Kuusi Palaa values privacy and believes itself to be fully compliant with the GDPR privacy protection laws. This page is designed to quickly answer any questions you might have about the processing of personal information involved in the Kuusi Palaa project.
Who is collecting this information?
Any personal information referred to in this privacy policy is being collected by Kuusi Palaa osk, a legally registered cooperative based in Finland (registration # 2880614-5). In this document, the term 'Kuusi Palaa' or 'data controller' may be used to refer to Kuusi Palaa osk. This privacy policy also applies to the archival website temporary.fi, which was a predecessor to Kuusi Palaa and shares the same database though it is functionally 'frozen'.
When visiting this website
As you browse around this website (without signing in, explicitly activating embedded third-party content or filling in any forms) personal information is neither collected, nor is it made available to any third parties.
Cookies
The Kuusi Palaa website uses cookies and it is required for the website to be functional. NO PERSONAL DATA is stored in these cookies and nothing that identifies you or your computer (including your IP address) is recorded.
No third-party resources not under our control
By default, this website only loads image files and media assets from a third-party server. This server is hosted within the EU and is fully compliant with GDPR regulations.
Log files
The server that hosts this website stores log files for 7 days. Personal information may be recorded in these logs, such as a user's IP address, or a username that may appear in a URL. This processing of personal data is necessary for the purpose of preventing fraud, a legitimate interest of the data controller as defined by Recital 47 of the EU general data protection regulation (GDPR). Collection of IP addresses is obtained automatically by the webserver software and these logs are deleted after one week.
Analytics
Kuusi Palaa does not use any analytics tools.
Secure data transfer
This website transmits all data using HTTPS, encrypting all data between the browser and the server. Your network provider may still be able to see that you are loading files from kuusipalaa.fi, but not their content.
Link referrers disabled
This website instructs your browser - through a machine-readable policy statement - not to tell other websites that you browsed there via a link on this website. While referrer data is not personal data, this site still keeps it private as it might help third parties profiling you
When creating an account on this website
Kuusi Palaa's website serves as the digital platform and administrative tool for the Kuusi Palaa osuuskunta/cooperative, legally registered in Finland. Because this platform requires shared administration, content curation, and production by the members of Kuusi Palaa, is it in the legitimate interest of Kuusi Palaa to process some personal information of the website users.
Because a website user can also become a legal owner of the cooperative, processing personal information of these users is a legal requirement between the data controller and data subject, as described in Article 6 of GDPR. This information is submitted by the user him or herself when joining the website, and can be updated at any time.
Below is a description of exactly what personal information is processed and Kuusi Palaa's justification for doing so.
Email address
All users are required to provide a valid email address in order to use the services of Kuusi Palaa. Processing of this personal information is necessary for the purpose of preventing fraud, a legitimate interest of the data controller as defined by Recital 47 of the EU general data protection regulation (GDPR).
Name, username, and personal website URL
Users are required to enter a username in order to be uniquely identified across the site. A field is also provided to enter a display name, but Kuusi Palaa does not require that this name be true or informative. The processing of voluntarily provided personal information in comments is based on the legitimate interest to enable interaction with the readers of this website (Art. 6(1) lit. f GDPR).
When becoming a legal member of the Kuusi Palaa cooperative
The above policy for 'when creating an account on this website' applies to all user registrations. However, users that choose to join the Kuusi Palaa cooperative are subject to slightly different requirements. These users are legal members of the cooperative, and are therefore required to provide their legal name and address as a condition for membership. This personal information is processed because Kuusi Palaa has a legal requirement to maintain an accurate members list as defined by Finnish law (Osuuskunta laki 421/2013).
Personal information specific to cooperative members (contact details, postal address, and in the case of companies and organisations tax ID #s) are not displayed anywhere to the public or on the site, but merely processed as an administrative interface to Kuusi Palaa's legal obligations. Only members of the Kuusi Palaa board of directors and the website administrator are able to access this information.
When submitting content to the platform
The Kuusi Palaa platform functions through its users contributing content in the form of event proposals, comments, discussions, and documentation. Kuusi Palaa does not allow the anonymous posting of content, although pseudonyms are permitted. It is in the legitimate interest of Kuusi Palaa to require registration for the use of these services, as the Kuusi Palaa project is based around the model of chronicling participation in its cultural activities, with the goal to build and enhance a community spirit.
When attending Kuusi Palaa events in person, users of the website who 'check in' will have their participation in the event recorded and stored in the Kuusi Palaa database. This is also in the legitimate interest of Kuusi Palaa, which utilises this participatory record as the administrative and curatorial basis of the entire project. Any person, belonging to the website or not, can choose to participate in these events anonymously instead.
Emails, notifications and contact
The Kuusi Palaa digital platform automatically sends out an email on Sunday evenings to all users who have opted in to receive it. All users must consent to receive the email at the time their account is created, and can opt out at any time by simply editing their profile preferences.
Additional email notifications may be sent as requested by each user. These include notifications of event proposals being scheduled, comments made that refer to you, and points being sent via the Kuusi Palaa platform. These preferences can also be changed at any time.
Legal members of the Kuusi Palaa cooperative will receive emails when Kuusi Palaa is under a legal obligation to do so. For example, a notice of the annual meeting will be sent to all cooperative members regardless of their email opt-in/opt-out preferences. This is a legal obligation between Kuusi Palaa and its members. Likewise, members may be contacted in exceptional circumstances, for example if the cooperative is to be dissolved or for other legally valid matters.
Exercising your rights
As described above, this website collects a very limited amount of personal data, and you are notified about that in advance. Still, under EU law it has to be explicitly stated here that you may at any time demand information on, or deletion and correction of that data.
Information on all data stored about you
To request information about all data stored about your person, please get in touch.
Deletion of all data stored about you
To request deletion of all personal data stored about you, please get in touch. Kuusi Palaa will remove the personal information about you in past activity logs and archival pages, replacing it with Xs. However, your personal information will still be stored in database backups for 30 more days.
If you are a legal member of the cooperative, your personal information must be kept as Kuusi Palaa's legal obligation (see above). If you wish to formally resign from the cooperative, please get in touch; however, your personal information must remain in Kuusi Palaa's records until the obligations for taxes, reporting and other accounting are completed as there is a contractual relationship between you and Kuusi Palaa after you buy a stake (ie: an invoice), which is a legal obligation to process your personal information. After this, you can be removed from Kuusi Palaa's database upon leaving the cooperative providing the legal obligations for termination of membership have been fulfilled as defined in the Kuusi Palaa osuuskunta rules and the Finnish Osuuskunta laki 421/2013.
Correction of data about you
If there is any personal data about you that you believe needs to be corrected, and you cannot correct it yourself through editing your profile, please get in touch.
File an official complaint
As an ultimate means to exercise your control over your personal data, in the EU you may always file a complaint with your national data protection authorities. Kuusi Palaa would still prefer to first hear from you personally, but including this sentence here is a legal obligation to ensure you know your rights.