Skip to main content

Privacy notice on processing of personal data in FoodTriggers

This privacy notice contains information to be disclosed with the data subject in accordance with Articles 13 and 14 of the General Data Protection Regulation of the European Parliament and Council. The notice contains information on how personal data is collected, used, disclosed and stored in the Finnish Environment Institute (Syke).

Syke has the right to make technical alterations to the privacy notice without notifying the data subject in advance.

Joint controllers and data protection officer

Finnish Environment Institute (Syke)
Latokartanonkaari 11
00790 Helsinki FINLAND
E-mail address: kirjaamo@syke.fi
Confidential e-mail address: https://securemail.ymparisto.fi
Tel. +358 295 251 001

Contact details of the data controller:  

Finnish Environment Institute (Syke)
Contact person: Minna Kaljonen
Latokartanonkaari 11
00790 Helsinki FINLAND
firstname.lastname@syke.fi
Tel. +358 29251252

Data protection officer: tietosuoja@syke.fi

Swedish University of Agricultural Sciences
Contact person: Sarah Säll
Email: sarah.sall@slu.se

Data protection officer: dataskydd@slu.se

University of Copenhagen
Contact person: Jørgen Dejgård Jensen
Email: jorgen@ifro.ku.dk

Data protection officer: Karina Maria Gregersen, karina.gregersen@ifro.ku.dk

Centro de Investigación y Tecnología Agroalimentaria de Aragón (CITA)
Contact person: Azucena Gracia
Email: agracia@cita-aragon.es

Data protection officer: rlferrer@aralegis.es

University of Pisa
Contact person: Francesca Galli
Email: francesca.galli@unipi.it

Data protection officer: responsabileprotezionedati@unipi.it

Universidade Católica Portuguesa (UCP)
Contact person: Frederica Campos de Carvalho

Data protection officer: compliance.rgpd@ucp.pt

Umweltbundesamt
Contact person: Hyewon Seo
Email: Hyewon.seo@uba.de

Data protection officer: Udo Langhoff

Legal basis for data processing

We process your personal data as it is necessary for the performance of a task based on your written consent (Article 6 section 1 (a) of the General Data Protection Regulation and Data Protection Act (1050/2018).

Collected and processed personal data and the purpose for processing

We collect and process your personal data in order to collect research data and for communication purposes. We will collect the following personal data: Name, position in organisation or company and general contact information. The names of the individual persons participating in the research are not used in the analysis of the research material or in the reporting of the results. Collected personal data will not be used for automatic decision making nor profiling.  

Sources of personal data

Personal data is collected from public sources such as organisations’ home pages or from the persons participating in the research. The collection of personal data in the Food Environment Labs and policy deliberation is agreed upon separately amongst those concerned.

Recipients of personal data  

Personal data will be disclosed to all joint controllers mentioned above. Also personnel of organisations who participate to the FoodTriggers have access to the personal data.  

Moreover, the joint controllers may disclose personal data to their cooperation partners, who are actively participating in the FoodTriggers research project and they will be processing your personal data for the purposes of scientific research. (Article 6 section 1 e of the General Data Protection Regulation and section 4, subsection 1, paragraph 3 of the Finnish Data Protection Act).

Syke does not actively transfer or disclose personal data outside the EU or EEA. However, Syke can use software service providers such as Microsoft in its operations, which most of the time operate as cloud services. This data is considered to be effectively transferred outside the EU/EEA, regardless of where the data is located.  

On 10 July 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The adequacy decision permits the transfer of data from the EU and EEA to participating companies in the US without additional safeguards.

The adequacy decision applies to transfers of personal data made to US companies that have committed to the safeguards specified in the arrangement. The adequacy decision cannot be used as an instrument for the transfer of personal data between public sector entities.

Syke ensures that the service providers it uses are on the list maintained by the European data protection authorities. https://www.dataprivacyframework.gov/list 

Protection of personal data

As the data controller, Syke has taken technical and organisational measures necessary to protect your personal data and requires these measures of any service providers used by it.

Storing of personal data

Personal data will be stored in electronic form for the time necessary for Syke and joint controllers to fulfil the purposes of processing described in this notice.

All unnecessary data will be deleted without delay using effective and safe methods.

Your data protection rights related to processing of personal data

In this notice, we aim to provide an extensive explanation about processing of personal data in connection for its purposes. If anything regarding our processing of personal data is unclear, you may send in further questions to the contact person or Syke's data protection officer.

You have the following rights in accordance with the General Data Protection Regulation:

You have the right to know how your data is processed and for what purpose.

You have the right to receive a copy of your personal data being processed.

You have the right to deny us to process or continue to process your personal data.

If any of your personal data processed by us is inaccurate, you may request us to rectify the inaccurate and faulty data. When we rectify data based on your request, we are obliged, if possible, to inform all recipients to whom the personal data has been disclosed of the rectification of the personal data.

You have the right to restrict the processing of your personal data based on a specific personal situation at any time.

You also have the right to lodge a complaint with a supervisory authority.

Supervisory authority in Finland is the Office of the Data Protection Ombudsman.

Contact details of the Office of the Data Protection Ombudsman:
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: PL 800, 00531 Helsinki
Email: tietosuoja(at)om.fi
Switchboard: 029 566 6700
Registry: 029 566 6768