This is a register and privacy notice required by the Personal Data Act (sections 10 and 24) and the EU General Data Protection Regulation (GDPR).
1. Data controller
NTRNZ media Ltd
2. Contact person in matters concerning the register
Hanna Mustonen email@example.com
3. Register name
NTRNZ media’s register for competition attendees to Geopark Challenge
4. Purpose of processing personal data
NTRNZ collects personal data fo attendees to Geopark Challenge competition in order to:
Maintain, manage and develop competition attendees relationships
Inform about Geopark Challenge and related information to it.
Organize Geopark Challenge competition.
5. Personal data in the register
NTRNZ media’s competition attendees to Geopark Challenge register stores the following information:
City and country of the team
Team members name
Team members gender
Team members phone number
Team members email address
Company name (optional)
Country / Region
Street address Postcode / ZIP
Town / city
6. Regular data sources
Data in the register is mainly obtained from the Geopark Challenge websites registration form.
7. Regular transfers of data
Data is not transferred outside NTRNZ media for marketing purposes. We only transfer data to be used in either for organizing the Geopark Challenge competition or services we use, such as project management or subcontracting. These companies have committed to comply with the requirements of the GDPR.
8. Transfer of data outside of the EU or EEA
Register data is not transferred outside of the EU or EEA.
9. Register protection principles
Persons handling the data in the register are under a non-disclosure agreement and inducted into using the register. The client register is placed and protected so that it is not accessible to unauthorised people. Access to the register requires a user name and password.
10. The right to inspect and object
The data subject has the right to access the personal data we have saved. The data subject has the right to request rectification of inaccurate or incomplete personal data concerning them. The data subject has the right to object processing their personal data if they feel that their data has been used unlawfully. Saved data may be erased if the data subject so demands or because the client relationship ends. Requests of the erasure of data should be sent to the Data controller in writing. The Data controller will reply to the data subject within the time frame set in the GDPR (mainly within a month). Where personal data is processed for direct marketing or other marketing purposes, the data subject has the right to object to transferring or processing of personal data concerning them for such marketing.arketing.