Privacy notice on processing of personal data in the GloWater research project

This privacy notice contains information to be disclosed with the data subjects in accordance with Article 13 and 14 of the General Data Protection Regulation of the European Parliament and Council. This privacy notice contains information on how personal data is collected, used, disclosed and stored in the Finnish Environment Institute (Syke).

Data controller and data protection officer

Finnish Environment Institute (Syke)
Latokartanonkaari 11
FI-00790 Helsinki
Finland
Email address: kirjaamo@syke.fi
Confidential e-mail address: https://turvaviesti.ymparisto.fi/
Tel. +358 295 252 001

Contact details of the data controller

Suvi Sojamo, Principal researcher
forename.surname@syke.fi

Maria Ojanen, Senior researcher
forename.surname@syke.fi

Data protection officer
Juha Ruotsalainen tietosuojaSYKE@syke.fi

Legal basis for data processing

We process your personal data as it is necessary for the performance of a task based on your written consent (Article 6 section 1 (a) of the General Data Protection Regulation and Data Protection Act (1050/2018).

Collected personal data and purposes of processing

Personal data are collected for the implementation of the GloWater project (Global connections and collaborative solutions for sustainable water security). The personal data collected includes first name, surname, professional position, work email address, work phone number, and audio and video recordings. Personal data is also used for contacting and communication purposes during the project. None of the personal data collected in the project will be made publicly available.

No decisions based on automated decision-making or profiling are made based on the collected personal data.

Sources of personal data

Personal data is primarily collected directly from research participants. This takes place during interviews and workshops, through the Webropol survey tool, and via the registration form in the Lyyti system. In addition, the contact details of potential participants are collected from organisations’ websites.

Receivers of personal data

Personal data will be processed and analysed by researchers and other staff at the Finnish Environment Institute (Syke) working in the GloWater project. If necessary, personal data may be shared with Syke’s research partners for the purposes of the GloWater project. Kaskas Oy employees also have access to personal data.

Syke’s research partners and service providers act as data processors under the General Data Protection Regulation (GDPR) and must follow Syke’s instructions for handling personal data.

Transfer of personal data outside the EU or EEA

Syke does not actively transfer or disclose personal data outside the EU or EEA. However, Syke uses software provided by U.S.-based service providers, such as Microsoft, which operate as cloud services. In practice, this means that the data is considered to be transferred outside the EU/EEA regardless of its physical location.

On 10 July 2023, the European Commission adopted a decision on the adequacy of the level of data protection in the United States. Based on this adequacy decision, data may be transferred from the EU and EEA to U.S. companies participating in the framework without requiring an additional transfer mechanism under Article 46.

Syke ensures that the service providers it uses have committed to these safeguards. The list of participating companies: https://www.dataprivacyframework.gov/list

Protection of personal data

Finnish Environment Institute as data controller has taken the necessary technical and organisational measures for the protection of personal data and requires them from all service providers it contracts.

Storing of personal data

Personal data will be retained only as long as necessary for the purposes described in this notice. It will be deleted once the purpose has ended, and in any case no later than 5 years after the end of the project.

Your data protection rights related to processing of personal data

In this notice, we aim to provide an extensive explanation about processing of personal data in connection for its purposes in the GloWater project. If anything regarding our processing of personal data is unclear, you may send in further questions to the contact person or Syke's data protection officer. You have the following rights under the Data Protection Regulation:

  • You have the right to know how your data is processed and for what purpose.
  • You have the right to receive a copy of your personal data being processed.
  • You have the right to withdraw your consent at any time.
  • If the personal data we process about you is inaccurate, you may request that we correct it. If we correct data based on your request, we are obliged, where possible, to inform all parties to whom the data has previously been disclosed.
  • You have the right to have your personal data erased and to restrict its processing.
  • In addition, you have the right to request that your data be transferred to another controller.

You also have the right to lodge a complaint with a supervisory authority.

Supervisory authority in Finland is the Office of the Data Protection Ombudsman.  

Addres: Lintulahdenkuja 4, 00530 Helsinki, 800, 00531 Helsinki
e-mail: tietosuoja(at)om.fi
Phone: 029 566 6700
Registry: 029 566 6768

Published 26.9.2025 / Updated 3.10.2025