Registry description

REGISTRY NAME

CoCreate Life Oy Ab’s person database

REGISTRY HOLDER

CoCreate Life Oy Ab
Runonlaulajanpolku 4B,
00420 Helsinki
Company ID: 2151288-1

THE PERSON RESPONSIBLE FOR THE REGISTER

Katarina Mustonen
katarinamustonen@gmail.com
+358400572126

PURPOSE OF THE REGISTER

The purpose of processing information is to manage the customer relationship, to implement the rights and obligations of the customer and the data controller, and to process personal data in accordance with the Personal Data Act for purposes related to online services.

Personal data can be used for marketing purposes if the person signs up for a mailing list or joins a Joy of Being circle on the Sutra platform. The customer must always order and confirm the subscription to the newsletter or registration for Sutra circle separately.

COLLECTED INFORMATION

The register may contain the following information. The information contained in the register is increased as needed, i.e. not all information is collected from all customers. The person is considered to be in the register if any personal information is entered in the register.

  • first name and last name
  • email address
  • phone number
  • demographic information
  • location
  • permissions
  • billing information (when joining the programs in Sutra)
  • IP address
  • information provided by the person when filling a contact form or submitting the information in person to one of the Joy of Being team members

SOURCES OF INFORMATION IN ACCORDANCE WITH THE RULE

The customer can join the registry through the contact forms on the site or by submitting the information in person to one of the Joy of Being team members. The customer can also sign up separately for the newsletter or register for a Sutra circle.

DATA RETENTION

We retain users' personal information only for as long as it is needed for the purpose for which it was collected or for the maximum period permitted by law. The length of the personal data retention period therefore varies depending on the data.

LOCATION OF THE REGISTER

The registry is located in a Webflow service implemented using Amazon Web Services and Fastly services. Webflow launches the so-called Content Delivery Network (CDN) feature, which allows the necessary information to be sent from a fast and nearby server based on the user's location.

The registry is backed up using Zapier and stored in Google Drive and / or Dropbox.

DISCLOSURE OF INFORMATION

CoCreate Life Oy Ab discloses customer data within the limits required by applicable law.

Information is not shared with 3rd party operators except if the registry administrator uses either an external service provider for producing value adding services, improving the quality of the service, or targeted advertising. Examples of such services are Google Ads, Google Drive, Facebook and MailChimp. Information may be transferred to the European Economic Area or outside the European Union only if the registry location or 3rd party services require it.

PROTECTION OF THE REGISTER

The Webflow service complies with ISO 27018 security.

The register is used only by the team members of Joy of Being by CoCreate Life Oy Ab. The information is collected from the above-mentioned services and databases.

The information system, the network service provider's information network and the hardware used to process the registry data are protected by a firewall and other technical measures. The data is protected by access rights defined on the basis of the team member’s tasks, with the help of data transfer encryption programs. Manual material printed from the database is stored as required by law in the company's controlled premises and disposed of safely if necessary.

RIGHT OF REVISION PURSUANT TO CHAPTER 6, SECTION 26 OF THE PERSONAL DATA ACT

The data subject has the right to inspect the information entered in the register about him or her, the right to demand the correction of incorrect information and otherwise to exercise his or her rights protected by the Personal Data Act. A written request for verification, deletion and rectification of data must be addressed to the person responsible for the register (see the person responsible for the register).

OTHER RIGHTS RELATING TO THE PROCESSING OF PERSONAL DATA

The data subject has the right to forbid the use of her/his personal data for direct advertising, distance selling and other direct marketing, as well as for market and opinion research. The ban is marked in the register.

‍