Privacy policy

Honey Monsters acts as the controller for the processing of personal data described in this Privacy Policy. The addresses of Honey Monsters are:

Keski-Espoo: Kaivomestarinkatu 8, 02770 Espoo, tel. 050 534 3455 Olari: Avaruuskatu 1 E, 02210 Espoo, tel. 041 517 5272

For questions concerning the processing of personal data, please contact:

Kindergarten Director Iivi Kurki Phone: 010-212 7212 Email: iivi.kurki@honeymonsters.fi

The customers of Honey Monsters ry are persons who have concluded an agreement with Honey Monsters concerning a child's early childhood education or pre-primary education. In its activities, Honey Monsters typically processes the following personal data of its customers:

• The child's name, personal identity code, contact details, mother tongue, language of communication, other languages, and information on any non-disclosure order
• The guardians' names and contact details, personal identity codes and language of communication
• Names and contact details of persons authorised by the guardians to collect the child
• Other information provided by parents about themselves and/or the child, such as information collected for parents' team activities
• Family composition, such as the names of siblings
• Application information
• Information on the need for the service
• Information concerning the customer fee and the determination of the fee, as well as billing information
• Information on the care place and the extent of care
• The service agreement
• The child's early childhood education plan
• The child's pre-primary education plan
• Health information necessary for arranging the child's care
• Daily records related to the service
• The child's daily attendance and absence information
• Support measures in early childhood education and pre-primary education
• Photographs of the children and photography consents
• Other information necessary for organising day care activities

The personal data processed by Honey Monsters is mainly obtained from customers, i.e. the children's guardians, for example in connection with the service agreement or otherwise during the customer relationship. Personal data is also generated during the customer relationship, for example as customer-related information recorded by Honey Monsters staff.

We also obtain personal data from authorities and public administration bodies related to the activities of Honey Monsters (such as early childhood education staff of the child's municipality of residence, social welfare authorities and other public-law units, institutions and bodies, as well as private professionals, the Finnish National Agency for Education (Opetushallitus) and the Social Insurance Institution of Finland (Kela)), which are obliged to provide us with information related to the customer relationship.

The legal bases for the processing of personal data in the activities of Honey Monsters ry are the consent given by the customer, the agreement concluded between Honey Monsters and the customer on the provision of the service, and compliance with the legal obligations of Honey Monsters.

The processing of children's personal data is based on the guardian's competence to carry out legal acts concerning the processing of the child's personal data on the child's behalf.

Legislation applicable to the activities of Honey Monsters includes, among other things:

• Act on Early Childhood Education and Care (Varhaiskasvatuslaki 540/2018)
• Government Decree on Early Childhood Education and Care (Valtioneuvoston asetus varhaiskasvatuksesta 753/2018)
• Basic Education Act (Perusopetuslaki 628/1998)
• Act on Child Home Care and Private Day Care Allowances (Laki lasten kotihoidon ja yksityisen hoidon tuesta 1128/1996)
• Pupil and Student Welfare Act (Oppilas- ja opiskelijahuoltolaki 1287/2013)

We process personal data for the following purposes:

• Organising early childhood education and pre-primary education for children
• Reserving and allocating early childhood education places
• Managing tasks related to the child's early childhood education relationship
• Customer advice
• Service-related communications
• Communications for parents' team and alumni activities
• Customer billing
• Collecting and analysing statistics related to early childhood education
• Collecting and processing customer feedback
• Developing the controller's activities

The customer data of Honey Monsters ry is confidential, and the staff are bound by a duty of confidentiality regarding it. Honey Monsters discloses and transfers personal data as described below:

• To authorities entitled to process the data, on the basis of an individual request for information and to the extent required by law.
• To the national Early Childhood Education and Care data repository ("Varda") under the Finnish National Agency for Education, to the extent that Honey Monsters, as a private service provider, is obliged to disclose personal data to Varda.
• To the Social Insurance Institution of Finland (Kela) regarding information on children who have started or ended day care.
• To accounting and debt collection agencies acting on behalf of Honey Monsters, with regard to information concerning the billing, collection and enforcement of customer fees.
• To authorities for purposes required by law, such as the processing of statistical data (Act on the National Research and Development Centre for Welfare and Health 1073/92, section 6).
• To other members (customers) of the Honey Monsters support association for the kindergarten's team activities and communication between parents, if you have given your consent to this.
• To the organiser of a hobby club held at the kindergarten for its register of participants, if you have given your consent to this.
• To our subcontractors who process personal data on behalf of and for Honey Monsters. In our contractual arrangements with our subcontractors, we ensure that the subcontractor processes personal data in accordance with applicable legislation.

As a rule, Honey Monsters ry does not transfer personal data outside the EU or the EEA. Should personal data exceptionally need to be transferred outside the EU or the EEA, we will ensure that the transfer takes place in compliance with the safeguards and transfer mechanisms required by data protection legislation.

Honey Monsters processes personal data securely, using appropriate organisational and technical measures to protect the data.

The personal data we process is protected against unauthorised access and unlawful processing, such as destruction, alteration or disclosure. Particular attention is paid to the protection of confidential and sensitive data, for example when granting access rights. Honey Monsters employees may only process the personal data they need for their work.

Electronic material is stored on the servers of the kindergarten's IT service provider. The system is used from the kindergarten's workstations, which are protected by passwords and other technical means. Access rights to customer information systems and files are based on personal user rights, and their use is monitored. Access rights are granted on a task-specific basis, and the use of data is based on the customer relationship or another legal basis mentioned above.

Manual material, such as paper documents necessary for arranging and providing the service to the customer in accordance with the agreement, is stored in locked and supervised premises.

Personal data is retained only for as long as is necessary to fulfil the purposes defined above. Personal data is destroyed when the grounds for retaining and using it cease to exist.

If Honey Monsters processes your personal data, as a data subject you have the right under data protection legislation to receive information about the processing and to influence it. As a data subject, you have the right to:

• Access, rectify and erase your personal data
• Withdraw your consent to the processing of personal data (e.g. in the case of a photography consent, an application or other processing of personal data based on your separate consent)
• Object to or restrict the processing of personal data under the conditions laid down in legislation
• Lodge a complaint with the data protection authority (tietosuoja.fi) if you consider that the processing of your personal data is contrary to applicable data protection legislation.

A request must be made to the contact person of Honey Monsters ry in person or by means of a document signed by hand or otherwise verified. Honey Monsters must be able to reliably identify the data subject making the request before carrying out the requested action.

Exercising the right of access is free of charge once a year.

This privacy policy is available at the Honey Monsters kindergartens and on the website www.honeymonsters.fi.

Honey Monsters may update this Privacy Policy to duly reflect changes in the processing of personal data. We encourage you to review the Privacy Policy regularly.