# Privacy Policy: Roolipelikirjasto

## Data Controller

Suomen roolipeliseura ry (roolipelikirjasto@suomenroolipeliseura.fi)

Personal data is processed by the project members defined in the Roolipelikirjasto project charter (peruskirja). The project charter has been approved by the board of Suomen roolipeliseura ry.

## Purpose of Processing Personal Data

Personal data is processed for the following purposes:

- Receiving and publishing submissions in Roolipelikirjasto
- Managing publishing agreements
- Displaying publication information on the website

## Data Collected

Through the publication form, the following data may be processed:

- Name
- Email address
- Confirmation of acceptance of the publishing agreement
- Details of the work to be published

The following information is published on the website:

- Author's name
- Details of the work

## Log Data

Technical log data, such as the user's IP address, is collected when using the website. Log data is processed to ensure the technical operation and security of the service and to investigate possible misuse.

Log data is retained only for as long as necessary for technical and security purposes.

## Legal Basis for Processing

Personal data is processed on the basis of the publishing agreement and for the purpose of maintaining Roolipelikirjasto’s publishing activities, collection, and website security.

## Data Retention

Personal data is retained for as long as the publication is available in Roolipelikirjasto or as long as necessary for managing the publishing agreement.

## Data Location and Processors

Data collected through the publication form is stored in Google Forms (Google LLC).

The website hosting provider of Roolipelikirjasto is B2 ry (Finland).

## Data Security

Personal data is protected through appropriate technical and organizational measures, such as access restrictions.

## Data Subject Rights

Data subjects have the right to request access to their personal data and to request its rectification or erasure by contacting the data controller. Data subjects also have the right to lodge a complaint with the data protection authority.