Search
- Fess search
Showing 141 to 160 of 223 entries.
-
Safeguards to supplement transfer tools The level of protection for personal data must be essentially equivalent to that guaranteed within the EU when transferring data to international organisations and third countries outside the European Econom...https://tietosuoja.fi/en/safeguards-to-supplement-transfer-tools
-
Frequently asked questions about personal identity code Is it permitted to ask for the personal identity code when a guest checks into a hotel? Yes. According to the Act on Accommodation and Food Service Activities (308/2006), an accommodation pro...https://tietosuoja.fi/en/faq-personal-identity-code
-
Supervision of codes of conduct The code of conduct must specify a mechanism for the effective monitoring of compliance with the code. Monitoring means ensuring that the controllers and processors committed to compliance with the code follow the p...https://tietosuoja.fi/en/supervision-of-codes-of-conduct
-
Know your rights The EU's General Data Protection Regulation sets down your rights when a company or organisation is processing your personal data. You have the right to obtain information on the processing of your personal data of access to your ...https://tietosuoja.fi/en/know-your-rights
-
Carrying out an impact assessment 1. Draw up a systematic description of the envisaged processing operations and the purposes of the processing Draw up a description of the nature, scope, context and purposes of the processing of personal data. Id...https://tietosuoja.fi/en/carrying-out-an-impact-assessment
-
Right to restriction of processing The data subject can request the controller to restrict the processing of personal data concerning him or her. The restriction of processing means that, in addition to storage, the personal data subject to the re...https://tietosuoja.fi/en/right-to-restriction-of-processing
-
Processing involving several EU countries If your organisation operates in more than one EU country, you need to find out which country’s supervisory authority you are meant to deal with. This data protection authority is called the lead superviso...https://tietosuoja.fi/en/processing-involving-several-eu-countries
-
Standard clauses adopted by the Commission Personal data can also be transferred out of the EU and EEA under the standard contractual clauses (SCC) adopted by the Commission. A transition period set for the adoption of the updated standard clauses...https://tietosuoja.fi/en/standard-clauses-adopted-by-the-commission
-
Automated decision-making and profiling What does profiling mean? Profiling means the automated processing of personal data for evaluating the personal aspects of an individual. In particular, profiling refers to the analysis or prediction of aspe...https://tietosuoja.fi/en/automated-decision-making-and-profiling
-
Accessibility statement of Tietosuoja.fi This accessibility statement applies to the website www.tietosuoja.fi and it was created on 22 September 2020. The statement has been updated on 20 January 2026. We are committed to providing accessibility ...https://tietosuoja.fi/en/accessibility-statement
-
Choosing the processing basis and ensuring its lawfulness in scientific research As a rule, the controller is free to choose the basis for processing that is most applicable to the implementation of the study. The processing of special categories ...https://tietosuoja.fi/en/choosing-the-processing-basis-and-ensuring-its-lawfulness
-
Transfers on the basis of an adequacy decision Personal data can be transferred out of the European Union and European Economic Area if the European Commission has issued a decision on an adequate level of protection for personal data (‘adequacy d...https://tietosuoja.fi/en/transfers-on-the-basis-of-an-adequacy-decision
-
Processors A processor is an individual or an organisation that processes personal data on behalf of a controller. Processors operate according to the controller’s instructions and under its supervision. The controller determines the purposes and ...https://tietosuoja.fi/en/processors
-
Frequently asked questions about the internet Is the controller entitled to publish personal data from its personal data file on its website? Personal data stored in a personal data file may only be published on the internet with the consent of th...https://tietosuoja.fi/en/faq-internet
-
Transfer bases for authorities and the public sector Authorities and public organisations can transfer personal data to international organisations or the public bodies of third countries based on a European Commission decision on the adequacy of ...https://tietosuoja.fi/en/transfer-bases-for-authorities-and-the-public-sector
-
News We completed the guidance on the alcohol testing of employees and processing of personal data in the workplace Type: News item Categories: Publication date: 6.8.2025 Keywords: Showing 1 - 1 / 1 Common topics What is personal data? Know your r...https://tietosuoja.fi/en/news
-
Frequently asked questions about banking Are banks permitted to copy my ID? Yes. Banks have a statutory obligation to know and identify their customers. Among other things, this means that the bank must verify the customer’s identity in a reliable...https://tietosuoja.fi/en/faq-banking
-
Frequently asked questions about camera surveillance EDPB guidelines on processing of personal data through video devices (pdf) Is camera surveillance processing of personal data? The operator of recording camera surveillance (e.g. a company or au...https://tietosuoja.fi/en/faq-camera-surveillance
-
Frequently asked questions about mobile location Why do telecommunications companies process location data? Thanks to communications networks, users are available wherever they are. In order to create a connection between the caller and recipient ...https://tietosuoja.fi/en/faq-mobile-location
-
15.2.2022 | The Office of the Data Protection Ombudsman will participate in a coordinated enforcement action of the European Data Protection Board along with 22 other supervisory authorities. The purpose of the action is to investigate use of cloud-based services in the public sector. The action of the EDPB was launched on 15 February.https://tietosuoja.fi/en/-/the-office-of-the-data-protection-ombudsman-launches-an-investigation-into-the-use-of-cloud-based-services-in-the-public-sector-as-a-part-of-a-coordinated-action-of-european-supervisory-authorities