Privacy notice on processing of personal data in the water security for the planet (Water4All) and digital waters (DIWA) research projects
Syke has the right to make technical alterations to the privacy notice without notifying the data subject in advance.
Data controller and data protection officer
Finnish Environment Institute (Syke)
Latokartanonkaari 11
00790 Helsinki
Finland
Email address: kirjaamo@syke.fi
Confidential e-mail address: https://securemail.ymparisto.fi
tel. +358 295 252 001
Contact details of the data controller
Jari Silander, Dr, leading specialist
firstname.lastname@syke.fi
Contact details of the data protection officer
tietosuoja@syke.fi
Legal basis for data processing
We process your personal data as it is necessary for the performance of a task based on your written consent (Article 6 section 1 (a) of the General Data Protection Regulation and Data Protection Act (1050/2018).
Collected and processed personal data and the purpose for processing
The personal data collected in the DIWA research project and Water4All research project include organization, and email address. The information is collected via Webropol registration form organized by the project. Participation is voluntary.
Personal data is collected and processed in order to organise a seminar or webinar. The email addresses (names) of the individual persons participating in the seminar or webinar are not used in the analysis of the research material or in the reporting of the results. Collected personal data will not be used for automatic decision making nor profiling.
Sources of personal data
Participants’ personal data is collected from the participants themselves. When personal data is requested from the participants themselves, we will also ask their consent for storing and using of their personal data. The collection of personal data for the purposes of research will be agreed upon separately amongst those concerned.
Recipients of personal data
Persons appointed to work in the Syke Water4All or DIWA project have access to the personal data. In addition, the personnel working for the survey tool Webropol has access to the data.
Syke does not actively transfer or disclose personal data outside the EU or EEA. However, Syke can use software service providers such as Microsoft in its operations, which most of the time operate as cloud services. This data is considered to be effectively transferred outside the EU/EEA, regardless of where the data is located.
On 10 July 2023, the European Commission adopted its adequacy decision for the EU-U.S. Data Privacy Framework. The adequacy decision permits the transfer of data from the EU and EEA to participating companies in the US without additional safeguards.
The adequacy decision applies to transfers of personal data made to US companies that have committed to the safeguards specified in the arrangement. The adequacy decision cannot be used as an instrument for the transfer of personal data between public sector entities.
Syke ensures that the service providers it uses are on the list maintained by the European data protection authorities. https://www.dataprivacyframework.gov/list
Protection of personal data
The personal data collected with the Webropol software will be stored in the Webropol-service (www.webropol.fi). Connection to the service is secured with SLL certificate. In Syke, only persons appointed to Water4All or DIWA project and with Webropol account can access the personal data.
The data controller Syke has implemented technical and organisational measures necessary to protect personal data and also require these measures of any service providers used by them.
Storing of personal data
Personal data will be kept for as long as the Water4All or DIWA project has fulfilled its purpose. However, personal data will be removed when the project ends, latest in year 2032. All unnecessary data will be deleted without delay using effective and safe methods.
Your data protection rights related to processing of personal data
In this notice, we aim to provide an extensive explanation about processing of personal data in connection for its purposes. If anything regarding our processing of personal data is unclear, you may send in further questions to the contact person or Syke's data protection officer.
You have the following rights in accordance with the General Data Protection Regulation:
You have the right to know how your data is processed and for what purpose.
You have the right to receive a copy of your personal data being processed.
You have the right to deny us to process or continue to process your personal data.
If any of your personal data processed by us is inaccurate, you may request us to rectify the inaccurate and faulty data. When we rectify data based on your request, we are obliged, if possible, to inform all recipients to whom the personal data has been disclosed of the rectification of the personal data.
You have the right to restrict the processing of your personal data based on a specific personal situation at any time.
You also have the right to lodge a complaint with a supervisory authority.
Supervisory authority in Finland is the Office of the Data Protection Ombudsman.
Addres: Lintulahdenkuja 4, 00530 Helsinki, 800, 00531 Helsinki
e-mail: tietosuoja(at)om.fi
Phone: 029 566 6700
Registry: 029 566 6768