s settings. However, please note that changing our access or permissions may cause limitations or complete denial of your access and use to the Offering.

PERSONAL DATA WE COLLECT AND PROCESS

If you are our Pseudonymous User, we will collect and process the following personal data of you:

Nickname, you have provided in connection with creation of your account;
Synthetic identifier, associating your user account to an individual mobile or other device;
Gender (optionally at your choice);
Technical information about communication between your device and our servers (e.g. software version, phone model, timestamps);
Search terms you have used;
Other users you have contacted;
Number and the duration of the phone calls you have made and received;
Number of messages you have sent and received;
Content of the messages;
Recommendations you have given;
Your favourites: other users, sessions, organisations, etc;
Sessions you have reserved a seat to;
Feedback you have provided and any contact information associated with it;

If you are a Registered User, we will collect and process all of the above data and in addition the following personal data of you:

Name, which you have provided in connection with creation of your Offering account;
Password (cryptographically hashed);
Topics;
Photo;
Biography;
E-mail address;
Recommendations you have received;
Time you have been available online;
Organisations you belong to;
Sessions you have been associated with;

NOTE ABOUT COMMUNICATION AND CONTENT: Message and voice communication are protected by data encryption. We do not monitor the content of the communication between our users and voice calls are not recorded or stored by us. Therefore you are solely responsible for the relationships you establish in the Offering. We advise you not to provide any confidential information if you do not trust the other party in the Offering. Chat history remains accessible on both participating Users' device and on our servers needed for the message content relay. In certain circumstances, Us and 3rd parties are technically capable of breaking the encryption of the private messages, access their content, and at least indirectly identify their senders and receivers personally.

YOUR CONSENT TO US

Some of the above personal data provided to us by you may contain personal data belonging to special categories ("Sensitive Personal Data"). When you access the Offering the first time, you provide us with your explicit consent for processing your Sensitive Personal Data.

Further instructions and remarks on your consent and withdrawing it are below in this Notice.

LAWFULNESS OF PROCESSING OF YOUR PERSONAL DATA

Our processing of your personal data is based on:

Contractual relationship between you and us (the contract is executed when you accept our service terms and conditions as a necessary precondition for your access to and use of the Offering); and/or
Consent received from you for:
1. The processing your Sensitive Personal Data; or
2. Sending you electronic direct marketing.

You may at any time withdraw the consent to which the processing of your Sensitive Personal Data or our electronic direct marketing to you is based on by contacting us with the above contact information.

Please note, that subject to our sole decision, withdrawing of your consent may make the provision of our Offering to you more limited or impossible and lead to:

Immediate termination of your access to and use of the Offering as well as the contractual relationship between us; or
Limitation of the features of the Offering (e.g. by removing the possibility to use photos, comments and/or chat messages).

PURPOSES OF USES OF YOUR PERSONAL DATA

We process your personal data to provide you with our Offering and to fulfill our contractual obligations and rights towards you. We may also process your personal data for the development of the Offering as well as our other products and services. Based on your personal data, we may conduct scientific and academic study and statistical analysis.

Your personal data can also be used to provide you with personalized content and communication (including personalized push notifications to your mobile device) as part of the Offering. This content and communication may include, but is not limited to, event information, personalized recommendations, customer relations communication, marketing, feedback and research. However, we will not send you electronic direct marketing without your consent.

Personal data processing for the above-mentioned purposes may involve profiling. However, it will never include solely automated decision-making that would produce legal (or other similarly serious) effects for you.

DISCLOSURES AND INTERNATIONAL TRANSFERS

We do not generally disclose your personal data to be independently used by other data controllers unless required by mandatory law (such as to tax and other authorities).

We may transfer your personal data to third parties (e.g. subcontractors) who process your personal data on behalf of us for the purposes described in this Notice. In these situations, we do not release your personal data from our control.

As we operate internationally, due to technical and practical data processing requirements your personal data may be processed by our subcontractors located outside the European Union or European Economic Area (including Switzerland). Countries to which your personal data may be sent to or accessed from may have a data protection standard differing from the country in which you are situated. However, in all such personal data transfer situations, the processing of your personal data shall be in accordance with applicable legislations and our data processing policies and instructions.

Due to rarity of available EU Commission data protection adequacy decisions, EU Commission standard contractual clauses (of type controller to processor, EU Commission decision 2010/87/EU) would be used as appropriate and suitable safeguards for these data transfers. Alternatively, we may rely on EU/US-Privacy Shield arrangement. Copies of the standard contractual clauses shall be available through the contact details mentioned above.

We may also need to share your personal data with a purchaser or potential purchaser of our business. Such sharing does not occur regularly, but should it be necessary, we will share only smallest possible amount of your personal data and always in the limits of applicable legislation.

SECURITY

Our organisation uses organisational and technical measures to protect your data and privacy according to standards and requirements set in European Union General Data Protection Regulation (EU 2016/679).

USE OF COOKIES, EMBEDDED CONTENT & ANALYTICS

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

By default WordPress does not collect any analytics data. However, many web hosting accounts collect some anonymous analytics data. We use Google Analytics to keep track on our website, but we do not track any additional personal information of our users.

If you have any privacy concerns related to our use of cookies, our partners or data transfers to United States, please take appropriate measures with your privacy settings.

YOUR RIGHT TO OBJECT PROCESSING

At any time, you have the right to object the processing of your personal data for direct marketing purposes and unsubscribe (opt-out) yourself from any direct marketing of us. If you do not wish us to process your personal data or receive communication associated with our Offering, stop using the Mobile Application and Uninstall it from your device.

YOUR OTHER RIGHTS

At any time, you have also the following rights:

Gain access to your personal data;
Verify the accuracy of your personal data and at your request, have your incomplete, inaccurate or outdated personal data modified or erased;
Under certain circumstances, be forgotten by us;
Under certain circumstances, have the processing of your personal data restricted;
Receive your personal data which you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller; and
Lodge a complaint with a supervisory authority (in Finland Data Protection Ombudsman).

Also, at any time, you have the right to:

Withdraw your consent(s) (if any) to processing of your personal data.

To use your rights, contact us with the contact information provided above.

RETENTION PERIOD OF YOUR PERSONAL DATA

We retain your personal data until the termination or expiration of the contract between us. Your personal data will be anonymized or permanently deleted after the termination or expiration of the contract, however, allowing us always additional limited time period necessary for the technical execution of the deletion or anonymization.

The above retention rule is always subject to differing requirements possibly included in any mandatory laws applicable to your personal data, its processing and the Offering. Therefore, in some cases, your personal data retention period may be shorter or longer than the above-mentioned.

Notwithstanding the above, the retention of your personal data may always be extended due to our existing or imminent need to establish or exercise legal or administrative claims or defend us against legal or administrative claims related to your personal data, its processing and the Offering.

PROVISION OF YOUR PERSONAL DATA

Provisioning your personal data to us is voluntary but necessary for you to proceed with the access and use of the Offering. Failing to provide us with your personal data prevents or may prevent us from providing you with access to Offering or enabling your use of Offering.

VALIDITY OF AND UPDATES TO THIS NOTICE

This Notice is valid until further notice beginning from Effective Date.

We reserve the right to make changes to this Notice at any time and for any reason. We will alert you about any changes by updating the “Effective Date" of this Notice. You should therefore periodically review this Notice to stay informed of updates.

You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Notice by your continued use of the Offering after the then current Effective Date.

*SHIP MOBILE APPLICATION PRIVACY POLICY