Privacy Policy and Data Protection Notice
Date: 8 April 2026
1. Data Controller
Serbian-Finnish Association ry
Porraskuja 5 A, 02330 Espoo, Finland
Business ID: 2836808-5
Email: info@srpsko-finsko.org
2. Person Responsible for Data Protection Matters
Name: Dušica Božović
Email: dusica.bozovic@srpsko-finsko.org
3. Personal Data Processing Activities
The Serbian-Finnish Association ry processes personal data in connection with its membership administration, communication with individuals who contact the association, and the sending of newsletters and other association-related news.
4. Member Register
Purpose of Processing
The purpose of processing members’ personal data is to manage memberships, communicate with members, and administer and monitor membership fee payments.
Data Processed
- Name
- Phone number
- Email address
- Municipality of residence
Source of Information
The information is primarily obtained directly from the data subject.
Retention Period
Personal data is retained for the duration of the membership. After the membership ends, data is retained only for as long as necessary to fulfil legal obligations or other legitimate purposes.
5. Contact and Feedback
Purpose of Processing
Personal data submitted through the association’s contact and feedback forms is processed in order to respond to inquiries, suggestions, feedback, requests for cooperation, and other messages sent to the association.
Data Processed
- Name
- Email address
- Subject of the message
- Content of the message
- Information about whether the sender wishes to receive a reply
Source of Information
The information is obtained directly from the person submitting the contact or feedback form.
Retention Period
Contact and feedback messages are retained only for as long as necessary to handle the matter and maintain relevant correspondence, unless a longer retention period is required by law or is necessary for the establishment, exercise or defence of legal claims.
6. Newsletter and News Subscription
Purpose of Processing
Email addresses submitted through the association’s newsletter subscription forms are processed for the purpose of sending newsletters, information about the association’s activities, events and other relevant news.
Data Processed
- Email address
Source of Information
The email address is obtained directly from the person subscribing to the newsletter.
Unsubscription
Subscribers may unsubscribe from the newsletter at any time. After unsubscribing, the email address will no longer be used for sending newsletters, unless there is another lawful basis for retaining or processing it.
Retention Period
The email address is retained for as long as the person remains subscribed to the newsletter, unless a longer retention period is required by law or is necessary for other lawful purposes.
7. Disclosure and Transfer of Personal Data
Personal data is not normally disclosed outside the association without a lawful basis. Where external service providers are used to process personal data on behalf of the association, they process the data only as necessary to provide the relevant service and in accordance with applicable data protection legislation.
Personal data is not transferred outside the European Union or the European Economic Area unless such a transfer is permitted under applicable data protection legislation and appropriate safeguards are in place.
8. Data Security
Personal data is appropriately protected against unauthorised access, alteration, disclosure or destruction. Access to electronically stored data is restricted to designated persons using personal usernames and passwords.
9. Rights of the Data Subject
Depending on the applicable legal basis and circumstances of the processing, the data subject has the right to:
- access their personal data
- request a copy of the personal data concerning them
- request correction of inaccurate or incomplete personal data
- request restriction of processing
- object to certain processing of their personal data
- request deletion of their personal data where the applicable legal requirements are met
10. Right to Object to Direct Marketing
The data subject has the right to object to the processing of their personal data for direct marketing purposes at any time. Newsletter subscribers may unsubscribe from marketing communications at any time.
11. Right to Rectification and Erasure
The data subject may request the correction of inaccurate or incomplete personal data or the deletion of personal data, unless applicable legislation requires the data to be retained or another lawful basis for retention applies.
12. Contact Regarding Personal Data
Questions, requests concerning personal data, and requests to exercise data protection rights may be sent to:
Serbian-Finnish Association ry
Email: info@srpsko-finsko.org