Clubs

Purpose of Processing

• Maintaining contact information
• Authentication of access rights
• Communicating with the clubs
• Informing ISYY members about the club activities

Legal Basis of Processing

Processing is based on Article 6 of the EU's General Data Protection Regulation. More spesific reasons for personal data processing are:

• Processing is based on Article 6 or Article 9 of the EU's General Data Protection Regulation
  • EU GDPR Article 6, section 1, subsection a:
    • Consent of the data subject
  • EU GDPR Article 9, section 2 (special categories of personal data: dietary information in events organised by ISYY clubs), subsection a:
    • Consent of the data subject

Automated decision-making and profiling

Decision-making is automated when

• decisions are based solely on the automated processing of personal data and
• the decisions produce legal effects concerning the data subject or significantly affect him or her.

Automated decision-making is possible without profiling and vice versa. However, a single processing activity can involve both, depending on factors such as the data being used. Decisions that are not based on automated processing alone can also involve profiling.

Profiling means the automated processing of personal data for evaluating the personal aspects of an individual. In particular, profiling refers to the analysis or prediction of aspects concerning the data subject's performance at work, economic situation, health, personal preferences or interests, reliability or behaviour as well as location or movements.

ISYY does not use automated decision-making or profiling.