Privacy notice of Tuotantotalouden Kilta Prodeko ry

This is the register and privacy notice of Prodeko Ry in accordance with the henkilötietolaki (the Personal Data Act, sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Drawn up 23.05.2018. Last modified 19.09.2026.

This privacy notice describes how Tuotantotalouden Kilta Prodeko ry collects, uses and processes users’ personal data. It applies to all of Prodeko’s digital services, which are specified in more detail at the end of this document.

1. Controller and contact details

Tuotantotalouden Kilta Prodeko ry

In questions concerning data protection and the processing of your own data, you can contact the email address mentioned above.

2. Storage and security of data

Data is processed with due care and is appropriately protected. The data contained in the digital services is protected with firewalls, passwords and other technical means generally accepted in the information security industry. Physically maintained materials, such as the minutes of the board, of the guild meeting and of the annual meeting, are located in locked premises to which unauthorised persons have no access.

Unless otherwise stated for an individual service, the digital services and the data relating to them are located on a virtual server in Microsoft Azure’s data centre in Amsterdam.

When you use Prodeko’s website, technical log data such as the IP address, operating system settings and browser type and version is stored on our server. We do not use this data for analytics, advertising or identifying individual users, unless otherwise stated in the service-specific breakdown.

3. Disclosure of data and third parties

As a rule, we do not disclose data to other parties or outside the EU and EEA countries. In our operations, however, we use the following external service providers, which process data in accordance with their own privacy notices: Mailman, Mailchimp, SendGrid, Kide.app, Stripe, kululaskut.fi

All the service providers we use comply with the EU data protection regulation.

Use of cookies

Cookies are small text files that the browser stores on the user’s terminal device. Prodeko’s main website stores no cookie and no other identifier on your device: the counting of visitor numbers uses no cookie either, and the site carries no third-party plugin that would set one of its own.

Services that require a login, such as the member pages and event sign-up, use a session cookie. It is strictly necessary for providing the service you asked for — without it you would not stay logged in — and it is used for nothing else. If you wish, you can block the use of cookies in your browser settings, in which case the services requiring a login will not work.

4. Rights of the data subject

Every person in the register has the right to check the data stored about them in the register and to demand the correction of any erroneous data or the completion of incomplete data. A person in the register also has the right to request the erasure of personal data concerning them from the register. Persons also have the right to restrict the processing of personal data in certain situations. If a person wishes to check the data stored about them or to demand its rectification, the request must be sent in writing to the controller’s email address (mediakeisari@prodeko.org).

5. Data content of the register and data sources by service

The use of certain services or parts of them has been restricted on the basis of the user’s location or authentication.

www.prodeko.org

The service functions as Prodeko’s main website and it contains a wide range of material, some of which is visible only to logged-in users. Credentials for the service are created for a guild member when they join as a member. Personal data may appear on the site in the minutes of the board, in the contact details of the guild’s officials and in study accounts.

Visitor numbers on this site are counted by GoatCounter, running on Prodeko’s own server. It stores no cookie and no other identifier on your device, and the data is not passed to any third party. For each page view we record the address of the page, the page you arrived from, the language and type your browser reports, the screen width, and an approximate location at country level. We also count how many times the links on these pages to Prodeko’s other services, such as event sign-up or the webshop, have been opened; of those, only the link’s destination and the time are recorded.

Your IP address is not stored: it is held in the server’s memory for at most eight hours in order to recognise a single visit, and is then gone. We therefore cannot identify you and cannot follow your visits from one day to the next. Member pages behind a login are not counted at all. The data is deleted after 24 months.

The lawful basis is the controller’s legitimate interest (GDPR Article 6(1)(f)): the guild wants to know which of its own pages are used and which are not.

You can opt out with the button below. It stores one entry in your browser whose only purpose is to stop the counting on this device.

Prodeko’s electronic matrikkeli is integrated into the main site; there, members of both the guild and the guild’s alumni association can view the information the others have shared. When you join Prodeko as a member, we record the personal data required for joining (full name, place of residence, field of study and major, email address and membership of AYY). In addition to this, we record in the register the administrative membership data derived from the time of and grounds for joining (excursion year class, membership end date and membership type). We also collect data that you enter voluntarily while using the service, such as your work history. If you purchase Prodeko membership through an external provider, such as kide.app, the service provider may store and share data about you with us in addition to the above. You can always find more information about this in the terms of use of the service provider in question. Registered users can edit their membership data and, if necessary, delete their data. The maintenance, administration and practices of the electronic matrikkeli are described in more detail in the matrikkeli’s register notice.

In addition, a bulletin service – tiedotteet.prodeko.org – is integrated into the main site. It is used for Prodeko’s communications and for creating the weekly bulletin sent by email. Personal data may appear in the bulletins if it is essentially related to the matter being announced. For example, the party providing further information about a bulletin is often recorded at the end of the bulletin.

kiltiskamera.prodeko.org

The primary purpose of the service is to make it possible to follow the real-time situation in the guild room. The function is implemented by transmitting live video (a livestream) from the guild room. Use of the service is restricted exclusively to members of Tuotantotalouden Kilta Prodeko ry. Making use of the service requires a successful login to Prodeko’s digital services. In order to use the service, the user must also give consent in the service to separate permissions so that the service works.

membership.prodeko.org

The purpose of the service is to act as Prodeko’s member register. Alongside the matrikkeli, membership data is therefore also stored in that service. In the member register we store the personal data required for joining as a member (full name, place of residence, field of study and major, email address and membership of AYY). We also record in the register the administrative membership data derived from the time of and grounds for joining (excursion year class, membership end date and membership type). Access to all of the data in the member registers is available only to persons designated by the guild’s board whose work for the guild requires access to the data.

alumni.prodeko.org

The purpose of the service is to act as the communication channel of Prodeko’s alumni association (Prodekon Alumni ry). Alumni bulletins are published on the site and they may contain names, for example as signatures.

bilis2.prodeko.org

The purpose of the service is to keep a record of the billiards games played in Prodeko’s guild room and, on the basis of these, to calculate skill level indices for the players. The first and last name, emoji, nickname, motto and index are stored about a player. The winner, loser, date and time of day, as well as information about whether the loser potted a single ball, are stored about a game. The data of all users and games is freely retrievable. Because of the nature of the service and in order to prevent misuse, the service can be used only in the guild room.

gallery.prodeko.org

Photographs from the guild’s events are stored in the service. The service provider is Kuvat.fi ( https://kuvat.fi). Information about the person photographed, for example their first name, may be attached to the file name of the photograph. The photographs are publicly visible.

ilmo.prodeko.org

The service is used for communications about the guild’s events and for registering for them. The data collected in connection with registration depends on the event, but in connection with every event at least the first and last name, the time of registration and the email address are collected. The email address is used for sending the cancellation link and for communications relating to the event. Other data typically collected are the registration quota, food allergies and year class. Of the registration data, the first and last name, the time of registration and any quota are publicly visible in the service. The quota is event-specific and can in principle be anything, but most often the quota is set as the year class, the guild or the team. Depending on the event, registration data may be passed on to a party outside the guild, for example to the organiser of an excursion. Registration data is automatically anonymised six months after registration has closed, in such a way that nothing remains of it apart from the number of registrants, any quotas and their fill rates. The anonymised data is used for analysing participation numbers and for improving the range of events.

infoscreen.prodeko.org

The service is intended as a continuously updating information display and its use is restricted to the guild room. The bulletins may occasionally contain personal data.

namu.prodeko.org

The service acts as a payment terminal for the food products sold in the guild room. Using the service requires creating a user account, about which the first and last name as well as a username determined by the user are stored. The user can buy products by depositing money into their user account and using it for purchases. The deposit is made as a bank transfer with the MobilePay mobile application (https://mobilepay.fi) or as a mobile payment intermediated by the service provider Stripe (https://stripe.com/en-fi). The external service providers process data relating to payments in accordance with their own privacy notices.

The service keeps a record of the deposits and purchases made, of logins to the service, of the device type of the logged-in user (mobile, desktop or the guild room tablet) and of the external service used for deposits (Mobilepay or Stripe). The maintainers of the service can see aggregated statistics of the above-mentioned data, which cannot be connected to individual users. A user’s purchase and deposit history is visible only to the user themselves.

sikajuhlat.com

Each year, for a few months preceding the Sikajuhlat, the service offers a browser game in which those who achieve the best scores are rewarded at the Sikajuhlat. In connection with playing, a nickname and possibly a Telegram handle as well as an email address are collected in order to reach the best players. Player data is deleted after the Sikajuhlat.

vaalikoppi.prodeko.org

The service acts as a platform for voting at guild meetings, and it is not intended for continuous use. The names of the candidates are stored in the service for the duration of the vote. Voters are authenticated with a randomly generated voter-specific pseudonym. The purpose of the pseudonym is to prevent outsiders from taking part in the vote and to ensure the secrecy of the ballot. In connection with casting a vote, only the information that the holder of the pseudonym has used their vote is stored. All data in the service is deleted after each occasion of use.