Privacy Notice – Member Registry

This privacy notice concerns the member registry of Tulevaisuuden Askeleet Team Iskijät ry ("Boxing Team", "association").

1. Data Controller

The association acts as the data controller under the EU General Data Protection Regulation (GDPR).

Tulevaisuuden Askeleet Team Iskijät ry

info@boxingteam.fi

+35841 310 7193

2. Data Processor

The association's electronic member registry is maintained in the Yhdistysavain service. Vitec Avoine Oy acts as the data processor on behalf of the association. The service's security meets GDPR requirements.

Vitec Avoine Oy (Yhdistysavain)

Yhdistysavain Privacy Policy

3. Purpose of Processing

Personal data is processed for the following purposes:

  • Managing and maintaining membership
  • Membership fee invoicing and tracking
  • Association communications and notifications
  • Fulfilling legal obligations (e.g., Associations Act)

4. Personal Data Collected

The following data is stored in the member registry:

  • Full name (first and last name)
  • Email address
  • Phone number
  • Date of birth
  • Billing information

5. Legal Basis for Processing

Processing of personal data is based on:

  • Contractual relationship (membership in the association)
  • Legal obligation (Associations Act, Accounting Act)
  • Consent (marketing communications)

6. Data Retention Period

Personal data is retained for the duration of membership and thereafter in accordance with statutory retention periods. Data is deleted when there is no longer a purpose for it.

7. Rights of the Data Subject

Members have the right to:

  • Access their personal data
  • Request correction or deletion of their data
  • Restrict processing of their data
  • Transfer their data to another system
  • Withdraw their consent at any time
  • Lodge a complaint with the Data Protection Ombudsman (tietosuoja.fi)

Data access and correction requests should be directed to the association's board at info@boxingteam.fi.

8. Data Security

Member registry data is protected with appropriate technical and organizational measures. The Yhdistysavain service's security meets EU GDPR requirements. Access to data is restricted to only those who need it for their duties.

9. Changes to This Privacy Notice

This privacy notice may be updated as needed. Members will be notified of significant changes.

Last updated: March 2026