This is a combined Registry Statement and Information Document for HumanClub customers, potential customers and website users in accordance with Articles 12 and 13 of the EU General Data Protection Regulation (679/2016).

NAME AND CONTACT DETAILS OF THE REGISTRAR

HumanLab Oy (HumanClub's parent company)
Kappelitie 6 B, 02200 Espoo
+358 400 173 924
info@humanlabacademy.com

Person in charge of the register: Partner Hilkka-Maija Katajisto
Contact person for the register: Information Systems Specialist Tomi Hakala, +358 40 7652534, info@humanlabacademy.com

PURPOSE AND PURPOSE OF THE PROCESSING OF PERSONAL DATA (PURPOSE OF THE REGISTER)

Personal information stored in the Register of HumanLab Online Services is used to maintain and develop customer relationships, for marketing purposes, for statistics, and to provide and provide services. Personal data is processed within the limits permitted and required by the Personal Data Act.

The registrar has a legitimate interest in processing personal data to enable customer service and customer relationship management (HumanLab customers). Similarly, the data controller has the right to process personal data in order to handle incoming contact requests, newsletter subscriptions and event registrations (potential customers of HumanLab and users of the website) through the website.

REGULAR SOURCES OF INFORMATION

The registrar will only register information that you provide with your consent when using the HumanLab website and services or either face-to-face, by phone, email or other online tools.

PROTECTION OF THE REGISTER AND TRANSFER AND TRANSFER OF DATA OUTSIDE THE EU OR THE EUROPEAN ECONOMIC AREA

The information is collected in databases that are protected by firewalls, passwords and other technical means. The databases are located in locked and guarded premises and can only be accessed by certain pre-defined individuals. Confidentiality is binding on employees who process register data.

HumanLab does not disclose registry information to third parties. We have ensured that all our service providers involved in the processing of personal data (MailChimp https://mailchimp.com/legal/privacy/, Google https://policies.google.com/privacy?hl=en, Accountor Finago Oy https: // finago. com / en / terms of use /, Paradigm Personality Labs, LLC http://paradigmpersonality.com/privacy-policy/, Multi-Health Systems, Inc. (MHS) https://www.mhs.com/Privacy-Policy, Digital Agency ACQUA Tmi https://acqua.fi/tietosuojaseloste/ HubSpot https://legal.hubspot.com/privacy-policy Leadpages https://www.leadpages.com/privacy SurveyHero https://www.surveyhero.com/privacy ? ref = footer-menus, Paytrail Oyj https://www.paytrail.com/tietosuojaselosteet and Accounting Rocks Oy) comply with data protection legislation.

The US MailChimp e-mail service and the US Leadpages service are used for newsletter communications and registration of our events, in which case personal data is transferred outside the European Union. However, personal data is protected as required by the Personal Data Act. In addition, the MailChimp service provider has joined the so-called EU-US agreement. The Privacy Shield Program (https://www.privacyshield.gov/list), which aims to ensure the secure processing of European data in the United States. Read more about MailChimp's privacy policy: https://mailchimp.com/legal/privacy/. The personal data of the data subject will be destroyed at the request of the user. The request can be sent to the e-mail: info@humanlabacademy.com or unsubscribe from the link included with each newsletter.

Paradigm Personality Labs, LLC's My Paradigm Dashboard system is used for WorkPlace Big Five Profile ™ personality profiling. Paradigm Personality Labs is a US company that transfers personal information outside the European Union. However, personal data is protected as required by the Personal Data Act, as the provider of the My Paradigm service has joined the so-called EU-US agreement. The Privacy Shield Program (https://www.privacyshield.gov/list), which aims to ensure the secure processing of European data in the United States. Read more about MyParadigm's privacy policy: http://paradigmpersonality.com/privacy-policy/). Personal information (name and email address) will be deleted from MyParadigm upon request. The request can be sent by email: info@humanlabacademy.com

The MHS Talent Assessment Portal from Multi-Health Systems, Inc. (MHS) is used to measure EQ-i 2.0®. MHS is a Canadian company that transfers personal information outside the European Union. However, personal data is protected as required by the Personal Data Act, as Canada is an EU country with an adequate level of data protection and secondly, when data is transferred to the US for emotional intelligence, RHS The Privacy Shield Program (https://www.privacyshield.gov/list), which aims to ensure the secure processing of European data in the United States. Read more about MHS Privacy: (https://www.mhs.com/Privacy-Policy and https://www.mhs.com/Security-policy). Personal information (name and email address) will be deleted from the MHS Talent Assessment Portal upon request. The request can be sent by email: info@humanlabacademy.com

If manual material is printed from a register stored in databases, the material will be kept in a locked state and the registrar will only have access to the material. When manual material is no longer needed, it will be destroyed.

USE OF COOKIES

We use cookie-based Google Analytics to improve and evaluate the use of our website. In this context, Analytics compiles standard site usage reports. Cookies are used to collect information about the usage habits of website users, such as which pages a user visits and how long they are on the site. HumanLab uses information obtained from cookies to compile statistics on the use of the services. In addition, cookies can be used to target and measure marketing. Learn more about the privacy and security of Google Analytics and Google's privacy practices and policies.

DURATION OF DATA PROCESSING

Personal data will be processed for as long as is necessary to handle the customer relationship (current or potential), event marketing, personality profiling, emotional intelligence or other specified use for which the data is stored. We will enter the information in the register as we receive it from the registrant himself and it will be corrected and deleted according to what the registrant informs the registrar. You can unsubscribe from the newsletter mailing list yourself via the unsubscribe link in each newsletter we send you.

RIGHTS OF THE DATA SUBJECT

The registrant has the following rights, for which requests must be made to: info@humanlabacademy.com

Right of inspection
A person in the register has the right to inspect and obtain copies of personal data stored in the register about himself or herself. If there are any inaccuracies or omissions in the information, please send a request to HumanLab to correct or complete the information.

Right of objection
A person in the register has the right to object to the processing of personal data if he or she feels that they have been processed unlawfully.

Prohibition of direct marketing
The data subject has the right to prohibit the use of the data for direct marketing. We never sell or otherwise disclose personal information to others so that they can send direct marketing to the data subject.

Right of removal
The data subject has the right to request the deletion of his or her data if he or she does not consider the processing of the data necessary. We will process the deletion request, after which we will either delete the data or provide a valid reason why the data cannot be deleted.

You can remove yourself from the newsletter mailing list from the link that accompanies each newsletter.

The registrar is obliged to keep the accounting material in accordance with the period (10 years) specified in the Accounting Act (Chapter 2, Section 10). Therefore, the accounting material cannot be deleted before the deadline.

The data subject may appeal against the decision to the Data Protection Officer: instructions for making an appeal.

The data subject has the right to demand that we therefore limit the processing of the disputed data until the matter is resolved.

Right of appeal
A person in the register also has the right to lodge a complaint with the Data Protection Officer if he or she feels that we are in breach of the applicable data protection legislation when processing personal data (contact details for making a complaint).