Privacy Policy for the Finnish Olympic Committee’s website

Data Controller

Finnish Olympic Committee
Paavo Nurmen tie 1
00250 Helsinki
Visiting address: Guests will be picked up at the Olympic Stadium Visitor Center
Organization number: 0202238-5

Contact for questions regarding the registry

If you have any questions regarding data protection on this website, please contact us by email at info@olympiakomitea.fi or contact the Finnish Olympic Committee’s Data Protection Officer at tietosuoja@olympiakomitea.fi.

Legal Bases for the processing of personal data

The Olympic Committee processes personal data on its website based on the following grounds:

consent from the data subject (for example, subscribing to a newsletter or accepting cookies)
the Olympic Committee’s legitimate interest in developing the website, ensuring security, and conducting communications
actions taken at the request of the data subject, such as responding to inquiries.

The legal basis for the processing of personal data may vary depending on which service on the website the user is using.

The Purpose of Processing Personal Data

Personal data submitted via the contact forms on the website is processed in a manner appropriate for handling the inquiries. The data is stored for as long as necessary to investigate the matter that gave rise to the inquiry.

Information collected via the contact forms: name, email address, and any other personal information the visitor provides in the form.

The personal data submitted via the newsletter subscription form on the website is transferred to a third-party newsletter system, in this case the service provider Mailchimp.

Information collected for the newsletter system: email address.

On the website’s “Come Work with Us” page, an embedded feature has been implemented to access and log in to the recruitment system used by the Olympic Committee. The system is ReachMee, developed by Talentech Oy. Talentech is responsible for the data protection of the system and manages the data collected through it on behalf of the Finnish Olympic Committee.

Information collected in the recruitment system: name, year of birth, gender, contact information (email address, phone number, address), and answers to any screening questions on the application form. In addition, a resume and a personal cover letter.

To collect website visitor data, the Olympic Committee uses Google Analytics 4, a service provided by Google. Google Analytics identifies users using cookies. Data regarding website usage is transferred to and stored on Google’s servers, including in the United States. Information about website visitors’ behavior is collected, such as how they navigate the Finnish Olympic Committee’s website, how much time they spend on the site, and where the traffic comes from.

This information is used to enhance the user experience on the Olympic Committee’s websites and improve the quality of the service, so that information of interest to users becomes even easier to access for website visitors.

Sources of personal data

The data stored in the website’s database is retrieved from messages that visitors send via the website’s contact form. Visitor data is stored in Google’s service for those visitors who have consented to the use of cookies.

Disclosure and transfer of data

The information is not disclosed to external parties, except to the service providers described in this privacy policy or in cases required by law.

The data collected by Google Analytics is also transferred outside the EU or the EEA.

The data that Mailchimp collects is transferred to and stored in the United States. Mailchimp uses the EU’s Standard Contractual Clauses (SCCs) and other data protection measures to ensure compliance with data protection laws, including for users in the EU and the UK.

The rights of the data subject

The data subject has the right to:

receive information about the processing of their personal data
access their personal data
request that incorrect information be corrected
request that data be deleted within the limits permitted by law
object to the processing of their personal data or request that the processing be restricted, where applicable
withdraw their consent, if the processing is based on consent
file a complaint with the Data Protection Authority if the data subject believes that the processing of his or her personal data violates data protection laws.

Data subjects may submit a written request for information about their own data or request that their data be deleted by contacting the Olympic Committee via email or letter.

Data security

Appropriate technical and organizational security measures are taken to protect the website’s records. The records are protected by, among other things, passwords, a firewall, and SSL encryption. Only individuals designated by the Olympic Committee have access to the website’s user database and contact form database. Those who handle the data in the database are bound by a duty of confidentiality. The data in the database is not transferred to manual records.

Cookies and Their Use

Our website uses cookies. The website sends a cookie—a small text file—to your browser, which is stored on your computer’s hard drive. We use both temporary session cookies, which are deleted when you close your browser, and permanent cookies, which are stored on your computer’s hard drive. Cookies provide us with information that we can use to analyze how our website is used. Cookies also allow us to review and track our users’ interests, which helps us improve our website. The information collected is used to analyze and improve the use of the website. This data helps us improve the user experience and the website’s content. The data is not used to identify individual users.

Google uses information collected via cookies in its analytics service, Google Analytics 4. Cookies may also be used to target ads. Advertising takes place on Facebook, Instagram, and Google. For example, remarketing is carried out based on cookies. More information about Google’s analytics tracking is available on Google’s privacy page.