Privacy

Idearace is a business idea competition to be held in South Karelia for students of LUT University and LAB University of Applied Sciences, as well as for individuals and entrepreneurs from South Karelia. The organizers of Idearace, Business Mill and Lutes, are committed to protect the privacy of users of their services. This Privacy Notice describes what personal data we collect, what principles we apply when processing such data, and what rights and possibilities to influence individuals have regarding the data collected about them. The collected data is processed as described in this Privacy Notice and according to the EU General Data Protection Regulation (GDPR) and other applicable legislation.

Idearace’s services can be offered on various technical platforms, and the services may include links or access to other operators’ websites or services. We recommend that you familiarize yourself with such third-party data protection policies and terms of use. Idearace is not responsible for third-party data protection policies or terms of use.

What personal data do we collect?
We collect and store only such data that is required to carry out the competition, including names, phone numbers, email addresses, or other information that is essential for the purposes stated in this Privacy Notice.

Where does the collected data come from?
We collect personal data from the registered persons themselves or from other general sources available to us, such as the user data from our social media channels.

Why do we process personal data?
The primary basis for processing personal data is the use of Idearace’s services, a person’s other relevant connection to our services, or the person’s consent. In all cases, we aim to collect minimum identifying data.
We process your personal data for one or several of the purposes specified below.

1. Provision of services
Your personal data can be used to provide Idearace’s services, to answer your requests and questions, to fulfill other similar tasks, and to prevent the misuse of services.

2. Service development
Your personal data can be used for developing Idearace’s services and enhancing the user experience. In addition, your personal data can be used for implementing questionnaires and studies related to Idearace’s services.

3. Marketing and customer communications
Your personal data can be used for the marketing of Idearace’s services and events and for customer communications. For example, we can send you targeted notifications about our services or contact you in matters related to our services or customer service.

How do we use cookies?
Idearace collect cookies from users. Cookies are created by Google Analytics, which we use to analyze page loads and develop our website. If you do not want cookies, you can turn them off in your browser.

What are your rights?
Registered persons have, according to the EU General Data Protection Regulation, the right to inspect their own collected data. They have also the right, at any time, to request Idearace to correct, remove or limit their data, or request transferring of their data to another data controller. In addition, registered persons have, at any time, the right to cancel their consent to process their personal data.

If you want to use the rights described in the above data protection regulation, please contact our data controller. You will find the contact information below, under “Controller’s contact details”.

At any time, you can forbid Idearace to use your data in direct marketing and in customer satisfaction or other surveys. Notwithstanding this, we can send you notifications about changes or faults and malfunctions in our services.

The registered persons have the right to send a complaint to the Data Protection Ombudsman’s office if they believe that existing laws have been violated in the processing of their personal data.

Transferring or handing over of data
The collected personal data is not transferred or handed over to parties outside Idearace without the consent of the person affected. On our website, we use Google Analytics. That service may be provided by an operator located outside the European Union (EU) or the European Economic Area (EEA). In these cases, too, privacy is protected according to the GDPR regulations.

Register protection principles
The register is maintained and used with due diligence and care. The data processed in data systems is protected appropriately. When register data is stored on web servers, proper measures are applied to secure that the hardware fulfils the requirements of physical and digital data security. The controller ensures that the stored data, permissions to access the servers, and other critical data related to privacy protection are processed in confidence and only by the employees whose job duties require them to access such data.

The persons who have the right to access our clients’ personal and other data are under obligation of confidentiality.

Pipedrive is the company that provides our customer management system. You can read their privacy notice at https://www.pipedrive.com/en/privacy.

We store the collected data as long as it is necessary for our operations.

Controller’s contact details
The controller of your personal data is LAB University of Applied Sciences Oy (business ID 2630644-6) at Yliopistonkatu 36, 53850 Lappeenranta and LUT Entrepreneurship Society ry (Lutes) (business ID 2475174-9) PL 20, 53850 Lappeenranta

Idearace Lahti is a business idea competition organized in Päijät-Häme for students of LUT University and LAB University of Applied Sciences, as well as entrepreneurs and individuals from Päijät-Häme. The organizers of Idearace, StartHUB, Lutes and Lab Growth, are committed to protecting the privacy of the users of their services. This data protection notice explains what personal data we collect, the principles by which we process it, and what rights and possibilities of influence individuals have with respect to the data collected about them. Collected information is processed as described in this privacy notice, in accordance with the EU General Data Protection Regulation (GDPR) and other applicable legislation.

Idearace’s services can be offered on different device platforms, and the services can contain links or access to the sites or services of other operators. We recommend that you carefully read the privacy policies and terms of use of such third parties. Idearace is not responsible for the privacy practices or terms of use of third parties.

What personal data do we collect?
We collect and store only such data that is required to carry out the competition, including names, phone numbers, email addresses, or other information that is essential for the purposes stated in this Privacy Notice.

Where does the collected data come from?
We collect personal data from the registered persons themselves or from other general sources available to us, such as the user data from our social media channels.

Why do we process personal data?
The primary basis for processing personal data is the use of Idearace’s services, a person’s other relevant connection to our services, or the person’s consent. In all cases, we aim to collect minimum identifying data.

We process your personal data for one or several of the purposes specified below.

1. Provision of services
Your personal data can be used to provide Idearace’s services, to answer your requests and questions, to fulfill other similar tasks, and to prevent the misuse of services.
2. Service development
Your personal data can be used for developing Idearace’s services and enhancing the user experience. In addition, your personal data can be used for implementing questionnaires and studies related to Idearace’s services.
3. Marketing and customer communications
Your personal data can be used for the marketing of Idearace’s services and events and for customer communications. For example, we can send you targeted notifications about our services or contact you in matters related to our services or customer service.

How do we use cookies?
Idearace collect cookies from users. Cookies are created by Google Analytics, which we use to analyze page loads and develop our website. If you do not want cookies, you can turn them off in your browser.

What are your rights?
Registered persons have, according to the EU General Data Protection Regulation, the right to inspect their own collected data. They have also the right, at any time, to request Idearace to correct, remove or limit their data, or request transferring of their data to another data controller. In addition, registered persons have, at any time, the right to cancel their consent to process their personal data.
If you want to use the rights described in the above data protection regulation, please contact our data controller. You will find the contact information below, under “Controller’s contact details”.
At any time, you can forbid Idearace to use your data in direct marketing and in customer satisfaction or other surveys. Notwithstanding this, we can send you notifications about changes or faults and malfunctions in our services.

The registered persons have the right to send a complaint to the Data Protection Ombudsman’s office if they believe that existing laws have been violated in the processing of their personal data.
Transferring or handing over of data

The collected personal data is not transferred or handed over to parties outside Idearace without the consent of the person affected. On our website, we use Google Analytics. That service may be provided by an operator located outside the European Union (EU) or the European Economic Area (EEA). In these cases, too, privacy is protected according to the GDPR regulations.

Register protection principles
The register is maintained and used with due diligence and care. The data processed in data systems is protected appropriately. When register data is stored on web servers, proper measures are applied to secure that the hardware fulfils the requirements of physical and digital data security. The controller ensures that the stored data, permissions to access the servers, and other critical data related to privacy protection are processed in confidence and only by the employees whose job duties require them to access such data.

The persons who have the right to access our clients’ personal and other data are under obligation of confidentiality.

We store the collected data as long as it is necessary for our operations.

Controller’s contact details
The controller of your personal data is LAB University of Applied Sciences Oy (business ID 2630644-6), at Mukkulankatu 19, 15101 Lahti, and LUT Entrepreneurship Society ry, PO Box 20, 53850 Lappeenranta (business ID 2475174-9)

LAB’s data protection officer
Lawyer Anne Himanka
Lappeenranta University of Technology, Yliopistonkatu 34, 53850 Lappeenranta
Phone number: 050 564 4623
E-mail: tietosuoja@lut.fi