Privacy

Privacy Policy

This policy explains what personal data the Rastas ry website handles, for what purpose, and what your rights are. We keep data collection to a minimum: the site sets no tracking cookies and uses no analytics.

Data controller

The data controller is the association responsible for handling the information collected through this website.

Controller: Rastaalan koulun vanhempainyhdistys Rastas ry (Rastaala School Parents' Association)

Location: Espoo, Finland

Contact: Via the association's Facebook page or a member of the board.

What data we handle

The website handles personal data only through the membership and contact form. When you fill in and submit the form, we collect the details you provide:

• name
• email address
• your child's class (grade)
• your chosen way to take part (annual fee, volunteering and events, joining the board, or class representative)

The website sets no tracking cookies and uses no visitor analytics. We do not record your browsing or profile visitors. We collect no other personal data through the site.

Purpose and legal basis

We use the details you provide only to respond to your message and to handle practical matters related to membership and volunteering.

The legal basis for processing is your consent — you provide the details voluntarily via the form — together with the association's legitimate interest in administering membership and volunteering and staying in contact with you about them.

How data is handled and stored

The form's details are emailed directly to the association's board. The data is not stored in any database on the website — the site keeps no member register and no form log.

The data remains only in the board's email for as long as needed to act on your message, after which it is deleted. We handle the data confidentially, and it is seen only by the board members dealing with the matter.

Disclosures and third parties

The site's fonts are served from the site's own host, so loading a page makes no connection to third-party services.

We do not sell or otherwise disclose your personal data to third parties. The data is not used for advertising.

Your rights

Under the EU General Data Protection Regulation (GDPR) you have rights regarding your own data. You have the right to:

• be told what data about you is being processed (right of access)
• have inaccurate or incomplete data corrected (rectification)
• have your data erased (the “right to be forgotten”)
• restrict or object to the processing of your data
• withdraw your consent at any time

You can exercise your rights by contacting the association, for example via our Facebook page. You also have the right to lodge a complaint with the supervisory authority, the Office of the Data Protection Ombudsman in Finland, if you believe your data has been handled unlawfully.

Changes to this policy

We may update this policy if the website's operation or our data handling changes. The date of the latest update is shown below.

Updated 2 September 2026