Sports Institute of Eastern Finland Ltd's Mehtimäki Wellbeing and Sports Testing Center – New Business, Services, and Entrepreneurship Project’s Sport Me Up Business Idea Competition Registration and Privacy Notice. The registration and privacy notice contains the information required by the EU General Data Protection Regulation (679/2016) regarding the obligation to inform.

​

This registration and privacy notice describes the collection and processing of personal data in the Sport Me Up business idea competition. We reserve the right to make changes to this privacy notice.

​

Updated most recently on 19 March 2025.

 

1. Data Controller and Data Protection Officer

​

Data Controller:
Sports Institute of Eastern Finland Ltd
Business ID: 0167924-6
Länsikatu 15, 80110 Joensuu
Office: +358 50 408 4792
email: toimisto@islo.fi

​

Data Protection Officer:
Kimmo Simontaival, kimmo.simontaival@islo.fi

 

2. Contact Person Responsible for the Register

 

Petri Pennanen
Länsikatu 15, 80110 Joensuu
+358 50 452 2659
email: petri.pennanen@islo.fi

 

3. Purpose and Legal Basis for the Processing of Personal Data

​

Personal data is collected: 

• For the purpose of implementing the Sport Me Up business idea competition related to the Mehtimäki Wellbeing and Sports Testing Center – New Business, Services, and Entrepreneurship Project, and for the event associated with the competition.

​​

• For the work of the competition jury. Participants’ personal data is disclosed to the members of the competition jury because it is necessary for handling the proposals and conducting the evaluation. All members of the competition jury are committed to handling the data confidentially.

 

The legal basis for processing personal data in accordance with the EU General Data Protection Regulation is the legitimate interest in implementing the Sport Me Up business idea competition. In addition, explicit consent is requested from the individual for disclosing the data to the Business Coach of Business Joensuu. 

 

4. Content of the Register

The content of the surveys, registrations, and feedback of Sports Institute of Eastern Finland is determined based on the information provided by the competition participant. The data recorded in the register includes: the individual’s name, email address, telephone number, primary activity/employment status or free-form text content that, for example, maps out the participant’s situation or position. It is not recommended to share sensitive data through free-form text content in surveys, registration forms, and feedback forms. 

 

5. Regular Sources of Data

The data stored in the register is obtained directly from the user via the competition form or event registration. Data is stored on the servers of the survey and reporting application in Finland, and individual data is not delivered to third parties. The data protection practices of Itä-Suomen Liikuntaopisto’s data collection and survey system are comprehensively described here: https://www.islo.fi/fi/tietosuojaselosteet/  

 

6. Regular Data Disclosures and Data Processors

Data is not disclosed outside the EU or the European Economic Area. The personal data of competition participants is processed by the following parties who are part of the competition jury: the project specialist from Itä-Suomen Liikuntaopisto of the Mehtimäki Wellbeing and Physical Activity Testing Station – New Business, Services, and Entrepreneurship Project; the project manager from the City of Joensuu; the sports director of the City of Joensuu; and the business coach of Business Joensuu.

Personal data is processed using the following systems:

– M365 cloud services
– Webropol software

 

7. Automated Decision-Making, Including Profiling (Article 22 of the EU GDPR)

 

No automated decision-making or profiling is carried out in the processing.

 

8. Principles of Personal Data Protection

​

In the processing of the register, care is taken, and the data processed by the information systems is appropriately protected. The data controller ensures that the stored data, as well as access rights and other information critical to the security of personal data, are handled only by those employees whose job responsibilities require it. Each designated user has a personal username and password for system access.

​

9. Retention Period of Personal Data

​

Personal data collected in the register is retained only as long and to the extent that it is necessary. Itä-Suomen Liikuntaopisto is obligated to retain the material related to the project for at least five years, calculated from the beginning of the year following the year in which the project’s final payment was made.

​

Sports Institute of Eastern Finland, as the data controller, will retain registration data for events and/or other personal data related to the events for at least five years, calculated from the beginning of the year following the year in which the project’s final payment was made.

 

10. Rights of the Data Subject

​

Under the EU General Data Protection Regulation, the data subject has the right to:

• Access his/her personal data

• Request correction or deletion of his/her data

• Request restriction of processing or object to processing

• Request the transfer of personal data from one system to another or from one data controller to another

• Withdraw consent, if the processing of personal data is based on the consent provided by the data subject

• File a complaint with the Data Protection Ombudsman if the data subject considers that the processing of his/her personal data violates the applicable data protection legislation

Requests regarding the exercise of the data subject’s rights should be addressed in writing to the contact person responsible for the register. The data subject may not be able to exercise all rights in every situation. For example, the basis on which the personal data is processed may affect the situation. The data controller may, if necessary, ask the requester to prove his/her identity. The data controller will respond to the customer within the period specified in the EU General Data Protection Regulation (within one month). Contact details can be found at the beginning of this registration and privacy notice.