This notice contains the information specified in Article 13 of the General Data Protection Regulation (2016/679) of the European Parliament and of the Council that must be provided to the data subject. This notice explains, among other things, how the Finnish Environment Institute SYKE collects, uses, discloses and stores the personal data of people who wish to be included into emailing lists of the Baltic Sea Pharma Platform (BSPP).
Data controller and data protection officer
If you want to receive additional information or make an inquiry or change request, please contact us:
Finnish Environment Institute SYKE
Latokartanonkaari 11, 00790 Helsinki, Finland
kirjaamo@syke.fi
Tel. +358 295 251 450
BSPP coordinators
Lauri Äystö
firstname.lastname@syke.fi
+358 295 251 843
Noora Perkola
firstname.lastname@syke.fi
+358 295 251 507
Data protection officer
Juha Ruotsalainen
tietosuojaSYKE@syke.fi
Legal basis for processing
The processing of personal data is based on the data subject’s consent (Article 6 paragraph 1 point (a) of the GDPR), collected at the time of answering a questionnaire, or registering for an event, arranged by the BSPP.
Personal data collected and the purposes of processing personal data
The personal data collected includes the participant’s name, job description, organisation, telephone number and email address.
We use the personal data as a register of BSPP members. The members will receive information on events arranged by the BSPP, and about recent developments in the field within the Baltic Sea region.
The personnel of the Webropol service provider also have access to the personal data. The service provider is a processor of personal data in accordance with the GDPR, and it must follow instructions provided by SYKE when processing the personal data.
Sources of personal data
The contact details have been received from the Swedish environmental agency, and collected in questionnaires, event registrations, and through the BSPP website. In the first questionnaire arranged by SYKE as the BSPP lead, the contact persons included in the original contact list provided by the Swedish Environmental Agency are given the option to have themselves removed from the BSPP register.
Recipients of personal data
The personal data is primarily used at SYKE for the purposes defined in section ‘Personal data collected and the purposes of processing personal data’. In addition, SYKE may disclose personal data to its partners for the purpose of organising and events.
Storage of personal data
The personal data is stored for the required amount of time so that SYKE can implement the purposes of processing described in this notice.
A person from outside SYKE can request that their data be erased at any time.
Withdrawing consent
Those data subjects for whom data processing is based on their consent (people from outside SYKE) have the right to withdraw their consent at any time. In such a case, the withdrawal will not have any impact on the legality of processing performed based on the consent before the withdrawal of the consent.
Protection of persona data
For the Webropol service, the personal data is stored in the outsourced Webropol service (www.webropol.fi). The connection to the service is secured with SSL. The data can only be accessed by dedicated persons at SYKE who are associated with the administration of the training in question.
Rights of the data subject
The data subject has the right to ask SYKE for information on which personal data SYKE is collecting and for which purposes the personal data is processed. In addition, the data subject has the right to have their personal data rectified, to have its processing restricted, to object to the processing and to transmit the personal data from one system to another. In addition, the data subject has the right to lodge a complaint to the supervisory authority.