Finnish Environment Institute’s privacy notice for data subjects
Introduction
This privacy notice provides the information for data subjects referred to in the General Data Protection Regulation (EU) 679/2016.
The Finnish Environment Institute SYKE regularly publishes press releases, newsletters and blogs for its stakeholders as part of its customer service. This ensures that SYKE's stakeholders have access to up-to-date research and expert information on the environment to support their activities and decision-making. At the same time, SYKE discharges its legal obligation of promoting general environmental awareness and its obligation to promote openness in access to information referred to in the Act on the Openness of Government Activities. The Institute also provides topical communication services together with other parties.
SYKE’s stakeholders comprise a broad range of actors in society from citizens and partners to the highest level of central government policy-makers. The communication materials also provide many of our international partners with information about the SYKE’s activities and results.
Purposes of and legal basis for personal data processing
The purpose of processing personal data is to transfer the aforementioned communication products to subscribers, as processing the data is a precondition for delivering these products.
For the newsletters and blogs, the legal basis for processing personal data is consent referred to in Article 6 (1 a) of the General Data Protection Regulation.
For press releases, the legal basis for processing personal data is compliance with the controller’s legal obligation referred to in Article 6 (1 c) of the General Data Protection Regulation. Under section 1, subsection 2 of the Act on the Finnish Environment Institute (1069/2009), SYKE has the duty to promote environmental awareness.
The personal data collected on customers who are natural persons comprise e-mail addresses and information on the language of the products to which the customers subscribe.
Joint controllers
For the part of Luonnonkirjo newsletter, SYKE and the Finnish Ministry of the Environment are joint controllers.
Processors of personal data
Personal data are processed by System Administrators at SYKE, the Ministry of the Environment, the Housing Finance and Development Centre of Finland ARA, and the companies participating in providing the service.
Transfer of personal data to third countries or international organisations
Personal data are not transferred to countries outside the EU or the EEA.
The period for which the personal data will be stored
The period for which the personal data is stored, is the duration of the customer relationship.
Data subject’s rights
A data subject may remove their data from the register by using the Unsubscribe function of the product they subscribe to or the online service subscription form. The data subject has the right to request access to personal data concerning him or her, to request that any inaccurate data are rectified or deleted, to request the removal of their personal data, or to object to the right to transfer data from one system to another. If the data subject finds that their data has been processed in breach of the law, they have the right to complain to the Data Protection Ombudsman.
Sources of personal data
The register data have mainly been collected through subscriptions completed by the data subjects themselves. Some of the data have been collected from public sources based on official roles. The subjects’ consent to being included in the subscription register for blogs and newsletters will be sought during the year in which the General Data Protection Regulation enters into force.
Automated decision-making
In some processing of personal data, statistical information collected through cookies is used. SYKE uses this information to make decisions on developing its online services or activities. The press releases, newsletters and blogs reside on online services in which cookies are used. General statistical data on website use is collected in order to improve the service. These data include visitor numbers to the site, the user’s IP address, time, pages visited, browser type, operating system used and screen resolution. The collection of visitor statistics is based on server log data and Google Analytics reporting, in which Google Analytics cookies and JavaScript code are used.
Protection of personal data processing
As a controller, SYKE has taken technical and organisational measures necessary to ensure that the processing of personal data is protected and also requires these measures of any service providers used by it.
Controller and controller’s contact details
Finnish Environment Institute SYKE
Visiting address: Mechelininkatu 34a, Töölö, Helsinki
Mailing address: P.O.Box 140, FI-00251 Helsinki, Finland
E-mail: Register office kirjaamo.syke[at]ymparisto.fi
Confidential e-mail: https://securemail.ymparisto.fi
Tel.+358 295 251 450
Contact details of SYKE’s data protection officer
tietosuojaSYKE[at]ymparisto.fi