Skip to content

Read more
Privacy Policy for the John Nurminen Foundation Group’s customer and supporter register
Privacy Policy for the John Nurminen Foundation’s stakeholder register
Privacy Policy for the John Nurminen Foundation’s Recruitment and manuscript filing system 
Cookie policy of the John Nurminen Foundation

Privacy Policy for the John Nurminen Foundation Group’s customer and supporter register

This privacy policy (hereinafter the “Privacy Policy”) for the John Nurminen Foundation and its subsidiary Baltic Sea Services Oy’s (“JNS” or “we”) customer and supporter register was created on 24 May 2018 and was last updated on 14 August 2024. The updates are described in more detail in Section 12. Amendments to the Privacy Policy

In this Privacy Policy, we provide a detailed description of how JNS collects and processes the personal data of contact persons for our customers, donors and other supporters, and of employees working with our potential customers’ and partners’ sponsorship and sustainability issues. You can also find more information about your rights with regard to the processing of your personal data.

JNS respects your privacy and is committed to processing your personal data in an appropriate manner in compliance with both this Privacy Policy and the European Union’s (“EU”) General Data Protection Regulation (2016/679) and other applicable legislation (together “Data Protection Legislation”).

1. Controller

The John Nurminen Foundation is the controller of any data processing described in this policy that is not related to book and product sales or e-commerce:

John Nurminen Foundation
Pasilankatu 2
00240 Helsinki, Finland

Baltic Sea Services Oy, a subsidiary of the John Nurminen Foundation, is the controller of data processing that relates to book and product sales and e-commerce:
Baltic Sea Services Oy
Pasilankatu 2
00240 Helsinki, Finland
myynti(a)balticseaservices.fi

2. Contact person

Anni Kujala
Pasilankatu 2
00240 Helsinki
rekisteri(a)jnfoundation.fi
+358 50 467 6740

3. Name of the register

John Nurminen Foundation and Baltic Sea Services Oy customer and supporter register

4. The purpose of and legal basis for processing your personal data

We process personal data for the purposes described below, such as managing and developing customer, donor or supporter relations, and for targeting our communications and marketing to both private persons and communities and their contact persons. We collect only the personal data that is necessary in relation to the purposes for which it is being processed.

The purpose of processing your personal data is:
– Carrying out and managing an agreement, for example, when you order products from JNS’s webstore
– Product delivery, invoicing and debt collection
– Customer service
– Managing monthly and other donations, and fulfilling accounting obligations
– Publishing the information you wish to appear in the donor register
– Sending supporter reports and other communications about the use of donation funds
– Sending information to collection organisers about the total amount collected and the donors who participated in commemorative and anniversary collections
– Developing our activities and customer experience
– Designing and developing our products and services
– Organising events
– Collecting feedback
– Sending information about JNS’s ongoing projects
– Organising promotional prize draws and competitions, and their associated communications
– Customer acquisition, direct marketing and marketing communications for the purpose of acquiring donations

Customer relationship management

The legal basis for processing personal data for customer relationship management, managing donor and supporter relations, and keeping in contact with partners is either JNS’s legitimate interest or to enable JNS to implement agreements.

In connection with customer relationship management, the primary purpose of processing personal data is to carry out business transactions between the customer and JNS, for example, when you make a donation or order products from the Foundation’s online store. Personal data can be processed for purposes such as invoicing, customer service, product delivery or collecting overdue invoices.

In connection with the management of donor and partner relations, we also process personal data for publishing the information specified by the donor in a public donor register or providing information about how donations have been used.

Competitions and prize draws

Within the framework of our activities, we organise a variety of competitions and prize draws on our website, in our communication channels (such as social media) and on our partners’ premises. In this case, the legal basis for the processing of your personal data is JNS’s legitimate interest in running promotional prize draws and/or competitions, and sending associated communications or carrying out other related activities after you have entered a competition or prize draw arranged by us, or when you have given us your permission to publish content submitted at exhibitions, on our website, or in another of our communication channels (including social media). When you enter a prize draw, we may ask for your consent to direct digital marketing.

Direct marketing

We may process your personal data for direct marketing purposes and to target marketing, in which case the legal basis for processing data is JNS’s legitimate interest. In this case, we may contact you by phone or letter in order to market things such as fundraisers or activities. You have the right to prohibit the processing of your personal data for direct marketing purposes at any time.

We may combine personal data from two or more datasets on the basis of our legitimate interest. This means updating or supplementing the contact details in the customer and supporter register by obtaining personal data from personal data update services. We also combine data obtained from website visits and cookies with data in our customer and supporter register. A personal data protection impact assessment has been performed on these processing activities.

Direct digital marketing

We process your personal data for direct digital marketing with your consent. In this case, we may contact you by email in order to market things such as fundraisers or activities. Our direct digital marketing also includes our newsletter, which contains information about progress on JNS’s projects and other current topics that we believe will be of interest to you.

We may also send direct digital marketing on the basis of an earlier customer relationship or an authorisation based on your position. In this case, the legal basis for processing your personal data is JNS’s legitimate interest.

Based on our legitimate interest, your personal data may also be used for profiling, for example, for marketing purposes. JNS does not make any automated decisions that would have legal implications.

At any time, you have the right to object to the processing of your personal data for the purposes of direct marketing or profiling for direct marketing.

We also use cookies and other similar technologies on our website and in our newsletters, to ensure the functionality of our website, to develop and improve our user experience, and to target relevant marketing. You can read more about the cookies we use, their purpose and retention periods in our Cookie Policy.

5. What personal data do we collect and from where?

We collect the following personal data in our customer and supporter register:
– person’s name
– age/year of birth
– position and company/organisation
– contact details (such as address, email address and telephone number)
– the start and end time of the customer relationship and/or other contact, and the contact method
– invoicing details and payments
– customer history, notes about the customer relationship and notes about meetings
– donation information and information required to process bequests
– school and grade in connection with our Taksvärkki collection
– information about subscription to the newsletter mailing list
– information about consent to/prohibition of direct marketing
– other information necessary for organising and developing events, such as dietary requirements and restrictions
– other information necessary for a competition or prize draw, such as a photo submitted by a competition or prize draw entrant and the name of the photographer
– any other information necessary for accepting donations, customer account management and partnerships.

As a rule, we mainly collect data for the customer and supporter register from you yourself, for example, when you give us information via online forms or social media services, by email or telephone, in agreements, via event registrations and payment information, when entering a competition or prize draw, and at customer meetings or other events at which you disclose your information.

Personal data may also be collected from public sources or from companies that provide services for updating and obtaining personal data. These include Posti’s consumer register update service, Suomen Asiakastieto Oy’s decision-maker register and Profinder’s corporate and consumer information registers.

In addition, we collect personal information using cookies and other similar technologies on our website and in our newsletters.

6. Will your personal data be disclosed or transferred to third parties?

We only transfer your personal data when it is necessary to carry out one of the aforementioned purposes. JNS may transfer your personal data to parties involved in the provision, maintenance and development of JNS’s services, communications and marketing, or to its other partners, and these parties may process your personal data for the purposes described in this Privacy Policy.

Our partners for customer service and marketing include Sanoma Media Finland Oy, Barona Oy, Gainer Oy and LiveRing Oy. Your data may also be transferred to other subcontractors and service providers that are responsible for IT, software, accounting and other similar services. JNS will enter into the necessary contractual arrangements with third parties to ensure that your personal data is processed in accordance with Data Protection Legislation.

If you make a donation to a commemorative or anniversary collection, we will send your name to the collection organiser. Your personal data may also be disclosed to third parties in certain situations, such as those in which its disclosure is required by law or official regulations.

Please note that third parties may process the information collected via cookies and social media plugins on our website.

JNS or its service providers may use companies located outside the EU or European Economic Area (“EEA”) to process personal data or provide services. Personal data will only be transferred out of the EU or EEA when there are justified grounds for doing so and in compliance with Data Protection Legislation.

7. Joint controllers

When JNS administers pages on Facebook and Instagram, JNS and Meta Platforms Ireland Ltd (“Facebook”) are the joint controllers of JNS’s Facebook and Instagram pages, as applicable. Your personal data will be used for purposes such as keeping you informed about JNS’s work/events and how donations have been used; running competitions and prize draws; marketing and collecting feedback; purchasing and measuring the performance of Facebook advertisements; and better targeting communications. The legal basis for processing your personal data is JNS’s legitimate interest.

JNS collects data through its Facebook and Instagram pages in the form of, for example, likes and other reactions, comments, visits, post visibility, and personal data submitted in connection with competitions. The information that JNS receives from Facebook is the person’s user name, public profile picture, and any other data that has been marked as public. Data subjects may provide other personal data in comments on social media pages or via messaging services.

Where applicable, we are also joint controllers with Facebook with respect to the cookies used in Facebook’s social media plugins and certain services relating to Facebook’s advertising networks. You can read more about cookies and social media plugins in our Cookie Policy.

In Facebook’s privacy policy, you can read how and on what legal basis Facebook processes your data, and how you can exercise your rights under data protection legislation. We have signed a joint controller agreement with Facebook that describes JNS’s and Facebook’s responsibilities with respect to the data we collect. Please note that if you wish to exercise your rights under data protection legislation with respect to data processed by Facebook, you should contact Facebook.

You can restrict the processing of your personal data by unliking and/or unfollowing a page. You can also request a conversation to be deleted from a messaging service. You can also choose not to accept non-essential cookies when you visit our website, or withdraw your previously given consent.

8. How is your personal data processed and protected?

JNS processes your personal data only for the aforementioned purposes and only for the purposes for which the data was originally collected. The protection of your personal data is important to us, and we comply with both good data management practices and the due diligence and obligations laid down in Data Protection Legislation. We adhere to generally accepted technical and organisational measures to prevent any unauthorised or unlawful processing or misuse of personal data, and to protect personal data from loss, alteration or deletion. The electronically processed personal data contained in the register is protected by means of firewalls, passwords and other technical means that are generally used and accepted in the information security industry. Workstations and IT systems are protected using personal usernames and passwords. Our workstations also utilise two-factor authentication. Manually maintained material is located in facilities to which unauthorised access is prevented. Access to the personal data contained in the register is granted only to designated employees of the Foundation or of an enterprise acting for or on behalf of the Foundation, and only to the extent that is required to carry out the task at hand. Our employees have signed a non-disclosure agreement.

9. For how long will your personal data be retained?

We comply with statutory retention periods, and will retain your personal data only for as long as is necessary, and to the extent that is required, to carry out the purposes for which the personal data is being processed as defined in this Privacy Policy (for example, for the duration of a contractual term).

10. What are your rights as a data subject?

As a data subject, you have the following rights with regard to your personal data in the customer and supporter register:

– The right to access and verify your data: You have the right to receive confirmation from us about whether or not your personal data is being processed; and if your personal data is being processed, you have the right to access and verify all of the personal data being held about you in the customer and supporter register.
– The right to correct, delete and restrict the processing of your data: You have the right to require us to correct any inaccurate, unnecessary, incomplete or outdated personal data without undue delay. You have the right to request us to delete any of your personal data that is no longer required for the purpose for which it was originally collected or processed, or if you suspect that your personal data is being processed illegally, or if your personal data must be deleted to comply with a legal obligation (that applies to the controller). You also have the right to request a restriction on the processing of your data. Please note that deleting or restricting the use of your personal data may, for instance, result in a deterioration in your customer service experience, that you can no longer be a monthly donor, or that you no longer receive our newsletters or information on our project progress.
– The right to object to the processing of your data: When the basis for processing personal data is JNS’s legitimate interest, you have the right to object to the processing of your personal data with respect to a specific personal situation. The exception to this is when JNS can demonstrate that there is a very important and justified reason that overrides the data subject’s interests, or if processing is necessary for the preparation, presentation or defence of a legal claim. However, you always have the right to object to the processing of your personal data for direct marketing purposes (including profiling) without any justification. Please note that objecting to the processing of your personal data may, for instance, result in a deterioration in your customer service experience, that you can no longer be a monthly donor, or that you no longer receive our newsletters or information on our project progress.
– The right to transfer data from one system to another: You have the right to transfer the personal data you supplied to JNS to another controller. This transfer right covers automatically processed personal data whose processing is based on your consent or an agreement to which you are a party. JNS will send the data in a machine-readable and commonly used format to you, and will also send the data directly to the other controller if this is technically possible.
– The right to withdraw consent: If your personal data is being processed on the basis of your consent, you may withdraw your consent to such processing at any time by contacting us.

If you would like to exercise any of the rights described above, would like to receive more information about the processing of your personal data, or have any comments on its processing, you can contact us at any time by sending an email to rekisteri(a)jnfoundation.fi.

11. Lodging a complaint with the supervisory authority

JNS always aims to resolve any disputes regarding the processing of your personal data directly with you. If you believe that JNS has not processed your personal data in accordance with applicable Data Protection Legislation, you have the right to lodge a complaint with the competent supervisory authority. The contact details for the supervisory authority are:

Office of the Data Protection Ombudsman
P.O. Box 800
00531 HELSINKI
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
email: tietosuoja@om.fi
telephone exchange: +358 (0)29 56 66700
www.tietosuoja.fi.

12. Amendments to the Privacy Policy

We continuously strive to develop our services and privacy protection, and therefore reserve the right to change this Privacy Policy by placing a notification of change on this page. The Privacy Policy may also be updated in order to reflect changes in legislation. We recommend that you revisit this Privacy Policy on a regular basis.

The following updates have been made to this Privacy Policy:

– Update 30 November 2021 We revised and clarified the purposes of processing personal data, and added that we may also collect personal data from public sources.
– Update 31 January 2023 We added that personal data may also be collected from companies that provide services for updating and obtaining personal data.
– Update 10 May 2023 We combined the privacy policies for our customer and supporter register and our competitions and prize draws register, and the name of the document was changed to the “Privacy policy for the John Nurminen Foundation Group’s customer and supporter register”. We clarified from which public sources personal data is obtained, and to whom our customer service and marketing partners may disclose personal data.
– Updated 14 August 2024. It was clarified that personal data may be combined or matched with other datasets for marketing purposes.


Privacy Policy for the John Nurminen Foundation’s stakeholder register

This privacy policy (hereinafter the “Privacy Policy”) for the John Nurminen Foundation’s (“JNS” or “we”) stakeholder register was created on 29 May 2018 and last updated on 19 September 2025.The updates are described in more detail in Section 12. Amendments to the Privacy Policy.

In this Privacy Policy, we provide a detailed description of how JNS collects and processes the personal data of representatives of our various stakeholders. You can also find more information about your rights with regard to the processing of your personal data.

JNS respects your privacy and is committed to processing your personal data in an appropriate manner in compliance with both this Privacy Policy and the European Union’s (“EU”) General Data Protection Regulation (2016/679) and other applicable legislation (together “Data Protection Legislation”).

1. Controller

John Nurminen Foundation
Pasilankatu 2
00240 Helsinki, Finland
info(a)jnfoundation.fi

2. Contact person for the privacy policy and person responsible for data protection

Anni Kujala
Pasilankatu 2
00240 Helsinki
rekisteri(a)jnfoundation.fi
+358 50 467 6740

3. Name of the register

John Nurminen Foundation stakeholder register

4. The purpose of and legal basis for processing your personal data

We process personal data in order to manage and develop communications and collaborative partnerships with, for example, the contact persons for our project partners, government ministries, authorities and service providers, media representatives, Baltic Sea Action Day partners, as well as members of steering groups appointed to our projects. We also process personal data in order to make legally required notifications to the Transparency Register, and to document the Foundation’s history and activities for archival purposes. For works published by the Foundation, personal data is processed in accordance with a legal obligation to provide copyright protection. We also process personal data in order to make legally required notifications to the Transparency Register and to document the Foundation’s activities for the historical record.

In order to acquire new partners for sustainability projects, JNS may also reach out to employees of potential partner companies whose responsibilities include stakeholder engagement, sponsorship, or sustainability issues. We collect only the personal data that is necessary in relation to the purposes for which it is being processed. The purpose of processing your personal data is:

– Sending information about JNS’s ongoing projects
– Keeping you informed about JNS’s activities
– Sending out press releases and media invitations
– Convening steering group meetings
– Sending invitations to JNS’s events and meetings
– Managing other collaborator and stakeholder relations
– Managing Baltic Sea Action Day events, activities and other contacts
– Contacting new and potential partners and partner companies.
– Lobbying activities related to Baltic Sea conservation
– Historical archiving of the Foundation’s activities
– Providing copyright protection

The legal basis for processing stakeholders’ personal data is JNS’s legitimate interest and to enable JNS to implement agreements. For historical archiving, the processing of personal data is based on the legitimate interest of the controller. For lobbying activities and copyright, the basis for processing is a legal obligation. JNS does not make any automated decisions that would have legal implications.

We may also process data about employees of our stakeholder organisations for direct marketing purposes. Our direct marketing mainly covers our newsletter, which is sent either by email or post, and contains information about progress on JNS’s projects and other current topics that we believe will be of interest to our stakeholders and their employees. The Foundation’s newsletter is only sent to those people who have subscribed to it. Consent is the basis for processing personal data in this context. You have the right to prohibit the processing of your personal data for direct marketing purposes at any time.

We also use cookies and other similar technologies on our website and in our newsletters, to ensure the functionality of our website, to develop and improve our user experience, and to target relevant marketing. You can read more about the cookies we use, their purpose and retention periods in our Cookie Policy.

5. What personal data do we collect and from where?

We collect the following personal data in our stakeholder register:

– person’s name
– position and company/organisation
– contact details (such as address, email address and telephone number)
– information about consent to/prohibition of direct marketing
– information about subscription to the newsletter mailing list
– the start and end time of the contact, and the contact method
– notes about the stakeholder relationship and notes about meetings
– any other necessary information relating to cooperation
– any other information necessary for organising and developing events, such as dietary requirements and restrictions.

As a rule, we mainly collect data for the stakeholder register from you yourself, for example, when you give us information via online forms or social media services, by email or telephone, in agreements, or during meetings and other events at which stakeholders disclose information. We may also collect personal data from public sources and, for non-commercial purposes, from third parties on the basis of, for instance, recommendations.

In addition, we collect personal information using cookies and other similar technologies on our website and in our newsletters.

6. Will your personal data be disclosed or transferred to third parties?

We only transfer your personal data when it is necessary to carry out one of the aforementioned purposes.

JNS may transfer your personal data to parties involved in the provision, maintenance and development of JNS’s services and communications, or to its other partners, and these parties may process your personal data for the purposes described in this Privacy Policy. Your data may also be transferred to other subcontractors and service providers that are responsible for IT and other similar services. JNS will enter into the necessary contractual arrangements with third parties to ensure that your personal data is processed in accordance with Data Protection Legislation.

In principle, your personal data will not be disclosed to third parties without your consent. However, your personal data may be disclosed to third parties without your consent in some situations, such as situations in which its disclosure is required by law or official regulations. For example, in the case of lobbying activities, information will be disclosed to the National Audit Office of Finland, which has a statutory right to receive information about lobbying activities.

If necessary, we may also provide funding organisations, such as the European Union, with lists of event participants, so that the funders can confirm that a project’s objectives have been realised and fulfil their legal obligations.

Please note that third parties may process the information collected via cookies and social media plugins on our website.

JNS or its service providers may use companies located outside the EU or European Economic Area (“EEA”) to process personal data or provide services. Personal data will only be transferred out of the EU or EEA when there are justified grounds for doing so and in compliance with Data Protection Legislation.

7. Joint controllers

When JNS administers pages on Facebook and Instagram, JNS and Facebook Ireland Ltd (“Facebook”) are the joint controllers of JNS’s Facebook and Instagram pages, as applicable. Your personal data will be used for purposes such as keeping you informed about JNS’s work/events and how donations have been used; running competitions and prize draws; marketing and collecting feedback; purchasing and measuring the performance of Facebook advertisements; and better targeting communications. The legal basis for processing your personal data is JNS’s legitimate interest. Data used in competitions will be processed in accordance with a separate privacy policy that will be issued for each competition.
JNS collects data through its Facebook and Instagram pages in the form of, for example, likes and other reactions, comments, visits, post visibility, and personal data submitted in connection with competitions. The information that JNS receives from Facebook is the person’s user name, public profile picture, and any other data that has been marked as public. Data subjects may provide other personal data in comments on social media pages or via messaging services. This information will not be combined with other data held in personal data registers without informing the data subject or without the data subject’s consent.

Where applicable, we are also joint controllers with Facebook with respect to the cookies used in Facebook’s social media plugins and certain services relating to Facebook’s advertising networks. You can read more about cookies and social media plugins in our Cookie Policy.

In Facebook’s privacy policy, you can read how and on what legal basis Facebook processes your data, and how you can exercise your rights under data protection legislation. We have signed a joint controller agreement with Facebook that describes JNS’s and Facebook’s responsibilities with respect to the data we collect. Please note that if you wish to exercise your rights under data protection legislation with respect to data processed by Facebook, you should contact Facebook. You can restrict the processing of your personal data by unliking and/or unfollowing a page. You can also request a conversation to be deleted from a messaging service. You can also choose not to accept non-essential cookies when you visit our website, or withdraw your previously given consent.

8. How is your personal data processed and protected?

JNS processes your personal data only for the aforementioned purposes and only for the purposes for which the data was originally collected. The protection of your personal data is important to us, and we comply with both good data management practices and the due diligence and obligations laid down in Data Protection Legislation. We adhere to generally accepted technical and organisational measures to prevent any unauthorised or unlawful processing or misuse of personal data, and to protect personal data from loss, alteration or deletion. The electronically processed personal data contained in the register is protected by means of firewalls, passwords and other technical means that are generally used and accepted in the information security industry. Workstations and IT systems are protected using personal usernames and passwords. Our workstations also utilise two-factor authentication. Manually maintained material is located in facilities to which unauthorised access is prevented. Access to the personal data contained in the register is granted only to designated employees of the Foundation or of an enterprise acting for or on behalf of the Foundation, and only to the extent that is required to carry out the task at hand.

9. For how long will your personal data be retained?

We comply with statutory retention periods, and will retain your personal data only for as long as is necessary, and to the extent that is required, to carry out the purposes for which the personal data is being processed as defined in this Privacy Policy (for example, for the duration of a contractual term).

10. What are your rights as a data subject?

As a data subject, you have the following rights with regard to your personal data in the stakeholder register:

– The right to access and verify your data: You have the right to receive confirmation from us about whether or not your personal data is being processed; and if your personal data is being processed, you have the right to access and verify all of the personal data being held about you in the stakeholder register.
– The right to correct, delete and restrict the processing of your data: You have the right to require us to correct any inaccurate, unnecessary, incomplete or outdated personal data without undue delay. You have the right to request us to delete any of your personal data that is no longer required for the purpose for which it was originally collected or processed, or if you suspect that your personal data is being processed illegally, or if your personal data must be deleted to comply with a legal obligation (that applies to the controller). You also have the right to request a restriction on the processing of your data. Please note that deleting or restricting the use of your personal data may, for instance, result in you no longer receiving our newsletters or invitations to our events.
– The right to object to the processing of your data: When the basis for processing personal data is JNS’s legitimate interest, you have the right to object to the processing of your personal data with respect to a specific personal situation. The exception to this is when JNS can demonstrate that there is a very important and justified reason that overrides the data subject’s interests, or if processing is necessary for the preparation, presentation or defence of a legal claim. However, you always have the right to object to the processing of your personal data for direct marketing purposes without any justification. Please note that an objection to the processing of your personal data may, for instance, result in you no longer receiving our newsletters or invitations to our events.
– The right to transfer data from one system to another: You have the right to transfer the personal data you supplied to JNS to another controller. This transfer right covers automatically processed personal data whose processing is based on your consent or an agreement to which you are a party. JNS will send the data in a machine-readable and commonly used format to you, and will also send the data directly to the other controller if this is technically possible.
– The right to withdraw consent: If your personal data is being processed on the basis of your consent, you may withdraw your consent to such processing at any time by contacting us.

If you would like to exercise any of the rights described above, would like to receive more information about the processing of your personal data, or have any comments on its processing, you can contact us at any time by sending an email to rekisteri(a)jnfoundation.fi.

11. Lodging a complaint with the supervisory authority

JNS always aims to resolve any disputes regarding the processing of your personal data directly with you. If you believe that JNS has not processed your personal data in accordance with applicable Data Protection Legislation, you have the right to lodge a complaint with the competent supervisory authority. The contact details for the supervisory authority are:

Office of the Data Protection Ombudsman
P.O. Box 800
00531 HELSINKI
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
email: tietosuoja@om.fi
telephone exchange: +358 (0)29 56 66700
www.tietosuoja.fi

12. Amendments to the Privacy Policy

We continuously strive to develop our services and privacy protection, and therefore reserve the right to change this Privacy Policy by placing a notification of change on this page. The Privacy Policy may also be updated in order to reflect changes in legislation. We recommend that you revisit this Privacy Policy on a regular basis.

The following updates have been made to this Privacy Policy:
– Updated 19 September 2025. The grounds for processing personal data were extended to include legal notifications for the Transparency Register, copyright protection, and the historical archiving of the Foundation’s activities.


John Nurminen Foundation Recruitment and manuscript filing system 

This privacy policy (hereinafter the “Privacy Policy”) for the John Nurminen Foundation’s (“JNS”) recruitment and manuscript database was created on 25 May 2018 and updated on 19 September 2025. The updates are described in more detail in Section 12. Amendments to the Privacy Policy.

In this Privacy Policy, we provide a detailed description of how JNS collects and processes the personal data of job applicants and those who submit manuscripts for publication. You can also find more information about your rights with regard to the processing of your personal data.

JNS respects your privacy and is committed to processing your personal data in an appropriate manner in compliance with both this Privacy Policy and the European Union’s (“EU”) General Data Protection Regulation (2016/679) and other applicable legislation (together “Data Protection Legislation”).

1. Controller

John Nurminen Foundation 
Pasilankatu 2 
00240 Helsinki 
rekisteri(a)jnfoundation.fi 

2. Contact person for the Privacy Statement

Anni Kujala 
Pasilankatu 2 
00240 Helsinki 
rekisteri(a)jnfoundation.fi 
+358 50 467 6740 

3. Name of the register

John Nurminen Foundation Recruitment and manuscript database.

4. The purpose of and legal basis for processing your personal data

We process personal data for the purpose of managing the application process of persons who apply for employment or internships with the John Nurminen Foundation or submit a manuscript for publication. 

If you submit a job application, the purpose of processing your personal data is to
– process applications
– implement and manage recruitment activities
– assess the suitability of applicants
– send communications about applications and recruitment.

For those who submit manuscripts, the purpose of processing your personal data is to
– assess and manage the publishing project
– assess the manuscript
– send communications relating to the publishing project
– ensure that the manuscript and any related published materials are used in a way that complies with copyright law and other current legislation.

The processing of personal data is based on JNS’s legitimate interest and, in the case of copyright, a legal obligation.

5. What personal data do we collect and from where?

The personal data that we store in our recruitment and manuscript database includes:

– person’s name
– position and company/organisation
– contact details (such as address, email address and telephone number)
– Other job application information relating to, for example, education (such as name of degree and institution), work experience (such as previous employers, position held, duration of employment), language proficiency, any information pertaining to suitability assessments, the position applied for, and other information provided by the applicant.
– Other information related to the assessment of manuscripts and publishing projects, such as education, previously published works, and the manuscript itself.

We mainly collect information for the recruitment and manuscript database from you yourself, for example, when you give us information via job applications, by email or telephone, during interviews, or in other situations in which you provide us with personal data. In the case of recruitment, we may also obtain information from a third party that carries out suitability assessments. In such cases, we will always ask for your consent before collecting your data.

6. Will your personal data be disclosed or transferred to third parties?

We only transfer your personal data when it is necessary for one of the aforementioned purposes. JNS may transfer your personal data to its partners, such as organisations that carry out suitability assessments, and these parties may process your personal data for the purposes described in this Privacy Policy.

Your data may also be transferred to other subcontractors and service providers that are responsible for IT, software and other similar services. JNS will enter into the necessary contractual arrangements with third parties to ensure that your personal data is processed in accordance with Data Protection Legislation.

In principle, your personal data will not be disclosed to third parties without your consent. However, your personal data may be disclosed to third parties without your consent in some situations, such as situations in which its disclosure is required by law or official regulations.

Please note that third parties may process the information collected via cookies and social media plugins on our website.

JNS or its service providers may use companies located outside the EU or European Economic Area (“EEA”) to process personal data or provide services. Personal data will only be transferred out of the EU or EEA when there are justified grounds for doing so and in compliance with Data Protection Legislation. 

7. How is your personal data processed and protected?

JNS processes your personal data only for the aforementioned purposes and only for the purposes for which the data was originally collected. The protection of your personal data is important to us, and we comply with both good data management practices and the due diligence and obligations laid down in Data Protection Legislation. We adhere to generally accepted technical and organisational measures to prevent any unauthorised or unlawful processing or misuse of personal data, and to protect personal data from loss, alteration or deletion. The electronically processed personal data contained in the register is protected by means of firewalls, passwords and other technical means that are generally used and accepted in the information security industry. Workstations and IT systems are protected using personal usernames and passwords. Our workstations also utilise two-factor authentication. Manually maintained material is located in facilities to which unauthorised access is prevented. Access to the personal data contained in the register is granted only to designated employees of the Foundation or of an enterprise acting for or on behalf of the Foundation, and only to the extent that is required to carry out the task at hand. Our employees have signed a non-disclosure agreement.

8. For how long will your personal data be retained?

We retain personal data only for as long as is necessary, and only to the extent required, for the processing purposes specified in this Privacy Policy. We keep job applications for a maximum of 12 months. The personal data of those who submit manuscripts will be kept for a maximum of 12 months after the publication decision. For published works, personal data will be stored in accordance with copyright law for as long as is required to protect the works.  

9. What are your rights as a data subject?

As a data subject, you have the following rights with regard to your personal data in the customer and supporter register:

– The right to access and verify your data: You have the right to receive confirmation from us about whether or not your personal data is being processed; and if your personal data is being processed, you have the right to access and verify all of the personal data being held about you in the customer and supporter register
– The right to correct, delete and restrict the processing of your data: You have the right to require us to correct any inaccurate, unnecessary, incomplete or outdated personal data without undue delay. You have the right to request us to delete any of your personal data that is no longer required for the purpose for which it was originally collected or processed, or if you suspect that your personal data is being processed illegally, or if your personal data must be deleted to comply with a legal obligation (that applies to the controller). You also have the right to request a restriction on the processing of your data. Please note that deleting or restricting the use of your personal data may, for instance, result in a deterioration in your customer service experience, that you can no longer be a monthly donor, or that you no longer receive our newsletters or information on our project progress.
– The right to object to the processing of your data: When the basis for processing personal data is JNS’s legitimate interest, you have the right to object to the processing of your personal data with respect to a specific personal situation. The exception to this is when JNS can demonstrate that there is a very important and justified reason that overrides the data subject’s interests, or if processing is necessary for the preparation, presentation or defence of a legal claim. However, you always have the right to object to the processing of your personal data for direct marketing purposes (including profiling) without any justification. Please note that objecting to the processing of your personal data may, for instance, result in a deterioration in your customer service experience, that you can no longer be a monthly donor, or that you no longer receive our newsletters or information on our project progress.
– The right to transfer data from one system to another: You have the right to transfer the personal data you supplied to JNS to another controller. This transfer right covers automatically processed personal data whose processing is based on your consent or an agreement to which you are a party. JNS will send the data in a machine-readable and commonly used format to you, and will also send the data directly to the other controller if this is technically possible.
– The right to withdraw consent: If your personal data is being processed on the basis of your consent, you may withdraw your consent to such processing at any time by contacting us.

If you would like to exercise any of the rights described above, would like to receive more information about the processing of your personal data, or have any comments on its processing, you can contact us at any time by sending an email to rekisteri(a)jnfoundation.fi.

10. Lodging a complaint with the supervisory authority

JNS always aims to resolve any disputes regarding the processing of your personal data directly with you. If you believe that JNS has not processed your personal data in accordance with applicable Data Protection Legislation, you have the right to lodge a complaint with the competent supervisory authority. The contact details for the supervisory authority are:

Office of the Data Protection Ombudsman
P.O. Box 800
00531 HELSINKI
visiting address: Lintulahdenkuja 4, 00530 Helsinki
e-mail: tietosuoja@om.fi
telephone exchange: +358 (0)29 56 66700
www.tietosuoja.fi

11. Amendments to the Privacy Policy

We continuously strive to develop our services and privacy protection, and therefore reserve the right to change this Privacy Policy by placing a notification of change on this page. The Privacy Policy may also be updated in order to reflect changes in legislation. We recommend that you revisit this Privacy Policy on a regular basis.

The following updates have been made to this Privacy Policy:
– Updated 19 September 2025 The retention periods for personal data were clarified, and mention was made of the fact that the processing of personal data for copyright purposes is based on a legal obligation.


Cookie policy of the John Nurminen Foundation

This cookie policy of the John Nurminen Foundation sr and its subsidiary Baltic Sea Services Oy (hereinafter “JNF” or “we”) was created on 4 December 2020 and last updated on 5 March 2024. In this cookie policy, we describe the cookies and similar technologies that we use on our websites johnnurmisensaatio.fi, puhdasmeri.fi, itameripaiva.fi, oursea.fi, seabasedmeasures.eu, sustainablebiogas.eu, nutritradebaltic.eu and kauppa.johnnurmisensaatio.fi (hereinafter collectively “the websites”). In this cookie policy, we provide you with the information you need to decide whether or not you want to store cookies on your device. We use cookies on our websites to improve and develop our user experience and to target relevant marketing to website visitors.

This cookie policy forms an integral part of our privacy policy. You can find more information about this and your legal rights in our privacy policy, which you can read here.

1. What are cookies?

Cookies are small text files that your internet browser stores on your computer, mobile device or any other device that you use to view websites. In accordance with privacy protection legislation, cookies may only be stored on your device with your consent, with the exception of certain essential cookies that are specified below.

2. What kinds of cookies are used on JNF’s websites and for what purpose?

We use cookies on JNF’s websites for different purposes. You can find information about the purpose of use of each group of cookies, as well as detailed information about cookies and their purposes, in our cookie banner. Unless necessary to provide the functionality of the website or other service, we will only process cookies based on your consent.

Persistent and session cookies

JNF’s websites use both persistent and session cookies. A persistent cookie will remain on your device after you close the browser and will remain valid until its expiry date (unless the user removes it before the expiry date). A session cookie will cease to be valid as soon as the session ends, that is, when you close the browser.

Essential and non-essential cookies

The cookies used on our websites may be divided into essential and non-essential/marketing cookies.

– Essential cookies: JNF’s websites use cookies that are essential for the website to function properly. On our websites, these cookies are used in functions such as managing shopping baskets and remembering language settings. If you do not accept essential cookies, you will not be able to use all of the features of our websites.
– Non-essential/marketing cookies: JNF’s websites also use non-essential cookies, such as marketing and analytics cookies. These cookies have a variety of purposes, such as measuring how our websites are used, developing the user experience on our websites, and targeting marketing.

First and third-party cookies

JNF’s websites use both first and third-party cookies.

– First-party cookies: First-party cookies refer to cookies that are stored by the website that you visit.
– Third-party cookies JNF’s websites also have third-party cookies that have been installed by a third party of some kind. Third-party cookies are used in connection with activities such as analytics and marketing.

3. Cookies

You can find the latest information about cookies used by the website from the link “View supplier details” in the cookie banner. From the banner, you can check whether a cookie collects data for first-party (JNF) or third-party purposes (“Type” and “Host”); how long the cookie collects data on your device (“Duration”), which identified category the cookie belongs to based on its purpose (“Class”); and a brief description of the cookie (“Description”).

Please note that data collected through non-essential cookies may be transferred to our service providers, such as our website providers, to develop our operations and improve user experience as described in the cookie banner.

4. Third-party cookies, social media plugins and web beacons

On JNF’s websites, we also use third-party cookies that are not maintained by JNF as well as other technologies similar to cookies that are used to collect your data. Web beacons and other technologies follow the same principles as cookies, meaning they are only used with your consent (with the exception of essential features) and based on your request. What is described elsewhere in this policy about cookies also applies to web beacons and other technologies, as applicable.

Third-party cookies

When it comes to the third-party cookies used on our websites, you should check the privacy policy and cookie policy of the third party in question to see how they use their cookies. For more information, see:

– Google’s privacy policy here. You can also find out more about Google Analytics on the Google Analytics website. You can block the Google Analytics service by installing the following add-on to your browser: Google Analytics opt-out add-on
– Facebook’s privacy policy here.
– Vimeo’s privacy policy here
– Hotjar’s privacy policy here.
– Appnexus’ privacy policy here.
– Sanoma’s privacy policy here.

Social media plugins

Our websites may also have social media plugins. The purpose of these social media plugins is, for example, to enable website visitors to share our content in their social media accounts (if they so wish). Please note that if you share our website content to a third-party site, such as Facebook, this third party may receive technical information about your browser, IP address and the websites you visit.

The services provided by plugin service providers are subject to the practices, terms and conditions of use and other terms and conditions that are specified in each service provider’s own privacy policy. The following links will take you to the privacy policies of those service providers whose plugins we use on our websites:

Facebook
Twitter
Linkedin
Youtube

Web beacons

JNF may also use other technology that performs similar functions to cookies, such as a variety of web beacons. A web beacon may, for example, be an invisible file the size of one pixel that can be included on a website or in an email.

The delivery system for our digital newsletter is one area in which we utilise web beacons. The web beacon lets us know whether you have opened the newsletter, what news items you have opened from the newsletter, the number of newsletters that you have opened, your IP address, and the time when you opened a newsletter or news item. We use this information in our marketing, so that we can develop the content of our newsletter and better reach those who are interested in our activities. Subscribing to the newsletter is voluntary, and you can cancel your subscription at any time.

Please note that the information collected via third-party cookies, social media plugins and web beacons may be surrendered to third parties for their use, and may also be sent to and stored on servers outside the European Economic Area, such as the United States.

5. Changing cookie settings

You can consent to the processing of cookies and withdraw your consent at any time from the cookie banner. You can also influence how cookies are processed in your browser settings.

Most browsers allow you to manage cookies in the browser settings. By changing your browser settings, you can prevent cookies from being received. Please note that if you change the cookie settings for your browser, or block cookie use on your browser or device, our websites may not necessarily work as well as intended and you may find that some of their features are not available to you.

The exact method for blocking cookies or changing your cookie settings will vary depending on your browser. The following links will provide information on how to change your cookie settings in the most popular browsers:

Safari
Google Chrome
Edge
Mozilla Firefox

For more information about cookies, visit:
https://www.kyberturvallisuuskeskus.fi/en/our-activities/regulation-and-supervision/confidential-communications

6. Contacting us and exercising your rights

If you have any questions about cookies or this cookie policy, you can always contact us by email at rekisteri(a)jnfoundation.fi.

To learn more about how we process personal data collected through cookies or to exercise your rights under applicable data protection laws, please see the instructions and contact information in our Privacy Statement.

Search