This privacy notice contains information to be disclosed with the data subject in accordance with Articles 13 and 14 of the General Data Protection Regulation of the European Parliament and Council. The notice contains information on how personal data is collected, used, disclosed and stored in the Finnish Environment Institute (Syke). Syke has the right to make technical alterations to the privacy notice without notifying the data subject in advance. Data controller and data protection officer Finnish Environment Institute (Syke).
Syke has the right to make technical alterations to the privacy notice without notifying the data subject in advance.
Data controller and data protection officer
Finnish Environment Institute (Syke)
Latokartanonkaari 11 00790
Helsinki FINLAND
E-mail address: kirjaamo@syke.fi
Confidential e-mail address: https://securemail.ymparisto.fi Tel. +358 295 251 001
Contact details of the data controller:
Lauri Äystö
Tel. +358 295 251 023
firstname.lastname@syke.fi
and
Data protection officer
tietosuojaSYKE@syke.fi
Legal basis for data processing
We process your personal data as it is necessary for the performance of a task based on your written consent (Article 6 section 1 (a) of the General Data Protection Regulation and Data Protection Act (1050/2018).
Collected and processed personal data and the purpose for processing
We collect and process your personal data for possible further contacts related to environmental monitoring/screening, as covered in the APRIORA Monitoring survey .
We will collect the following data:
- First name
- Last name
- Email
- Country
- Organization
Collected personal data will not be used for automatic decision making nor profiling.
Sources of personal data
Personal data is collected from the APRIORA Monitoring survey response dataset.
Recipients of personal data
The personal data will be accessible only to APRIORA project personnel, who work directly with the APRIORA Monitoring survey. Syke will pre-process the response dataset. At this stage, each response will be issued a unique identifier by country, followed by a running number (ID, e.g. ‘FI001’). The dataset will then be divided into two separate datasets:
- Dataset A) containing the ID, first name, last name, and email datafields;
- Dataset B) containing the ID, and all remaining datafields.
The two datasets will be stored in separate files.
Dataset B) will then be divided by country. The country-specific datasets will then be distributed to APRIORA project partners in respective countries for further processing and summarising. I.e., responses from Germany will primarily be processed by project partners from Germany, etc.. In case the survey responses call for further clarifications, discussions or contact between the respondent and the country-specific APRIORA project partner, Syke will deliver the contact details for the relevant response to the country-specific project partner.
After the processing and summarising carried out in each country, including possible clarifications, Syke is in charge of compiling the outputs from this process into a background document concerning the topic. This background document will not present personal details such as names or email addresses. However, it may contain references to individual organisations.
Personal data will not be transferred or given outside the EU or ETA.
Protection of personal data
As the data controller, Syke has taken technical and organisational measures necessary to protect your personal data and requires these measures of any service providers used by it.
Storing of personal data
Personal data will be stored in electronic form for the time necessary for Syke to fulfil the purposes of processing described in this notice. All unnecessary data will be deleted without delay using effective and safe methods. All personal data will be deleted after the end of the APRIORA project (no later than 31 December 2026). Your data protection rights related to processing of personal data In this notice, we aim to provide an extensive explanation about processing of personal data in connection for its purposes. If anything regarding our processing of personal data is unclear, you may send in further questions to the contact person or Syke's data protection officer.
You have the following rights in accordance with the General Data Protection Regulation:
You have the right to know how your data is processed and for what purpose.
You have the right to receive a copy of your personal data being processed.
You have the right to deny us to process or continue to process your personal data.
If any of your personal data processed by us is inaccurate, you may request us to rectify the inaccurate and faulty data. When we rectify data based on your request, we are obliged, if possible, to inform all recipients to whom the personal data has been disclosed of the rectification of the personal data.
You have the right to restrict the processing of your personal data based on a specific personal situation at any time.
You also have the right to lodge a complaint with a supervisory authority.
Supervisory authority in Finland is the Office of the Data Protection Ombudsman.
Address: Lintulahdenkuja 4, 00530 Helsinki, P.O. Box 800, 00531 Helsinki e-mail: tietosuoja(at)om.fi
Phone: +358 29 566 6700
Registry: +358 29 566 676