Privacy Policy & GDPR Compliance

At Crewmeetup (referred to as "we", "our", "us", or "Crewmeetup.mom"), based in Helsinki, Finland, we prioritize the protection and confidentiality of the families and children who join our community. This Privacy Policy clarifies how we collect, process, safeguard, and use personal information in compliance with the European Union’s General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018).

---

1. Data Controller Details

The data controller responsible for your personal information is:
Crewmeetup Community Association
Aurinkoranta 12, 00540 Helsinki, Finland
Contact Email: [email protected]

2. Information We Collect and Process

We collect only the minimum amount of personal data required to provide you with functional, warm, and highly curated local community services. This includes:

• Identity & Contact Information: Full name, email address, and optional telephone numbers provided voluntarily when registering for picnics, playgroups, or newsletters.
• Community Profile Preferences: Your primary residential city (e.g., Helsinki, Espoo, Vantaa, Tampere) and children's general age groups, to recommend relevant playgroups.
• Inquiry & Communications Data: Contents of messages, questions, café recommendations, and feedback sent via our interactive contact forms.
• Technical & Analytical Usage Data: Anonymized IP addresses, approximate geographical location, browser type, operating system version, and general interaction patterns collected through tracking cookies to optimize our content layout.

3. Legal Basis for Processing Personal Data

Under the GDPR, we process your personal data under the following legitimate pillars:

• Consent: When you subscribe to our newsletters, join specific localized email circles, or submit recommendations (Art. 6(1)(a) GDPR). You have the right to withdraw this consent at any point.
• Legitimate Interests: To operate, manage, analyze, and optimize the Crewmeetup network, ensuring child-friendly venues are reviewed fairly, and to protect the security of our web infrastructure (Art. 6(1)(f) GDPR).
• Legal Obligation: To comply with local Finnish accounting, tax, and regulatory requirements (Art. 6(1)(c) GDPR).

4. How We Use Your Personal Data

We use processing tools and automated servers strictly for family network orchestration purposes, specifically to:

• Organize, coordinate, and register participants for our weekly family meetups, park playdates, and parenting seminars.
• Deliver safety updates, community invitations, local holiday schedules, and Scandinavian winter parenting bulletins directly to your inbox.
• Review and publish approved family café and playground reviews suggested by users, ensuring quality verification.
• Prevent fraudulent registrations, abusive language, or non-family-friendly behavior on our forms and communication hubs.

5. Data Retention Periods

We store personal information only for as long as necessary to fulfill the operational purposes described above. Newsletter subscription data and active playgroup mailing records are securely kept until you choose to unsubscribe via our instant opt-out links. Standard contact form submissions, inquiries, and casual emails are thoroughly deleted within twelve (12) months after the matter has been fully resolved.

6. Third-Party Data Disclosures & International Transfers

Crewmeetup does not sell, trade, lease, or distribute your personal details to commercial third parties for marketing purposes. To host the site and maintain regular operations, we share data with vetted service providers (such as web hosting providers, form-processing databases, and reliable email transmission platforms) operating strictly within the European Economic Area (EEA) under strict Data Processing Agreements (DPAs) in compliance with Art. 28 GDPR.

7. Children's Privacy Protection Guidelines

Our community supports modern parenting, and we are fiercely protective of minors. We strictly do not collect, process, or ask for the names, exact birth dates, or identifiable records of children. Any photos containing children submitted by parents or community coordinators require explicit, written, signed parental/guardian consent before appearing in our activities lists or social galleries.

8. Your GDPR Rights as a Data Subject

As a resident of Finland and the broader European Union, you hold strong statutory rights regarding your personal records. You may exercise these at any time:

1. Right of Access (Art. 15 GDPR): You can request a copy of all personal records we hold about you.
2. Right to Rectification (Art. 16 GDPR): You have the absolute right to correct inaccurate or outdated information.
3. Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You may request the immediate deletion of your details from our systems.
4. Right to Restrict or Object to Processing (Art. 18 & 21 GDPR): You may object to marketing campaigns or restrict how we use your email details.
5. Right to Data Portability (Art. 20 GDPR): You can request to receive your user records in a structured, machine-readable format.

To file a formal data subject request, please send an email to [email protected]. If you believe we are processing your personal records in violation of local laws, you have the right to file an official complaint with the Office of the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu) at tietosuoja.fi.

9. Security Implementations

We enforce standard transport encryption (HTTPS/TLS) across our entire web infrastructure. Access to client databases and volunteer tools is restricted strictly on a need-to-know basis. Regular security audits of web scripts are performed to minimize vulnerability exposure.