The NextGen Project Oy
Business ID: 3086252-5

Heikki Leskinen
tel. +358 40 5210125
email address: heikki.leskinen@thenextgenproject.io

We request that data subjects contact the person listed hereinabove for all questions related to the processing of personal data and situations related to the exercising of your rights.

The legal basis for the processing of personal data is the consent to the processing of personal data provided by the data subject.

The purposes of processing personal data include: selecting members for The NextGen Project community, informing community members about upcoming events and projects, and selecting members to join such events and projects.

The controller only collects personal data concerning the data subjects that is essential and relevant for the purposes explained in this privacy statement.

The following data concerning the data subjects is processed:

• name, phone number, email address, social media profile address, date of birth, gender, domicile, current employer, job title, education, person's picture, and answers to open questions related to applying to The NextGen Project or to projects it is organizing.

Personal data is generally not disclosed to third parties. The following exceptions apply:

• The controller may share the above-mentioned personal information with clients or partners when selecting participants for projects organized by The NextGen Project (e.g. training, advisory and mentoring). The information is shared for the purposes of participant selection and project implementation. These clients or partners may store such information for the purposes of informing about future opportunities (e.g. about other similar projects or job opportunities).

• The controller may share the following information with other members of The NextGen Project community for the purpose of facilitating networking between members: name, email address, social media address, and person's picture.

Data may also be disclosed to the authorities due to legal requirements.

For individuals applying to become members of The NextGen Project (non-members): The controller will process the personal data for 6 months. At the end of this period, the controller will delete or anonymise the data.

​

For individuals that have been accepted to be members of The NextGen Project (members): The controller will process the personal data until the individual resigns The NextGen Project, otherwise requests erasure of personal data or the activity for which the data is processed is discontinued. On any of these occasions, the controller will delete or anonymise the data.

​

The controller may have an obligation to process some personal data belonging to the filing system for longer than stated above in order to comply with the legislation or authority requirements.

Right to request access to personal data

​

The data subject has the right to receive confirmation regarding whether personal data concerning them is being processed and, if it is, the right to receive a copy of their personal data.

​

Right to rectification

​

The data subject has the right to request that inaccurate and erroneous personal data concerning them be rectified. The data subject also has the right to supplement incomplete personal data by submitting the required additional information.

​

Right to erasure

​

The data subject has the right to request the erasure of personal data concerning them if

​

a. the personal data is no longer required for the purposes for which they were collected;

b. the data subject withdraws their consent which the processing of personal data was based on, and no other legal basis exists for the processing; or

c. the personal data has been unlawfully processed.

Right to restriction of processing

The data subject has the right to restrict the processing of personal data concerning them if

a. the data subject contests the accuracy of their personal data;

b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead; or

c. the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims.

​

Right to withdraw consent

​

The data subject has the right to withdraw the consent they have provided for the processing, without affecting the lawfulness of processing based on consent before its withdrawal.

​

Right to data portability

​

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller.

​

Right to lodge a complaint with a supervisory authority

​

The office of the Data Protection Ombudsman, operating under the Ministry of Justice, is the national supervisory authority for personal data matters. You have the right to bring your case to the supervisory authority if you consider that the processing of personal data concerning you is in violation of applicable law.