Last updated: 1 June 2026
1. Data controller
RoSLO Romanian Suomalaiset Lääketieteen Opiskelijat ry. Postal address: c/o Lääkäriliitto, PL 49, 00501 Helsinki, Finland. For data protection matters: info@roslo.fi. The registered office of the association is in Helsinki.
2. Personal data we process
In the member register we process information provided when joining the association: name, email address, phone number, university, study programme and year of enrolment. This information is primarily collected through the Kide.app service at the time of membership purchase. From email enquiries we process the sender's email address and the content of the message. For board members we publish, with their consent, name, role and an optional photograph on the website. We do not collect analytics about visitors to the website.
3. Purpose of processing
Personal data is used to maintain the member register as required by the Finnish Associations Act (503/1989), to manage membership fees, to communicate with members and stakeholders, to organise events, and to carry out and develop the statutory activities of the association.
4. Legal basis
Processing is based on the EU General Data Protection Regulation (2016/679). Member data is processed on the basis of the membership relationship and the legal obligation to maintain a member register under the Finnish Associations Act (Art. 6(1)(b) and (c)). Publication of board member profiles and other optional communications is based on consent (Art. 6(1)(a)). Enquiries are handled on the basis of the association's legitimate interest in responding to messages addressed to it (Art. 6(1)(f)).
5. Retention
Member data is retained for the duration of the membership and for a reasonable period thereafter as required by the Finnish Associations Act and the Accounting Act (1336/1997), for a maximum of ten years. Email enquiries are kept for no longer than 24 months after processing is complete. Data processed on the basis of consent is deleted once the consent has been withdrawn.
6. Disclosures and transfers
We do not sell personal data and we do not disclose it to third parties for marketing purposes. Data is processed on our behalf by trusted service providers under a data processing agreement: Kide.app for memberships and membership fees, and the technical provider that hosts the website and member register. Data may be disclosed to authorities where required by law. Data is processed primarily within the EU and EEA; any transfers outside this area are carried out only under standard contractual clauses approved by the European Commission.
7. Your rights
You have the right to access the data we hold about you, to have inaccurate data corrected or completed, to request erasure of your data, to restrict or object to processing, and to receive the data you have provided in a machine-readable format. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Requests should be sent by email to info@roslo.fi. You also have the right to lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman, tietosuoja.fi).
8. Cookies
The website uses only cookies that are strictly necessary for its operation: the NEXT_LOCALE cookie that stores the chosen language and a session cookie required to sign in to the admin panel. We do not use any third-party advertising or analytics tracking, so a separate cookie consent is not required.
9. Contact
For questions about privacy or to exercise the rights of the data subject, please contact us by email at info@roslo.fi or by post at RoSLO ry, c/o Lääkäriliitto, PL 49, 00501 Helsinki, Finland.