Privacy policy

Updated: 16.02.2026//

In this privacy policy we explain how we process personal data on our website [www.hrmy.fi] In addition, we process personal data in the event accounting related to the association's activities.

1. Registrar

A Community for Construction Masters and Engineers

Business ID: FI0201290
Address: Eerikinkatu 11, 00100 HELSINKI
Email: info@hrmy.fi
Phone: (09) 646 343

2. Personal data collected

We process personal data that you provide or that is collected when you use the website. This may include, for example:

  • name and contact information (email, phone) via forms
  • content of messages in forms (e.g. contact requests)
  • newsletter subscription and cancellation information
  • IP address and cookie information (see section 6)
  • In addition, we process personal data related to membership and participation in events in connection with the activities of the association and its sub-branches. These may include, for example:
    • member's name
    • information about participation in the event (event name and date)
    • payment information and support information related to the event
    • information related to the person responsible for the subdivision or event
  • This information is processed only for purposes related to organizing events, paying and monitoring grants, and implementing the association's financial management and accounting.

The information is obtained from the registrant themselves in connection with event registration and from the association's sub-departments in connection with the organization of events and the administration of grants.

3. Purpose of personal data

Personal data is used:

  • responding to contacts and member services
  • to send newsletters and announcements (based on consent)
  • for the development of services and the website
  • to fulfill legal obligations

Personal data is also processed to manage participation in events organized by the association and its sub-departments, as well as for the processing, payment and monitoring of deductibles related to events and grants granted by the association.
The information is also used to carry out the financial administration, accounting and auditing of the association's operations.

4. Legal basis for processing

The processing of personal data is based on:

  • user consent (e.g. newsletter, cookies)
  • for the implementation of the contract (e.g. responding to contact and in connection with membership and event participation)
  • the legitimate interest of the controller (e.g. development of services and proper implementation of operations and correct allocation of financial support)
  • legal obligations, such as retention and documentation requirements under the Accounting Act

5. Data retention period

Personal data is only retained for as long as is necessary to fulfill the purposes for which it is used or as required by law.

  • Form data will be deleted upon request.
  • Personal data related to membership, participation in events and payment of subsidies is only retained for as long as necessary to fulfill the purpose of use.
  • Information related to financial management and accounting is stored in accordance with the Accounting Act.
  • Newsletter subscription information is retained until the subscriber cancels their subscription.
  • Cookies are stored in the browser in accordance with the user's consent.

6. Cookies and tracking

We use cookies and similar technologies on our website. Cookies help us collect information about, for example, the number of visitors, the browsers used, and the functionality of the website.

The use of cookies is managed by Cookiebot, which displays a cookie notice and allows you to choose which cookies to accept. The user can change their cookie settings at any time through the cookie notice.

Third-party cookies may be used, for example, for analytics (Google Analytics) and advertising targeting.

7. Disclosure and transfer of personal data

Data may only be disclosed to third parties in the following cases:

  • when required by law or official regulations 
  • in situations required for the provision of the service (e.g. to the newsletter service provider, technical administrators of the website)

Information may be disclosed to the association's auditor or auditor and, if necessary, to the authorities in situations concerning accounting and the association's statutory obligations.

Data may only be transferred outside the EU/EEA if the recipient has an adequate level of data protection (e.g. EU Model Contractual Clauses).

The association's departments may process personal data if required in connection with the organization of events and the administration of grants. The departments will process the data only for the purpose specified by the association and will comply with general data protection principles.

8. Rights of the data subject

The user has the right to:

  • check their own data and receive a copy of it
  • request correction or deletion of data
  • restrict or object to the processing of data
  • withdraw consent at any time
  • file a complaint with the Data Protection Ombudsman if you suspect that the processing of your data is unlawful

The right to erasure of personal data may be restricted to the extent that retention of the data is necessary to fulfill statutory obligations, such as the Accounting Act.

9. Data protection

We use appropriate technical and organizational safeguards to protect personal data from unauthorized access, alteration, or destruction.

Information related to events and grant management is stored in secure systems or restricted access folders. Only those persons whose duties include processing the information have access to the information.

10. Contact information for data protection matters

All requests and inquiries regarding data protection can be sent to: info@hrmy.fi