1. Data Controller

Name: Adventurous Ideas Oy
Business ID: 2838796-4
Postal Address: ℅ Valo Hotel & Work, Mannerheimintie 109, 00280 Helsinki, Finland

2. Name of the Register

Application Management System for Project Support at Adventurous Ideas Oy

3. Contact Information of the Data Controller

Contact details of the data controller’s responsible person are available upon request via email: info (at) adventurousideas.vc

4. Purpose and Legal Basis for Processing Personal Data

Personal data is processed for the purposes of receiving, evaluating, deciding on, paying out, reporting on, and communicating about project support applications.
The data collected includes, but is not limited to:

• Contact information of the applicant and any project team members
• Application content and attachments
• Payment details such as bank account numbers
• Information related to the evaluation and processing of the application
• Log data generated from system use
• Internal messages between the data subject and the data controller within the system

The legal basis for data processing is the consent given by the data subject and the legitimate interest of the company to handle applications appropriately. Providing the required personal data is a prerequisite for the application to be processed.

5. Recipients and Processors of Personal Data

Personal data may be processed by employees of Adventurous Ideas Oy, designated experts involved in application evaluation, technical support personnel, financial and payment processing staff, and auditors. All users are granted access via personal user credentials, and data is shown only to the extent necessary for task fulfillment.

6. Data Security

• Access to the system requires a personal username and password.
• All usage takes place over a secure SSL connection.
• Log data is used for monitoring and ensuring data security.
• Data is stored in secured cloud environments, access to which is restricted to predefined authorized individuals.

7. Data Retention​

• User accounts: Deleted if there are no active applications and the user account has not been used for over three years.
• Incomplete applications: Deleted no later than 18 months after the incomplete (i.e., unsent) application was last edited.
• Evaluation data: Deleted when no longer needed or at the latest two years after the end of the decision year.
• Rejected applications: Deleted or anonymized within two years of the decision date.
• Attachments: Deleted no later than two years after the completion of reporting.
• Approved grants and payment information: Key information (recipient, amount, purpose) and related reports are retained long-term. Bank account numbers and personal identity numbers are deleted two years after the completion of reporting.

8. Rights of the Data Subject

The data subject has the right to:

• Access and edit their personal data stored in the system
• Request the correction of incorrect information
• Download their application as a PDF file
• File a complaint with the data protection authority if they believe their data has been mishandled

There is no right of access to evaluation data or anonymized data collected for statistical purposes.

9. Disclosure of Data

• ​Information on granted project support may be disclosed to authorities based on legal obligations (e.g. Finnish Tax Administration).
• Names of recipients, grant amounts, and possible project summaries may be published on the Adventurous Ideas Oy website and/or in reports.
• The company may share necessary application data with co-funders in the case of jointly funded projects.