MeMove data protection

Here you can familiarize yourself with the MeMove data protection.

MeMove sports and wellness services data protection

In case of contradictions between the Finnish and English language versions, the Finnish version of data protection is applied.

1. Registrar

Student Union of Metropolia University of Applied Sciences (METKA)

Business ID: 2165831-1

Myllypurontie 1, 00920 Helsinki

Data Protection Officer: Linda Lindgren, linda.lindgren [at] metkaweb.fi (linda[dot]lindgren[at]metkaweb[dot]fi), 0505631825

2. Purpose of processing

Personal data is processed for the following purposes:

Organization and administration of sports services (memberships, reservations).
Communication and information about services.
Development and statistics of services.
Fulfillment of legal obligations (e.g., accounting).

3. Legal basis for processing

Agreement: terms of service and membership.

Consent: marketing communications and voluntary surveys.

Legitimate interest: service development and statistics.

Legal obligation: accounting and obligations under the Associations Act.

4. Personal data collected

Name, date of birth/personal identification number, gender, contact details (phone number, email address, address).
Student number and student union membership from the student union's membership register.
Information related to the use of services (reservations, participation, payments. However, without limiting the sources to the above).
Possible health information (only if necessary for special arrangements).
Feedback and survey responses.

5. Data retention period

Customer register data is stored for at least the duration of the customer relationship. Customer data that has been unused for more than 13 months is deleted.

Billing data is stored in accordance with the Accounting Act.

Statistical data is anonymized and may be stored for longer periods for purposes such as operational development.

6. Disclosure and transfer of data

Data will not be disclosed to third parties without justification.

Any partners will be mentioned separately.

Data will not be transferred outside the EU/EEA without appropriate safeguards.

7. Rights of the data subject

The data subject has the right to:

Access their own data.
Correct inaccurate data.
Request the deletion of data.
Restrict or object to processing.
These rights can be exercised by contacting the data protection officer.

8. Data security

Data is protected by technical and organizational measures (encrypted connections, restricted access rights).

Staff are trained in data protection matters.

9. Changes to this statement

We reserve the right to change this statement.

10. Contact

All questions and requests regarding data protection can be addressed to the data protection officer, whose contact details can be found in section 1.