General description of this privacy notice

We take into account the requirements set forth in the data protection legislation and process personal data in accordance with applicable legislation, including the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), and this privacy notice.

Data controller

Outi Kotala
Business identity code: 1981834-7
Address: Vehnämyllynkatu 6, 33560 Tampere FINLAND

Data register name

Artist Outi Kotala’s marketing list

What personal data we collect and for what purpose?

We collect the following personal data only for purposes described in later in this privacy notice.

If you are our customer or partner, we may process following data to the extent you provide it with us (for example filling in a newsletter list, or contacting us via email):

• First name and surname
• If a company customer, the company name and contact information
• Personal contact information: email address, home address, telephone number
• Other information you have voluntarily provided to us, for example applying for a newsletter or posting list.
• IP-address

Collected data is used in order for us to manage customer and partnership relations as well as marketing, implementing and developing our events and services like art exhibitions and exhibition openings. We also may use this data to ensure the artist’s Right of access (Finnish Copyright Act Section 52a (446/1995)) if needed.

We do not conduct any profiling or automated decision making based on your data.

Origins of acquired data

The personal data collected consists primarily of the information that you choose to provide us, for example when a person signs up to a newsletter or exhibition opening invitation list. This may happen via social media, through our webpages, by email or giving the information during an event or exhibition. Also the reseller of our artworks like a gallery may ask you to give your contact information. In addition, data may consist information about your use of our website through cookies (for example Google Analytics).

Transfer of data outside the EU or EEA

Your postal address may be given to a gallery owner or art exhibition / event manager for posting event invitations for art exhbition openings or newsletters. We do not grant 3rd parties permission to use the addresses to any other purpose than stated here. Email addresses are not given to third parties or outside EU or EEA.

For how long do we process personal data?

We process personal data for only as long as required or entitled by applicable legislation. We review the necessity of the data stored on a regular basis and erase any data when it no longer needed for the purposes mentioned above in this privacy notice.

Your rights

You have a

• right to access to your personal data. You may request us to confirm whether we process your personal data, and a copy of your personal data possibly processed by us, by sending us such request at the email address mentioned in this privacy notice;

• right to rectification and/or erasure of the data. You may request us to correct your personal data that is erroneous or inaccurate, and further, you may request us to erase your personal data. You can exercise these rights by sending us such request at the email address mentioned in this privacy notice;

• right to restrict the processing of your personal data. In certain situations, you may request us to restrict the processing of your personal data by sending us such request at the email address mentioned in this privacy notice;

• right to object to the processing of your personal data.

• right to withdraw your consent. Where the processing is based on a consent given by you, you may withdraw such consent at any time by sending us such request at the email address mentioned  in this privacy notice; we will then stop all your data processing and remove all your data from our registry.

Withdrawals of content and any requests and queries concerning your personal data and processing it should be sent in written / textual format to our email address outi (ät) outikotala.net

Protection of personal data

Personal data has been protected from unauthorised access and processing as well as against unlawful and accidental destruction, loss and corruption. The data is stored on a personal computer with password protection and encryption. We do not store data to outside or cloud based services. Only the artist has access to this information. In some cases named persons are given temporary access to postal addresses when posting exhibition opening invitations. These persons can be the gallerist and exhibition workers. If we outsource processing of personal data to third parties, we make agreements with such third parties as required by the data protection legislation in order for us to ensure that the processing of personal data complies with this privacy note as well as applicable laws, regulations and orders issued by relevant authorities.

Updates to this privacy notice

We update this privacy notice when there are changes in the processing of personal data or in the applicable laws of which we need to inform you. In addition, we may update this privacy notice when we develop our website, services or activities. The most recent version of the privacy notice is available at this website.

This post is also available in: Finnish