This privacy notice contains information required by Articles 13 and 14 of the General Data Protection Regulation (2016/679) of the European Parliament and the Council, which must be provided to the data subject. This notice explains how we collect, use, disclose, and retain personal data at the Finnish Environment Institute (Syke).
Syke reserves the right to make technical changes to this privacy notice without prior notification to the data subjects.
Controller and Data Protection Officer
Finnish Environment Institute (Syke)
Latokartanonkaari 11
00790 Helsinki
Email: kirjaamo@syke.fi
Confidential email: https://securemail.ymparisto.fi
Contact persons of the controller:
Otto Osanen
otto.osanen@syke.fi
Data Protection Officer
Juha Ruotsalainen
tietosuojaSYKE@syke.fi
Basis for Processing / Legal Basis for Our Processing
We process your personal data to comply with the following legal obligation (GDPR Article 6(1)(c)): Act on the Administration, Supervision, and Inspection of the European Union Recovery and Resilience Facility, Chapter 2, Section 6.
Collected Personal Data and Purposes of Processing
The personal data collected includes the actual beneficiaries of the contractors:
First and last name
Date of birth
We use personal data for reporting purposes and for inspection tasks by the support authority.
No decisions based on automated decision-making or profiling are made based on the collected personal data.
Sources of Personal Data
Recipients of the personal data, in addition to those involved in reporting beneficiary data for Syke's RePower-Cest project, include personnel of the service provider of the State Treasury (RRP system), who also have access to personal data. The service provider is a data processor under GDPR and must follow the instructions provided by Syke for data processing.
Personal data is not transferred or disclosed outside the EU or EEA.
Protection of Personal Data
As the controller, the Finnish Environment Institute (Syke) has implemented the necessary technical and organizational measures and requires the same from its service providers.
Retention of Personal Data
Personal data is retained for the necessary duration to fulfill the purposes described in this notice. The data will be deleted immediately after the purpose ceases to exist. According to the archiving plan, the data will be deleted after 10 years.
Your Data Protection Rights Related to Personal Data Processing
We aim to provide a comprehensive overview of the use of personal data in connection with RePower-Cest reporting in this notice. If any aspect of our personal data processing remains unclear, you can ask further questions by contacting the persons mentioned under Controller and Data Protection Officer.
You have the following rights under GDPR:
You have the right to know the purposes and ways in which we process your personal data. We strive to provide a comprehensive overview of data processing in this notice. If any aspect of our personal data processing remains unclear, you can ask further questions by contacting the persons mentioned under Controller and Data Protection Officer.
If the personal data we process about you is incorrect, you can request us to correct inaccurate and incorrect data. If we correct data based on your request, we are obligated to notify, as far as possible, all those to whom the data has previously been disclosed. Additionally, you have the right to object to the processing of your data based on your specific personal situation at any time.
As a data subject, you also have the right to lodge a complaint with a supervisory authority.
You also have the right to lodge a complaint with the supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.
Contact details of the Office of the Data Protection Ombudsman:
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: PL 800, 00531 Helsinki
Email: tietosuoja(at)om.fi
Switchboard: 029 566 6700
Registry: 029 566 6768