This notice contains the information specified in Article 13 of the General Data Protection Regulation (2016/679) of the European Parliament and of the Council that must be provided to the data subject. This notice explains, among other things, how the Finnish Environment Institute Syke collects, uses, discloses and stores the personal data of people who wish to be included into emailing lists of the Baltic Sea Pharma Platform (BSR Pharma).
Data controller and data protection officer
If you want to receive additional information or make an inquiry or change request, please contact us:
Finnish Environment Institute Syke
Latokartanonkaari 11, 00790 Helsinki, Finland
kirjaamo@syke.fi
Tel. +358 295 251 450
BSR Pharma coordinators
Lauri Äystö
firstname.lastname@syke.fi
+358 295 251 023
Noora Perkola
firstname.lastname@syke.fi
+358 29 525 2309
Data protection officer
Juha Ruotsalainen
tietosuojaSYKE@syke.fi
Legal basis for processing
The processing of personal data is based on the data subject’s consent (Article 6 paragraph 1 point (a) of the GDPR), collected at the time of answering a questionnaire, or registering for an event, arranged by the BSR Pharma.
Personal data collected and the purposes of processing personal data
The personal data collected includes the participant’s name, job description, organisation, telephone number, email address, and the country they represent.
We use the personal data as a register of BSR Pharma members. The members will receive information on events arranged by the BSR Pharma, and about recent developments in the field within the Baltic Sea region.
The personal information may be used when producing written summaries of organized events. Summaries containing personal details (name, phone number, email address) will not be published, but may be compiled as internal documents and for reporting purposes for funding organizations. Personal information may be published as anonymised aggregates, for instance as the numbers of event participants representing different countries or affiliations (e.g. academia, industry, authorities, etc.). Personal details may be used by BSR Pharma coordinators to make direct contacts to BSR Pharma members working on specific fields. These may be initiated based on e.g. input requests for events or newsletters, or as collaboration requests submitted by any of the BSR Pharma members.
The personnel of the Webropol service provider also have access to the personal data. The service provider is a processor of personal data in accordance with the GDPR, and it must follow instructions provided by Syke when processing the personal data.
Sources of personal data
The contact details have been received from the Swedish environmental agency, and collected in questionnaires, event registrations, and through the BSR Pharma website. In every communication from the BSR Pharma coordinators to BSR Pharma members, the option to unsubscribe is given.
Recipients of personal data
The personal data is used at Syke for the purposes defined in section ‘Personal data collected and the purposes of processing personal data’.
Storage of personal data
The personal data is stored for the required amount of time so that Syke can implement the purposes of processing described in this notice.
A person can request that their data be erased at any time.
Withdrawing consent
Those data subjects for whom data processing is based on their consenthave the right to withdraw their consent at any time. In such a case, the withdrawal will not have any impact on the legality of processing performed based on the consent before the withdrawal of the consent.
Protection of persona data
For the Webropol service, the personal data is stored in the outsourced Webropol service (www.webropol.fi). The connection to the service is secured with SSL. The data can only be accessed by dedicated persons at Syke who are associated with the administration of BSR Pharma.
Rights of the data subject
The data subject has the right to ask Syke for information on which personal data Syke is collecting and for which purposes the personal data is processed. In addition, the data subject has the right to have their personal data rectified, to have its processing restricted, to object to the processing and to transmit the personal data from one system to another. In addition, the data subject has the right to lodge a complaint to the supervisory authority.