Privacy Policy

Data controller

The data controller is the association responsible for handling the information collected through this website.

Controller: Rastaalan koulun vanhempainyhdistys Rastas ry (Rastaala School Parents' Association)

Location: Espoo, Finland

Contact: Via the association's Facebook page or through the form.

What data we handle

The website handles personal data only through the membership and contact form. When you fill in and submit the form, we collect the details you provide:

• name
• email address
• your child's class (grade)
• your chosen way to take part (annual fee, volunteering and events, joining the board, or class representative)
• a message, if you write one

The website sets no tracking cookies and uses no visitor analytics. We do not record your browsing or profile visitors. We collect no other personal data through the site.

Purpose and legal basis

We use the details you provide only to respond to your message and to handle practical matters related to membership and volunteering.

The legal basis for processing is your consent (you provide the details voluntarily via the form), together with the association's legitimate interest in administering membership and volunteering and staying in contact with you about them.

How data is handled and stored

The details you send with the form are stored in the association's database, and the board is notified by email. They are handled confidentially and seen only by the board members dealing with the matter.

We keep the data only as long as needed to act on your message, and delete it after that. You can ask us to delete your data at any time by contacting the association.

Disclosures and third parties

The site's fonts are served from the site's own host, so loading a page makes no connection to third-party services.

The form uses Cloudflare Turnstile to keep out spam: when the form comes into view, your browser loads it from Cloudflare.

We do not sell or otherwise disclose your personal data to third parties. The data is not used for advertising.

Your rights

Under the EU General Data Protection Regulation (GDPR) you have rights regarding your own data. You have the right to:

• be told what data about you is being processed (right of access)
• have inaccurate or incomplete data corrected (rectification)
• have your data erased (the “right to be forgotten”)
• restrict or object to the processing of your data
• withdraw your consent at any time

You can exercise your rights by contacting the association, for example via our Facebook page. You also have the right to lodge a complaint with the supervisory authority, the Office of the Data Protection Ombudsman in Finland, if you believe your data has been handled unlawfully.

Changes to this policy

We may update this policy if the website's operation or our data handling changes. The date of the latest update is shown below.