GDPR & Privacy Policy

Privacy Policy

Privacy statement on the processing of personal data at Jujutsu Oulu Ry in accordance with the EU General Data Protection Regulation (GDPR 2016/679) and the Finnish Data Protection Act.

1. Data Controller

Jujutsu Oulu Ry (Registered association July 11, 1996)
Address: Äimäkuja 6 A, 90400 Oulu, Finland
Email: info@oulunjujutsu.com
Phone: 041 327 4967 (Call during office hours, otherwise best reached by message)

2. Personal Data Processed

Through our website registration and contact forms, we collect only information strictly necessary for processing your request:

  • Name (First name and last name)
  • Email address
  • Phone number
  • Selected discipline / course group
  • Guardian contact information (for underage junior practitioners)

3. Purpose and Legal Basis for Processing

Personal data is used exclusively to confirm registrations for training sessions and basic courses, respond to inquiries, and provide member communications. The processing of personal data is based on the data subject's consent and the performance/management of the customer relationship or membership.

4. Data Transfers and Security

Personal data is never sold or disclosed to third parties for marketing purposes. Data transmissions utilize industry-standard 256-bit SSL/TLS encryption. Contact form submissions are processed through secure server endpoints (Formspree / Telegram API).

User theme preference (dark/light mode) is stored locally in the user's browser (localStorage).

5. Rights of the Data Subject

Under data protection legislation, you have the right to:

  • Inspect the personal data concerning you stored in the register
  • Request the rectification of inaccurate or outdated information
  • Request the deletion of your data from the register ("right to be forgotten")
  • Withdraw your consent at any time

To exercise your rights, please contact the club instructors by email at info@oulunjujutsu.com.

6. Processing of Minors' Personal Data (GDPR Art. 8) & Retention Period

When registering for the Junior Ju-Jutsu (ages 7–14) group, personal data of underage practitioners is collected with the explicit consent of a parent or guardian. The guardian's name and contact details (phone/email) are mandatory for registering a minor. Data is retained only for the duration of the basic course and seasonal activities (for a maximum of 12 months from registration, after which the data is automatically deleted), unless the practitioner continues as an active club member. The guardian has the right at any time to request rectification or deletion of the minor's data from the register.

Ask the Coach