Search
- Fess search
Showing 121 to 140 of 280 entries.
-
Everyone has the right to their own personal datahttps://tietosuoja.fi/en/private-persons
-
Annual report 2025 The annual report describes the year's most important data protection events, supervision measures in different sectors and presents the key figures for the Office's operations. Annual report of the Office of the Data Protection...https://tietosuoja.fi/en/annual-report-2025
-
Accountability in scientific research The controller must be prepared to demonstrate that data protection regulations have been taken into account in the study. Researchers must document the implementation of data-protection principles and other p...https://tietosuoja.fi/en/accountability-in-scientific-research
-
Purpose limitation The purpose of processing personal data must be planned and defined clearly before the start of processing. Personal data may only be collected and processed for a specific and lawful purpose. The data may not be processed in a ...https://tietosuoja.fi/en/purpose-limitation
-
Website cookies Cookies are small text files that browsers save on visitors’ devices. Cookies are used to keep the language selection of a user when they navigate between pages, for example. The tietosuoja.fi website uses cookies that are essentia...https://tietosuoja.fi/en/cookies
-
Binding corporate rules Binding Corporate Rules (BCR) refer to common binding rules on the transfer of personal data to third countries within companies in the same group of undertakings or group of enterprises engaged in a joint economic activity...https://tietosuoja.fi/en/binding-corporate-rules
-
Frequently asked questions about phone calls Are individuals allowed to record their own telephone conversations? Citizens have the right to record telephone calls in which they are the caller or receiver. Finland’s Constitution gives the right to...https://tietosuoja.fi/en/faq-phone-calls
-
Submitting job applications Processing of personal data related to the job application process We publish information on open positions in the Valtiolle.fi service, which is the primary channel for submitting job applications. Through the Valtioll...https://tietosuoja.fi/en/submitting-job-applications
-
Derogations for specific situations Article 49 of the General Data Protection Regulation provides for derogations for specific situations. They are a last-resort basis for data transfer, only applicable in exceptional cases . The transfer of data ...https://tietosuoja.fi/en/derogations-for-specific-situations
-
Right to object In certain situations, the data subject has the right to object to the processing of his or her personal data, that is, request the controller not to process it at all. If the data is processed for the performance of a task carried...https://tietosuoja.fi/en/right-to-object
-
Controller's legitimate interests The processing of personal data can sometimes be justified due to the legitimate interests of the controller or a third party. The use of legitimate interests as a basis for processing requires particularly carefu...https://tietosuoja.fi/en/controller-s-legitimate-interests
-
Frequently asked questions about credit information When is a payment default entry made in the credit information register? You can get a payment default entry in approximately two months from the payment's due date at the earliest. A payment def...https://tietosuoja.fi/en/faq-credit-information
-
Confidentiality and security The processing of personal data must be confidential and secure. The controller is required to assess the potential risks, the level of the organisation's data protection and data security guidelines, and the technical...https://tietosuoja.fi/en/confidentiality-and-security
-
30.4.2021 | The Office of the Data Protection Ombudsman's sanctions board imposed an administrative fine on ParkkiPate Oy on 21 April for processing personal data in violation of data protection legislation. The violations concerned a failure to realise the rights of the data subject, shortcomings in limiting the storage period of data, and practices related to identifying data subjects.https://tietosuoja.fi/en/-/administrative-fine-imposed-on-company-for-data-protection-violations-connected-to-parking-control-fees
-
Right to erasure In certain cases, the data subject has the right to have the controller erase data concerning him or her without undue delay. This right is also known as the right to be forgotten. The controller is obligated to erase the personal...https://tietosuoja.fi/en/right-to-erasure
-
Lawfulness, fairness and transparency The processing of personal data shall be lawful, fair and transparent. Lawfulness The processing of personal data must be done in compliance with the EU’s General Data Protection Regulation and other legislati...https://tietosuoja.fi/en/lawfulness-fairness-and-transparency
-
Storage limitation Personal data may only be stored for as long as necessary for the purposes of processing. The controller must plan and be able to justify the storage time of the personal data. The storage times of personal data must also be doc...https://tietosuoja.fi/en/storage-limitation
-
Safeguards to supplement transfer tools The level of protection for personal data must be essentially equivalent to that guaranteed within the EU when transferring data to international organisations and third countries outside the European Econom...https://tietosuoja.fi/en/safeguards-to-supplement-transfer-tools
-
Right of access Data subjects have the right to receive confirmation from the controller on whether or not the controller is processing personal data that concerns them. The data subjects thus have the opportunity to evaluate and ensure the legali...https://tietosuoja.fi/en/right-of-access
-
Controller's record of processing activities The obligation to draw up a record of processing activities applies to all organisations with more than 250 employees. Smaller organisations are also required to draw up the record if the personal data ...https://tietosuoja.fi/en/controller-s-record-of-processing-activities