Studio Kukkapuro
Last updated: April 08, 2026
Studio Kukkapuro undertakes to process personal data in compliance with the data protection legislation and good data processing practice. The term “data protection legislation” refers particularly to the EU’s General Data Protection Regulation (GDPR) and Finnish legislation on personal data.
Studio Kukkapuro collects and processes personal data for the sending out a newsletter and membership registry.
Below are the data protection policies for the registers that we administer.
This privacy policy concerns the personal data of subscribers to Studio Kukkapuro’s newsletter and members of Friends of Studio Kukkapuro. This data protection policy notice describes how we process your personal data when you become a subscriber to our general newsletter or a member to the association.
Data controller: Friends of Studio Kukkapuro / Studio Kukkapuron ystävät ry and Studio Kukkapuro OY
Names of registers:
Studio Kukkapuro’s newsletter subscriber register
Friends of Studio Kukkapuro membership register
Contact person for matters related to the register
Ida Kukkapuro, hello@studiokukkapuro.com
Purpose and legal basis processing personal data
The collected personal data will be used for communicating about Studio Kukkapuro’s operations via the newsletter.
The legal basis for the processing of data is the registered person’s voluntary, individualised, deliberate and unambiguous consent. The registered has the right to cancel their consent and newsletter subscription at any time.
Members have the right to cancel their membership at any time.
Data sources
Studio Kukkapuro collects personal data for sending the newsletter from the registered person.
Personal data to be processed
We collect the following data on the registered person for newsletter subscription purposes: e-mail address, person’s first name and surname, address, phone number, company.
Protection and security of the register
Studio Kukkapuro is committed to following sufficient security measures in all its activities to protect personal data.
Right to use the register is limited on the organisational level to viewing the data or updating it to the extent required by the work tasks.
Use of the register requires a user name. The main user also determines the level of user rights. Logging on to the system requires a user password and the system is used through an encrypted SSL connection.
Recipients of personal data
Recipients of the personal data are those third parties to whom the personal data in the register is transferred or handed over, i.e. the data controller and processers of the personal data.
Studio Kukkapuro uses data processors to process personal data. The data is collected into the system of service provider Google.
Transferring personal data outside the EU/EEA zone
Personal data is transferred outside the EU/EEA zone when necessary for providing the service. This type of transferrring always takes place in accordance with standard contractual clauses approved by the European Commission.
Storing and removing personal data
Studio Kukkapuro stores personal data upon further notice. The registered may, however, discontinue their newsletter subscription or membership any time, which will result in their data being removed.
Removal of the data takes place through technical means, and backup copies will also be also removed.
Automatic decision making and profiling
Studio Kukkapuro does not use data for automated decision making or profiling.
Rights of the registered
The registered has the right to see the saved data on them, demand the correction of possibly false data and completion of incomplete data and to be removed if there is no legal basis for storing the data. The registered also has the right to request for their data to be limited, oppose the processing of their data and the right to transfer their data from one system to another.
The data controller may ask for the presenter of the request to prove their identity. The data controller shall respond to the customer within the time frame stipulated by data protection legislation (primarily within a month).
All data check and correction requests shall be made to the contact person in charge of register matters.
Complaint right
The registered has the right to file a complaint to the supervisory authority if they find that their data has been mishandled. The supervisory authority in Finland is the data protection ombudsman.