This is the privacy policy and data protection statementof the Central Karelia Sports Car Drivers Association () in accordance with the EU General Data Protection Regulation (GDPR). Prepared on March 15, 2026. Last updated on April 1, 2026.
1. Data controller
Central Karelia Sports Car Drivers Association
1092915-5
47 Aimontie
82380 TOLOSENMÄKI
2. Contact person responsible for the register
Arto Pirinen
+358 400 278 851
johto@smrallikitee.fi
3. Name of the register
The company's/association's customer database and marketing database, as well as the user database for the website and forum.
4. Legal basis and purpose of processing personal data
The legal basis for processing personal data under the EU General Data Protection Regulation is
Consent of the person when registering on the website. By registering, the person agrees to our Terms and Conditions of Registration and Data Protection.
Legitimate interest of the controller, customer relationship, advertising register.
The purpose of processing personal data is to communicate with customers, maintain customer relationships, conduct marketing, etc.
5. Data content of the register
The data stored in the registry includes: the individual’s name, position, company/organization, contact information (phone number, email address, mailing address), website addresses, IP address of the network connection, information about subscribed services and changes, billing information, and other information related to the customer relationship and the services ordered.
The IP addresses of website visitors and cookies necessary for the functioning of the service are processed on the basis of legitimate interest, for example, to ensure data security and to collect statistical data on website visitors in cases where such data can be considered personal data. Consent for third-party cookies is requested separately when necessary.
6. Regular sources of information
The information stored in the registry is obtained from the customer through various means, including when registering as a user on the website, messages submitted via web forms, email, telephone, social media services, contracts, customer meetings, and other situations in which the customer provides their information.
Information about contact persons at companies and other organizations may also be collected from public sources such as websites, directory services, and other companies.
7. Regular disclosure of data and transfer of data outside the EU or EEA
Information is not routinely disclosed to other parties. Information may be published to the extent agreed with the customer.
8. Principles of register protection
The register is managed with due care, and data processed using information systems is appropriately protected. When register data is stored on Domain Center’s cloud servers, the physical and digital security of the hardware is ensured as appropriate. The data controller ensures that stored data, as well as server access rights and other information critical to the security of personal data, is handled confidentially and only by those employees whose job description includes such duties.
9. Right of inspection and right to request correction of information
Every person listed in the registry has the right to review the information stored about them in the registry and to request that any incorrect information be corrected or that any incomplete information be supplemented. If a person wishes to review the data stored about them or request a correction, the request must be submitted in writing to the data controller. The data controller may, if necessary, ask the person making the request to verify their identity. The data controller will respond to the customer within the timeframe specified in the EU General Data Protection Regulation, generally within one month.
10. Other rights related to the processing of personal data
A data subject has the right to request that their personal data be erased from the register (“the right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Requests must be submitted in writing to the data controller. If necessary, the data controller may ask the person making the request to verify their identity. The data controller will respond to the customer within the timeframe specified in the EU General Data Protection Regulation, generally within one month.
