Updated: 17 January, 2019

File Controller

Business Oulu, an enterprise owned by the City of Oulu (VAT number: FI01876901)
Hallituskatu 36 A, 90100 OULU,

+358 8 558 558 10
P.O. Box 22, FI-90015 Oulun kaupunki, FINLAND

Representative of the Data Controller
Business Oulu, an enterprise owned by the City of Oulu, director
Juha Ala-Mursula


Contact person

Marko Sulonen

Data Protection Officer – contact details

Name of the register

Event participant and customer register

  1. Personal data storage (mandatory)

Purpose of processing personal data and legal basis

Registration information entered by the registered self may include, among others, the following information: name, email, phone number, address, date of birth, or allergy information.

In case the event is organised by the project, and the financial sponsor has requested that the signed list of participant is to be retained, it shall be kept securely for a period to be determined by the financial sponsor.

Personal data is being processed in order to implement the contract signed between the File Controller and the Registered Person and, where applicable and subject to the prior consent of the Registered Person, also in connection to and to facilitate measures relating to customership management such as orders, registration, contacts, service use, marketing, and reporting.

Registered participant accepts, that events can be stored (photographing, video recording), and stored information can be used in event communications and marketing during the event and after that.

If the Registered Person fails to provide information that is required to register for an event, the File Controller cannot accept the said registration or commit to the contract between the File Controller and the Registered Person on participation in the event.

Storage period of personal data

Personal data will be stored for three years after the event. Data will be deleted when the above storage period has expired.

Regular disclosure of information

The data will be stored in BusinessOulu Customer Relationship Management system. Information contained in the register can be distributed within the organization and between the interest groups of the event. Information will not be transferred outside the EU or EEA.

Data security principles

Data will be stored in a technically secure location. Physical access to the data is prevented by means of access control and other security measures. Access to the data requires sufficient rights and multi-phase identification. Unauthorized access is also prevented by means of e.g. firewalls and other technical protection measures. Data contained in the register can only be accessed by the File Controller and separately named technical persons. Only the named persons have the right to process and maintain information contained in the register. The users are bound by confidentiality obligation. Back-ups are made of the data contained in the register in a secure manner and the data can be restored where needed. The level of information security is audited regularly through either external or internal audits.

The rights of the Registered Persons

You have a right to:

Requests concerning the rights of data subject are addressed to:

Oulu City Registry Office
P.O. Box 71
90015 Oulun kaupunki, Finland
Visiting address: Kansankatu 55 A, 90100 Oulu, Finland
An electronic request is addressed to:

The data subject is entitled to be referred to the Data Protection Ombudsman if (s)he thinks that the processing of personal data is in violation with relevant legislation.

Name of the Authority: Data Protection Ombudsman

For more information on the rights of the data subject, please visit:


2. Data use for other purposes listed in the Privacy Policy (optional)

The customer agrees that personal data may be used for the following purpose:

Changes to Privacy Statement

BusinessOulu continuously develops its business and therefore reserves the right to change this Privacy Statement by notifying about the change in the service. Changes can also be based on changes in legislation. BusinessOulu recommends that data subjects regularly review the content of the Privacy Statement.