The primary data controller of the personal data processed in accordance with this Policy is:
Digia Oyj, business-ID 0831312-4
Address: Atomitie 2 A, 00370 Helsinki, FINLAND
Tel: Switchboard, +358 (0)19 313 3000
Data Protection Officer: Digia Oyj Data Protection Officer, dpo(at)digia.com
In addition the Digia -group companies act as joint controllers with Digia Oyj where and the extent these companies participate in organizing the Competition or use the same systems used by Digia Oyj for processing of the personal data in connection with the Competition. Contact details of all Digia -group companies are available here. All Digia -group companies abide by the same privacy principles as what has been described in this Policy.
If you have any questions concerning your personal data processed under this Policy, you may contact us at PrivacyQuery(at)digia.com
Digia processes the following personal data on the participants of the Competition:
In addition to the above-mentioned data, certain additional information may be collected on the Competition finalists and the winner (depending on the way the prize is redeemed). This data may include bank account information, invoicing details, tax card and other taxation information, visa- and work permit information, information on allergies (for event catering purposes), nationality and other equivalent information necessary in relation to redeeming the prize.
The information is primarily collected directly from the participants themselves.
Digia’s processing of the above-mentioned personal data is done for the purposes of organizing and implementing the Competition. Personal data is processed, inter alia, for delivery the prize, to identify the participants and for their registration to the Competition, for Competition communication management purposes and for other purposes necessary for the organization of the Competition.
Digia’s processing of personal data described in this Policy is based on Digia’s legitimate interests in organizing and realizing the Competition, as well as on the performance of the agreement made between the participant and Digia on participation in the Competition.
The participants must give certain personal data on themselves in order to be able to participate in the Competition. Such information is marked as mandatory in the fields reserved for such information (e.g. by *). If the participant does not want to give this information to Digia, participation to the Competition is not possible. In addition, Digia may also need certain additional information on the winner, so that the winner may redeem the prize in accordance with applicable laws. Not giving such additional information may lead to the winner being unable to redeem the prize.
The personal data in not used for any marketing purposes, unless the participant has separately given his or her consent for it or specifically requested to receive Digia’s marketing communications.
In case Digia intends to use the personal data for any other purpose than those for which the data was collected, Digia will inform the data subject of such other purpose prior to commencing the further processing and gives all necessary additional information to the data subject.
Personal data collected for the purposes of the Competition will be retained for the duration of the Competition and a maximum of five (5) years after the Competition has ended, unless a longer retention is required under mandatory legislation. Digia will delete all unnecessary data without delay when they are no longer needed for the purposes they were collected.
Digia uses a third-party service provider in the implementation of the Competition. The third-party service provider has access to the participants’ personal data collected in connection with the Competition. Digia has entered into an agreement with the service provider under which the service provider is obligated to only process the personal data for purposes stated in this Policy and as otherwise described in this Policy.
Digia does not disclose or transfer the personal data collected in connection with the Competition outside EU or the EEA.
Digia has implemented appropriate technical and organizational data security measures required under applicable laws in order to protect the personal data it processes from unlawful access, processing, deletion, alteration and other data security risks. The Competition participants’ data are stored in the data controller’s system, which has been protected with security software and security features. User-specific ID is required for access to the system.
The system has been protected by the use of firewalls and other technical security measures. Data stored in the system can only be accessed and they are only allowed to be processed by certain pre-determined members of the data controller’s personnel. The data is physically located in locked and secured premises.
The applicable legislation guarantees several rights to data subjects in relation to their personal data processed. Digia respects these rights and is committed to fulfilling them. These data subject rights have been listed below. All questions and queries concerning the use of these rights must be sent to PrivacyQuery(at)digia.com. Please note nevertheless that the use of some rights may require that certain legal additional requirements are fulfilled. In addition Digia may have to ask certain additional information on the person who made the request, so that we can verify that you are the person who you claim to be.
Include the following information to your query: