Privacy Policy – Digia Oyj
Digiarvoa 2019 Competition

Privacy Policy – Digia Oyj Digiarvoa2019 competition


This privacy policy (”Policy”) concerns Digia Oyj’s (”Digia”) processing of personal data in connection with the Digiarvio2019 -competition (”Competition”).

1.    Data Controller

The primary data controller of the personal data processed in accordance with this Policy is:

Digia Oyj, business-ID 0831312-4

Address: Atomitie 2 A, 00370 Helsinki, FINLAND

Tel: Switchboard, +358 (0)19 313 3000

Data Protection Officer: Digia Oyj Data Protection Officer, dpo(at)digia.com

In addition the Digia -group companies act as joint controllers with Digia Oyj where and the extent these companies participate in organizing the Competition or use the same systems used by Digia Oyj for processing of the personal data in connection with the Competition. Contact details of all Digia -group companies are available here. All Digia -group companies abide by the same privacy principles as what has been described in this Policy.


If you have any questions concerning your personal data processed under this Policy, you may contact us at PrivacyQuery(at)digia.com

  1. Personal Data Processed

Digia processes the following personal data on the participants of the Competition:

  • Name
  • Birth date
  • Company/organization
  • Phone number
  • Email
  • Address
  • The suggestion entered into the Competition
  • Communication between Digia and the participant
  • Technical information collected by the website (IP-address, cookie-ID)

In addition to the above-mentioned data, certain additional information may be collected on the Competition finalists and the winner (depending on the way the prize is redeemed). This data may include bank account information, invoicing details, tax card and other taxation information, visa- and work permit information, information on allergies (for event catering purposes), nationality and other equivalent information necessary in relation to redeeming the prize. 

The information is primarily collected directly from the participants themselves.


  1. Legal basis and purposes of the processing

 Digia’s processing of the above-mentioned personal data is done for the purposes of organizing and implementing the Competition. Personal data is processed, inter alia, for delivery the prize, to identify the participants and for their registration to the Competition, for Competition communication management purposes and for other purposes necessary for the organization of the Competition.

Digia’s processing of personal data described in this Policy is based on Digia’s legitimate interests in organizing and realizing the Competition, as well as on the performance of the agreement made between the participant and Digia on participation in the Competition.

The participants must give certain personal data on themselves in order to be able to participate in the Competition. Such information is marked as mandatory in the fields reserved for such information (e.g. by *). If the participant does not want to give this information to Digia, participation to the Competition is not possible. In addition, Digia may also need certain additional information on the winner, so that the winner may redeem the prize in accordance with applicable laws. Not giving such additional information may lead to the winner being unable to redeem the prize.

The personal data in not used for any marketing purposes, unless the participant has separately given his or her consent for it or specifically requested to receive Digia’s marketing communications.

In case Digia intends to use the personal data for any other purpose than those for which the data was collected, Digia will inform the data subject of such other purpose prior to commencing the further processing and gives all necessary additional information to the data subject.


4.    Data retention

Personal data collected for the purposes of the Competition will be retained for the duration of the Competition and a maximum of five (5) years after the Competition has ended, unless a longer retention is required under mandatory legislation. Digia will delete all unnecessary data without delay when they are no longer needed for the purposes they were collected.


5.    Regular data disclosures and data transfers outside the EU or the European Economic Area

Digia uses a third-party service provider in the implementation of the Competition. The third-party service provider has access to the participants’ personal data collected in connection with the Competition. Digia has entered into an agreement with the service provider under which the service provider is obligated to only process the personal data for purposes stated in this Policy and as otherwise described in this Policy.

Digia does not disclose or transfer the personal data collected in connection with the Competition outside EU or the EEA.


6.    Data security principles

Digia has implemented appropriate technical and organizational data security measures required under applicable laws in order to protect the personal data it processes from unlawful access, processing, deletion, alteration and other data security risks. The Competition participants’ data are stored in the data controller’s system, which has been protected with security software and security features. User-specific ID is required for access to the system.

The system has been protected by the use of firewalls and other technical security measures. Data stored in the system can only be accessed and they are only allowed to be processed by certain pre-determined members of the data controller’s personnel. The data is physically located in locked and secured premises.

  1. Data subject rights

The applicable legislation guarantees several rights to data subjects in relation to their personal data processed. Digia respects these rights and is committed to fulfilling them. These data subject rights have been listed below. All questions and queries concerning the use of these rights must be sent to PrivacyQuery(at)digia.com. Please note nevertheless that the use of some rights may require that certain legal additional requirements are fulfilled. In addition Digia may have to ask certain additional information on the person who made the request, so that we can verify that you are the person who you claim to be.

  1. The data subject has the right to request access from the data controller to the data subject’s personal data and the right to receive a copy of such data;
  2. The data subject has the right to transfer the personal data from one system to another in cases where the processing was based on consent and has been done by automated means;
  • The data subject has the right to request that incorrect, inadequate or outdated data on the data subject is corrected, completed or deleted;
  1. The data subject has the right to request restriction of processing in certain situations, e.g. where Digia no longer needs the data, but the data subject does not want the data to be deleted and wants its processing to be restricted instead;
  2. The data subject has the right to object the processing of the data subject’s personal data on grounds relating to his or her particular situation, e.g. where processing was based on the data controller’s legitimate interest and the data controller cannot present compelling grounds for the processing overriding the data subject’s interests;
  3. The data subject has the right to obtain erasure of the data subject’s personal data from the data controller under certain situations (the so-called ”right to be forgotten”), e.g. where personal data is no longer needed for the purposes it was collected or where the processing was based on consent and consent has been withdrawn;
  • The data subject has the right to withdraw his or her consent given for the processing at any time; and
  • The data subject has the right to lodge a complaint to the supervisory authority, which in Finland is the Office of the Data Protection Ombudsman (see tietosuoja.fi).

Include the following information to your query:

  • Information, which enables us to identify you (such as e.g. full name, email or other equivalent)
  • In what role are you contacting us (= Digia’s Digiarvoa2019 -competition participant)
  • What above mentioned legal right you wish to make use of.