Skip to content
Tietosuoja haltuun harrastustoiminnassa -hankkeen logo, jossa on tietosuojalainsäädäntöön ja lapsiin liittyvä kirjainlyhenne GDPR4CHLDRN. Tietosuoja haltuun harrastustoiminnassa -hankkeen logo, jossa on tietosuojalainsäädäntöön ja lapsiin liittyvä kirjainlyhenne GDPR4CHLDRN.
Search
  • English
    • Suomi
    • Svenska
    • English
  • Front page
  • Guiding materials
    • Board of the association
    • Coaches and instructors
    • Parents
    • Children and young people
  • Material bank
    • Term bank
    • Quizzes
    • Downloadable materials
    • Data protection icons 
    • Articles
  • Information on the site
  • English
    • Suomi
    • Svenska
    • English
  • Front page
  • Guiding materials
    • Board of the association
    • Coaches and instructors
    • Parents
    • Children and young people
  • Material bank
    • Term bank
    • Quizzes
    • Downloadable materials
    • Data protection icons 
    • Articles
  • Information on the site
Search
  1. Front page
  2. Board of the association
  3. Annex 2: Comics to inform about data protection
Skip to page content

Board of the association

  • Starting page
  • Why is the protection of personal data important?
    • 1. Privacy is a fundamental right
    • 2. Sensitive personal data requires particularly careful protection
    • 3. Personal identity codes may only be processed if necessary
  • What roles are involved in processing?
    • 1. The controller is responsible for the processing of personal data
    • 2. A processor acts on behalf of the controller
  • What principles must be observed in the processing of personal data?
    • 1. Take data protection into account from the start and in all circumstances
    • 2. Processing requires a basis
      • 2.1 Legal bases for processing personal data
      • 2.2 Consent requires an indication of the participant's wishes
      • 2.3 Consent from minors
    • 3. Only use personal data for the planned purposes
    • 4. Inform data subjects transparently of the processing of personal data
    • 5. Only process necessary personal data
    • 6. Only process accurate personal data and rectify inaccurate data
    • 7. Ensure the security of processing
    • 8. Define storage periods for personal data and erase unnecessary data
      • 8.1. Storage period
      • 8.2. Storage location
      • 8.3 Erasure 
    • 9. Demonstrate compliance with data protection legislation
  • What obligations does a hobby organiser have in the processing of personal data?
    • 1. Fulfil the participants' data protection rights
    • 2. Describe the hobby organiser's processing of personal data with a record of processing activities
    • 3. Agree on processing
    • 4. Assess the risks and impact of processing
    • 5. Report personal data breaches
    • 6. Only transfer personal data out of the EU if the conditions are met
    • 7. Give people involved in the hobby instructions and training in data protection
    • 8. Manage the life cycle of personal data from planning to collection, storage and erasure
  • What should you take into account when publishing photos and videos?
  • What should you take into account when processing health data in hobby activities?
  • What should you take into account when disclosing personal data in hobby activities? 
  • Annex 1: Consent form - template
  • Annex 2: Comics to inform about data protection

Annex 2: Comics to inform about data protection

The following comic strips depict situations related to data protection in hobbies and are specifically designed to inform children and young people about the processing of personal data. The comic strips can be used to increase awareness within your association. Feel free to print them and pin them to your walls to remind people about this important topic!

The examples showcased in these comics are fictional and cannot be applied as such. The controller should always assess the information provided to data subjects on a case-by-case basis, taking into account data protection legislation.

Downloadable file
Download comic strips for associations (.pdf)

Comic strip 1. Informing people of data protection

The first frame of the comic. A child and the child’s football coach greet each other.
The second frame of the comic. The child asks their coach about the processing of personal data in the hobby.
The third frame of the comic. The coach tells the child about the processing of personal data in the hobby. The coach explains that personal data is processed in order to register the team for training camps and tournaments. The personal data that is processed includes, for example, name, phone number and email address.
The fourth frame of the comic. The coach tells the child about the processing of personal data in the hobby. The coach explains that personal data is only processed by the appropriate people. The coach explains who has access to the data in the FOOTIE-system used by the club and that the data is kept in the system for two years.
The fifth frame of the comic. The coach tells the child about the processing of personal data in the hobby. The coach explains what data protection rights the child has, such as the right to be informed about the processing of personal data and the right to access and rectify their own data.
The sixth and final frame of the comic. The child thanks the coach for the additional information they provided regarding the data protection in the hobby.


Comic strip 2. Processing of personal data in a competition

The first frame of the comic. An adult welcomes you to a gymnastics competition and tells you more about the processing of personal data in the context of the competition.
The second frame of the comic. The adult tells you that the Gymnast gymnastic club is the data controller of the gymnastics competitions. The person explains that the basis for processing personal data is legitimate interest, and in the case of allergy data, consent.
EN: The third frame of the comic. The adult lists the personal data being processed. These include name, year of birth and allergies. Personal data is processed in the Gymnast-system by volunteers.
The fourth frame of the comic. An adult explains that the results of the competition will be published on the website by league. The names of the team members will not be published. Personal data will be processed within the EU/EEA-area. The personal data will be deleted two weeks after the competitions and results two years after the competitions.
The fifth frame of the comic. An adult lists the privacy rights of the entrant. These include the right to be informed about the processing of personal data and the right of access to one’s own personal data.
The sixth and final frame of the comic. The adult wishes you good luck in the competitions!


Comic strip 3. Data rectification

The first frame of the comic. A child greets their coach and says that their phone number has changed.
The second frame of the comic. The coach greets the child and states that the child has the right to correct their personal data. The coach says that they will update the phone number by contacting the secretary and the team manager.
The first frame of the comic. A child greets their coach and says that their phone number has changed.
Annex 1: Consent form - template
The logo of the Office of the Data Protection Ombudsman.
The logo of TIEKE Finnish Information Society Development Centre.

The European Union flag, with the text "Funded by the European Union" on its right-hand side.

Funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or European Commission. Neither the European Union nor the granting authority can be held responsible for them.

Information on the website

The site contains material that provide information on data protection legislation and the protection of personal data, especially for children and young people aged 13–17, their parents, and associations that organise hobby activities. The website has been developed in the GDPR4CHLDRN – Ensuring data protection in hobbies project (2022–2024) implemented by the Office of the Data Protection Ombudsman and TIEKE.

Feedback about the site can be given by e-mail to the address tietosuoja@om.fi. In the message field, you must mention tietosuojaharrastuksissa.fi, so that the feedback is directed to the correct address.

  • Data protection on the website
  • Accessibility statement
Guiding materials
  • Board of the association
  • Coaches and instructors
  • Parents
  • Children and young people

© 2024 Office of the Data Protection Ombudsman and TIEKE. The site uses free Font Awesome icons. The icons have not been changed. License: CC BY 4.0

Touched by Hutcode