Controller Information

Ornamo Ry

Annankatu 16 b 35-36

00120 Helsinki

Contact person for matters regarding the processing of personal data:

Outi Liusvaara


Principles of personal data processing

Ornamo ensures, in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation, that the processing of personal data in its operations is lawful and transparent for the data subjects.

Registry information is kept appropriately and carefully. Ornamo uses necessary technical and organizational security measures to protect personal data from unauthorized access, accidental or unlawful destruction, alteration, disclosure, transfer, or any other unlawful processing.

Personal data is collected only to the extent necessary for Ornamo’s operations, and they are used for necessary and lawful purposes related to Ornamo’s activities. Data subjects are informed about the collection of personal data in accordance with the requirements of the regulation.

Ornamo also endeavors to keep the personal data it holds up to date and deletes the data within a reasonable time after there is no longer a legal basis or justification for their processing based on the GDPR, such as a legal obligation, data subject’s consent, legitimate interests of the controller, or a contract.

Legal bases for the processing of personal data

The legal bases for the processing of personal data according to Article 6 of the EU General Data Protection Regulation (GDPR) are:

  1. Consent of the data subjects, who can be members, employees, or collaborators.
  2. Preparation or performance of a contract.
  3. Legal obligation based on applicable laws.
  4. Legitimate interests pursued by the data controller or a third party, except where such interests are overridden by the data subject’s rights, interests, or fundamental freedoms that require the protection of personal data.

The assessment of legitimate interests of the data controller or a third party is conducted in accordance with the provisions of the GDPR, taking into account the data subject’s rights, interests, and fundamental freedoms. The legitimate interest of the data controller arises in matters essential for fulfilling the purpose of the association, such as seeking new potential members for recruitment, establishing partnerships with key stakeholders relevant to the association’s activities, collaborating with the data subjects, and communicating information relevant to their own interests and the operations of the association.

Ornamo’s partners refer to contractual partners, stakeholders, and other entities related to the field of design with whom collaboration is established or sought.

Purposes of personal data processing

The purposes of personal data processing include the following situations:

  1. Managing, administering, and developing member, employment, or partnership relationships; ensuring quality; delivering member services; and ensuring business and service events.
  2. Analyzing and categorizing member or partnership relationships, managing and developing databases, targeting communication and marketing activities, and managing campaign and contact history.
  3. Implementing, analyzing, reporting, and developing Ornamo’s operations, services, and product offerings.

Contents of the register

Information identifying a member, employee, or partner:

  • Name
  • Phone number
  • Address
  • Email address
  • Date of birth
  • Other personal information provided by the individual

Sources of personal data

Information related to members, employees, or partners is collected directly from the individuals themselves during registration with Ornamo or in connection with the employment relationship, use of products and services, through the “My Account” section of the internet service, during member services, or directly from the member, employee, or partner.

Information is also updated from the population register and other public information services.

Disclosure of personal data

Ornamo may disclose personal data for justified purposes in accordance with applicable legislation. Member or partner information may be disclosed to the following categories of recipients:

Service providers involved in the implementation of the website and our services, such as payment service providers. Partners for marketing purposes or for registering as a member or customer of a collaborative organization through Ornamo (e.g., TEK ry, IAET fund), provided that the consent of the data subject has been obtained. Authorities, if required by law or if it is in the legitimate interest of Ornamo or a third party.

Transfers of personal data outside the EU or EEA

Personal data will not be transferred outside the European Union (EU) or the European Economic Area (EEA) without the consent of the data subject. In cases where Ornamo stores or transfers personal data to a cloud service provider whose servers are physically located outside the EU or EEA, such transfers will be based on the legitimate interest of Ornamo. In such cases, Ornamo as the data controller is committed to ensuring that the cloud service provider maintains a high level of data security and complies with the requirements of the EU General Data Protection Regulation (GDPR).

Rights of the data subject

The data subject has various rights related to the processing of personal data (Articles 15-22 of the EU General Data Protection Regulation):

The data subject has the right to access the personal data concerning them that is stored in the register and to obtain information from the data controller. The data subject also has the right to request the deletion or rectification of their personal data in the register. Additionally, they have the right to restrict or object to the processing of their personal data.

Requests regarding the exercise of these rights should be made in writing and addressed to the contact person of the register. The data controller may request the data subject to provide proof of their identity if necessary. The data controller is responsible for responding to the data subject within the time frame specified in the EU General Data Protection Regulation (typically within one month).


We use cookies on our website to improve user experience and for traffic statistics.

Cookies are small text files that are stored by the web browser on the user’s device. With cookies, we collect information about the usage of our website, users’ devices, location, and web browser. For more information about cookies, you can visit this website:

We also use Google Analytics, an analytics service, to track website visitor numbers and analyze and improve the website to better serve users. You can find more information about Google Analytics here:

If desired, you can disable cookies, but this may affect the functionality of our website. Instructions on how to delete cookies can be found here: