Privacy Policy Last updated: October 2025 1. Overview Arteles values your privacy and complies with the EU General Data Protection Regulation (GDPR). This notice explains how we collect, use, and protect your personal data. This policy may be updated by Arteles and will be updated on the Arteles website as soon as reasonably possible. 2. Data Controller Arteles Creative Center Oy Address: Hahmajärventie 26, 38490, Haukijärvi, Finland Email: info@arteles.org Tel. +358 50 300 6304 3. Collected personal data We may collect the following data: Contact details (name, title ,email, phone, address, social media address) Identification and application information (Nationality, Date of Birth, Gender, Application form answers, CVs, portfolios, travel & Visa info) Financial details (bank account information, records of payments received or sent) Employee details (bank account details, work history, salary, tax status) Communications with us (emails, forms, feedback) Information about the use of our information and communication systems (cookies, IP address, browser type) Sensitive data (e.g. health, medical or access information), which usage is limited to operational or inclusion purposes. 4. How We Collect Data Data may be collected via: Applications, surveys, questionnaires, contracts and contact forms Residency program registrations or subscriptions Emails, correspondence and feedback Website analytics tools and Cookies Data may also be collected through external platforms such as Wufoo (application forms), Google (forms), Mailchimp (newsletter subscriptions) and Yumpu (online publications platform used for Arteles Catalogue and publications) 5. Purpose of Collecting Personal Data We process your data to: Manage applications, residencies, alumni community network and collaborations Promote residents on our website, Arteles Catalogue and possible other publications Communicate with participants and partners Process payments and donations Comply with legal or funding requirements Improve our programs and website Processing is based on consent, contractual necessity, legal obligation, or legitimate interest. 6. Sharing of Data We may share data with: Service providers (accounting, email, legal services, IT, hosting, communication) Public funders or authorities when required by law All third parties are required to have appropriate security measures to protect the data shared with them. The data shared with third parties is limited to what is needed for the purpose. Third party services may collect their own data through cookies or similar technologies. On our website we use trusted third-party service providers which process limited personal data on our behalf under data-processing agreements and in accordance with the GDPR. Hostingpalvelu (website hosting & analytics) by Planeetta Internet Oy Mailchimp (newsletters) by The Rocket Science Group LLC PayPal (residency payments) by PayPal (Europe) S.à r.l. et Cie, S.C.A Google (forms) by Google LLC Wufoo (application forms) by ServiceMonkey Inc. Yumpu (online catalogue & publications) by i-magazine AG (Yumpu provides a digital platform for publishing magazines, brochures or catalogs. Using Yumpu, the content of PDF files is displayed as a so-called flip catalogue/flipbook and displayed directly in the web browser without loading the PDF files.) 7. Data Retention We retain personal data only as long as necessary for its purpose or as required by law. You may unsubscribe from the newsletter at any time via 'unsubscribe'-link in the newsletter or by contacting info@arteles.org. You may request the deletion of your personal data at any time by contacting info@arteles.org. We will respond in accordance with GDPR requirements. 8. Data Security We take care of the security of your personal data and use appropriate measures to prevent unauthorized use, alteration, or loss of data. We do not disclose the collected data to third parties without your explicit consent, except as required by law. All collected data is kept secure and treated confidentially. 9. Your Rights It is important that the personal information we have is up-to-date and correct. Please inform us if your personal information changes during your working relationship with us. Under certain circumstances, by law you have the right to: request access or correction to your personal information request deletion or removal of your personal information request restriction of processing your personal information object to certain processing withdraw consent Requests should be sent to info@arteles.org. We have the right to refuse to comply with the request in case it is clearly unfounded or excessive. We may need to request specific information to confirm your identity and ensure your right to access information or to exercise any of your other rights. 10. Cookies Our website uses essential and non-essential cookies. Our website uses cookies to improve the functionality and user experience of the site. Our cookies do not collect personal information and we do not use them for marketing purposes. Third party services may collect their own data through cookies or similar technologies. You can manage your cookie settings in your browser. 11. Updates to This Policy Arteles reserves the right to update this privacy policy at any time. If substantial updates are made, we will inform you about them. The latest version will always be available on our website.