top of page

Privacy policy

Privacy Policy — Investment Fair Participant and Marketing Register

1. Data Controller

Tampereen Nuorkauppakamari RY P.O. Box 200, 33101 Tampere

Contact person for registry matters: Kalle Koivisto, 040 365 2754, pres(at)tnkk.fi

The organization has not appointed a Data Protection Officer (as referred to in Article 37 of the EU General Data Protection Regulation). For data protection matters, please contact the person listed above.

2. Name of the Register

Investment Fair Participant and Marketing Register

3. Purpose and Legal Basis for Processing Personal Data

Personal data is processed for the following purposes:

Event organization and administration:

  • Receiving and managing registrations

  • Participant communications (e.g. confirmations, instructions, updates)

  • Managing access rights to the event

  • Collecting and processing feedback

  • Accommodating special arrangements (e.g. accessibility, dietary restrictions) — based on consent

Customer relationship management and development:

  • Communication with participants and potential participants

  • Customer service

Marketing and communications (Investment Fair's own):

  • Marketing of the Investment Fair and similar future events (email, newsletters — where consent has been given or based on legitimate interest)

  • Targeted advertising (e.g. on websites or social media channels)

  • Market research and surveys

Disclosure of data to exhibitors for marketing purposes (only with the registrant's explicit consent): If the registrant provides a separate and voluntary consent at the time of registration, their contact details (e.g. name, email address, company) may be disclosed to selected exhibitors of the Investment Fair for their own direct marketing purposes. Each exhibitor is then solely responsible for their own processing of personal data and their privacy practices.

Compliance with statutory obligations: For example, obligations related to accounting legislation (even though the event is free, the organizer may have costs and related accounting obligations).

Legal bases for processing:

  • Contract: When a person registers for the event, processing is based on the contract between the data controller and the registrant regarding participation.

  • Consent:

    • Electronic direct marketing (Investment Fair's own marketing, unless based on legitimate interest)

    • Explicit consent for disclosure of data to exhibitors for marketing purposes

    • Use of certain cookies

    • Processing of sensitive data (such as dietary restrictions)

    • The registrant has the right to withdraw consent at any time.

  • Legitimate interest: The data controller may have a legitimate interest in processing data for direct marketing to existing participants (regarding similar future events, under certain conditions), for business analysis and development, or for fraud prevention. Processing based on legitimate interest is always carefully assessed against the rights and freedoms of the registrant.

  • Legal obligation: For example, retention periods required by accounting legislation.

4. Personal Data Processed

We may collect and process the following personal data:

Basic information:

  • First and last name

  • Email address

  • Phone number

  • Age (age group: under 18, 18–25, 26–40, 41–60, over 60)

  • Gender

  • Professional group

Investment background:

  • Size of investment portfolio (in euros)

  • Investment types (e.g. equities, funds, deposits, insurance investments, residential properties, real estate, forest and land assets, bonds, crypto markets)

  • Method of managing investments (self-managed, with investment advice, or via an asset manager)

  • Areas of interest at the Investment Fair (e.g. listed companies, funds, economic outlook, taxation, new investment products, wealth management services, property and real estate investment, forest investment)

Event history:

  • Previous attendance at investment events (e.g. Tampere Investment Fair, Helsinki Investor Fair, Pörssisäätiö Stock Evenings, Osakesäästäjät events, Suomen Vuokranantajat events)

Marketing and communications data:

  • The channel through which the registrant first heard about the Investment Fair (e.g. email invitation, website, outdoor advertising, digital advertising, print advertising, social media, friend's recommendation, radio advertising)

  • Consent to receive email invitation to next year's Investment Fair (yes/no)

  • Consent to receive information about future investment events (yes/no)

  • Consent to receive messages from Investment Fair partners (yes/no)

  • Newsletter subscription and open/click data

Participation in competitions and prize draws

Other registration data:

  • Date of registration

  • Acceptance of the privacy policy

  • Free-form greetings to the organizers

Technical data and cookies:

  • Website usage data (IP address, browser type, device type, time and duration of visit, pages visited)

  • Data collected through cookies and other tracking technologies (see section 6)

Feedback data:

  • Event-related feedback and development suggestions

Photographs and video recordings: The event may be photographed and filmed for marketing and communications purposes. Participants will be informed of this separately at the venue and/or in pre-event communications. If you do not wish to be photographed in a way that identifies you, please inform the photographer or event staff.

5. Mandatory Nature of Data and Consequences of Not Providing It

Fields marked with an asterisk (*) on the registration form are mandatory for event registration. The mandatory fields are: first name, last name, and email address. Providing this information is a contractual requirement — without it, we cannot process the registration or deliver the free ticket.

Other fields on the form (e.g. phone number, age, gender, professional group, investment background) are optional. Failing to provide them does not prevent registration.

Marketing consents (invitation to next year's event, information about future investment events, messages from partners) are voluntary. Not giving consent has no effect on participation in the event.

6. Regular Sources of Data (Article 14 of the GDPR)

Personal data is primarily collected from the following sources:

  • From the registrant themselves: Via registration forms, email, phone, website forms, social media, or other comparable channels.

  • Public sources: Such as company websites or other public registers (to a limited extent and only for specific purposes, e.g. supplementing B2B contacts).

  • Cookies and analytics: Data is collected about the use of our website via cookies and other tracking technologies.

7. Recipients of Personal Data and Transfers Outside the EU/EEA

Website platform Our website is built on the platform provided by Wix.com Ltd. Wix acts as a data processor on behalf of the data controller to the extent that personal data is processed in connection with the technical operation, maintenance, and security of the website.

Analytics and marketing measurement We use Google Analytics and Google Ads, provided by Google Ireland Ltd., to analyze website usage and measure the effectiveness of marketing campaigns.

Social media advertising We use Facebook and Instagram advertising services provided by Meta Platforms Ireland Ltd., as well as the Meta Pixel, for targeting and measuring marketing. We also use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company for targeting and analyzing marketing communications on the LinkedIn platform.

Cookie management For cookie consent management, we use the service provided by Usercentrics GmbH, which enables users to manage cookie settings in accordance with GDPR requirements.

Email marketing For email marketing and newsletter distribution, we use the service provided by The Rocket Science Group LLC (Mailchimp). Mailchimp processes personal data (name, email address) on our behalf to send emails and enable campaign tracking.

The use of all the above analytics and marketing systems is based on the consent of the registrant, managed through a cookie banner or equivalent consent mechanism.

Personal data may be disclosed to the following parties:

  • Service providers: We use external service providers for e.g. IT system maintenance (such as registration systems), marketing tools, and event technology. These providers process personal data on our behalf and according to our instructions. We ensure by contract that providers comply with data protection legislation.

  • Exhibitors: If you have given explicit and voluntary consent at registration, we may share your contact details (e.g. name, email, company) with named exhibitors participating in the Investment Fair for their own direct marketing purposes. Each exhibitor then acts as an independent data controller for the disclosed data and is responsible for its own processing and its lawfulness, as well as its own privacy information. You may withdraw this consent at any time by notifying us, but withdrawal does not affect disclosures made prior to the withdrawal.

  • Authorities: Data may be disclosed to authorities based on a statutory requirement.

Transfers outside the EU/EEA

Personal data is not generally transferred outside the EU or the European Economic Area (EEA). Some of our service providers (Wix, Google, Meta, Mailchimp) may process data in the United States. In such cases, the legal basis for the transfer is either:

  • The European Commission's adequacy decision under the EU–U.S. Data Privacy Framework (Article 45 of the GDPR), or

  • Standard contractual clauses approved by the European Commission (Article 46(2) of the GDPR).

For more information about the transfer mechanisms used, please contact the person listed in section 1.

8. Retention Periods for Personal Data

We retain personal data only for as long as necessary to fulfil the purposes set out in this privacy policy and to comply with statutory obligations.

Retention periods vary by data type:

  • Registration data: Retained for up to 5 years after the event for handling possible complaints, feedback, and informing about future similar events (provided marketing consent is valid).

  • Data on disclosures to exhibitors and consents given: Retained for as long as necessary to manage the consent and meet accountability obligations, or until consent is withdrawn.

  • Marketing data (for Investment Fair's own use): Retained until the person has prohibited marketing or withdrawn their consent, or until the data is no longer relevant for marketing purposes. The currency of the marketing register is reviewed regularly.

  • Accounting records: Although the event is free, the organizer may have costs. Related accounting records are retained in accordance with accounting legislation (generally 6 or 10 years).

We regularly assess the need to retain data and delete unnecessary data in a secure manner.

9. Principles of Register Security

We ensure the security of your personal data through appropriate technical and organizational measures, including:

Digital material:

  • Access rights restricted to only those persons who need the data for their work

  • Personal user accounts and passwords

  • Firewalls, antivirus software, and other security software

  • Encryption of data in transit (e.g. SSL/TLS)

  • Regular backups

Physical material:

  • Locked premises

  • Access control

  • Secure destruction of paper material (e.g. shredding)

We train our staff on data protection practices and ensure they understand the importance of handling personal data confidentially.

10. Rights of the Registrant

As a registrant, you have the following rights:

  • Right of access: You have the right to check what data has been stored about you in our register.

  • Right to rectification: You have the right to request the correction of inaccurate, imprecise, or incomplete data.

  • Right to erasure ("right to be forgotten"): In certain situations, you have the right to request the deletion of your personal data.

  • Right to restriction of processing: In certain situations, you may request that the processing of your personal data be restricted.

  • Right to object: You have the right to object to the processing of your personal data based on legitimate interest or for the Investment Fair's own direct marketing.

  • Right to data portability: Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive the data you have provided in a structured, commonly used, and machine-readable format.

  • Right to withdraw consent: If the processing of personal data is based on your consent (e.g. consent to disclose data to exhibitors or for electronic direct marketing), you have the right to withdraw your consent at any time. Consent can be withdrawn by email at pres(at)tnkk.fi, or for email marketing, via the unsubscribe link at the bottom of each message. Cookie consent can be withdrawn via the website's cookie banner. Withdrawal of consent does not affect the lawfulness of processing or disclosures made prior to the withdrawal.

  • Right to lodge a complaint with a supervisory authority: If you believe that the processing of your personal data violates data protection legislation, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement (Article 77 of the GDPR). In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (www.tietosuoja.fi).

Regarding the right to object in particular: You always have the right to object to the processing of your personal data for direct marketing purposes. This right is absolute and requires no justification.

Requests must be sufficiently specific for us to verify your identity. You may send your request to the contact person listed in section 1 at pres(at)tnkk.fi.

We will respond to requests as a rule within one month.

11. Automated Decision-Making and Profiling

We do not carry out automated decision-making that would have legal or similarly significant effects on registrants.

We may use data for profiling to target the Investment Fair's own marketing (e.g. based on areas of interest, if such data is collected), but this profiling has no legal or similarly significant effects on you.

12. Changes to the Privacy Policy

We reserve the right to update this privacy policy as necessary, for example due to changes in legislation or the development of our operations. The current version of the privacy policy is always available on our website. We will give separate notice of significant changes, for example on our website or by email to registered participants.

bottom of page