Privacy Policy for Online Surveys

Data Protection Act (1050/2018)

EU General Data Protection Regulation 2016/679

Arctic Factory acts as the owner and administrator of the register / Julius Oförsagd Company Oy, Aittatie 3, 96100 ROVANIEMI

Person Responsible for Registry Operations

Julius Oförsagd, hello@arctic-factory.com

Name of the Registry

Purpose of the Registry

Personal data is used to conduct online surveys, process survey responses, collect registration information, and ensure compliance with marketing restrictions as required by law.

The registry consists of the personal data of survey participants and respondents.

Content of the Registry

The registry processes the necessary data in accordance with the purpose of the registry, which varies depending on the survey. Depending on the purpose of the survey, such personal data may include:

Contact information: name, email address, phone number, address, location data, organization
Demographic information: gender, age
Other information provided by the customer that is necessary for handling the matter

Access to the data in the registry is granted to the Arctic Factory employee who created the survey and, on a case-by-case basis, to Arctic Factory employees who have been granted access rights to the survey in order to perform necessary work tasks. Data will not be disclosed to external parties or third parties without the data subject’s consent, except as permitted or required by law or as required by government authorities.

Software providers for online surveys and their subcontractors process data only at the specific request of the data controller.

Personal data is collected directly from data subjects in connection with campaigns, feedback, surveys, or event registrations.

Disclosure of Data

Data from the registry will not be disclosed or transferred outside the European Union or the European Economic Area.

Depending on the survey platform used, data may be processed outside the EU/EEA, but it will be encrypted end-to-end.

Right to Data Retention

The data controller will retain data only for as long as necessary for the purposes of the data file.

Principle of Data Protection

The databases in which data is stored are protected both technically and physically to prevent unauthorized access. Access to the data is restricted to those who need it to perform their duties.

Right to review and correct data, and right to have data deleted

The data subject has the right to withdraw the answers they have provided at any time.

The data subject also has the right to:

review what personal data about them has been stored in the registry
request the correction of inaccurate personal data
have their data deleted from the registry
restrict the processing of their data
transfer their data from one system to another.

The data subject also has the right to make a complaint to the Data Protection Authority.

Requests for review, correction, or deletion must be submitted in written form and signed to the person responsible for the registry.

Right to Data Portability and Right to Restriction of Processing

The data subject has the right to receive the personal data concerning him or her that he or she has provided to the data controller in a structured, commonly used, and machine-readable format, if the processing is based on consent or a contract and is carried out by automated processes.

The data subject has the right to restrict the processing of data in accordance with Article 18 of the EU General Data Protection Regulation.

Making changes to the Privacy Policy

The data controller reserves the right to update and amend the Privacy Policy. If required by law, we will notify the data subjects of such changes.