Legal basis and purpose of processing
The Office of the Data Protection Ombudsman and TIEKE Finnish Information Society Development Centre process personal data in connection with the GDPR4CHLDRN project’s newsletter subscriptions based on the data subject’s consent (General Data Protection Regulation, Article 6(1)(a)).
The newsletter is published roughly every other month and contains information on events organised during the project as well as expert articles on children’s data protection and the processing of children’s personal data in hobby activities, among other things. The newsletter is emailed to those who have subscribed to it (opt-in). No other data than the email address is stored about the subscribers. The data is used exclusively for delivering the newsletter. Subscribers have the opportunity to cancel their subscription via a ‘delete from mailing list’ link included in each issue of the newsletter.
The newsletters are implemented with the Liana Technologies service. The service does not collect or store information on opening or clicking on the newsletter. Subscribers are not subjected to any monitoring, tracking or surveillance in connection with subscribing to or receiving the newsletter.
Disclosure and transfer of personal data
Liana Technologies acts as a processor, and the processing is governed by a contract in accordance with Article 28 of the General Data Protection Regulation.
The processing takes place within the EU/EEA. No personal data is transferred to third countries or international organisations.
Storage of personal data
The personal data will be stored as long as necessary for delivering the newsletter (until the subscription is cancelled or the newsletter service ceases). After that, the personal data will be erased without delay.
Your data protection rights related to the processing of personal data
Right to obtain information on the processing of personal data
- You have the right to know for what purposes and how we process your personal data.
- You are welcome to ask for further details about the processing at any time; contact details are provided at the end of this statement.
Right to withdraw consent
- When your personal data is being processed based on your consent, you have the right to withdraw that consent at any time.
- Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal.
Right of access to data
- You have the right to know whether we are processing your personal data. If we are, you have the right to obtain a copy of that data, unless we have legal grounds for refusing to comply with your request.
Right to rectification
- If we are processing inaccurate personal concerning you, you can ask us to rectify the data.
- If we rectify data due to your request, we have an obligation to notify all parties to whom we have disclosed the data of the rectification where possible.
Right to erasure
- When we no longer need your data for the purposes for which it was originally collected, you withdraw your consent and there is no other lawful basis for the processing of your data, or you consider that your data has been processed unlawfully, you have the right to ask us to erase your personal data.
- If we erase your personal data based on your request, we have an obligation to inform everyone to whom we have disclosed your data of the erasure where possible.
Right to restriction of processing
- If you consider that we are processing inaccurate personal data concerning you or that the processing is unlawful, or you have objected to the processing of your data, you can request that we restrict the processing of your data.
- In such cases, we may only process the data with your consent,
- if we need the data for the establishment, exercise or defence of legal claims,
- for reasons of public interest, or
- for the protection of the rights of another person.
- If we restrict the processing of personal data based on your request, we have an obligation to inform everyone to whom we have disclosed your data of the restriction where possible.
The Office of the Data Protection Ombudsman and TIEKE do not make decisions based on automated processing or carry out profiling based on the personal data processed by them.
You can make requests concerning your data protection rights by contacting the Office of the Data Protection Ombudsman of TIEKE by email or post, using the contact details provided below.
If you consider that your personal data has been processed unlawfully, you have the right to file a complaint to the Data Protection Ombudsman.
The lawfulness of the Office of the Data Protection Ombudsman’s activities is supervised by the supreme overseers of legality, that is, the Parliamentary Ombudsman and the Chancellor of Justice.
Controllers
The Office of the Data Protection Ombudsman and TIEKE Finnish Information Society Development Centre act as joint controllers .
Office of the Data Protection Ombudsman
PL 800, 00531 Helsinki, Finland
tietosuoja(at)om.fi
+358 29 566 6700
TIEKE Finnish Information Society Development Centre
Työpajankatu 13, 2nd floor
00580 Helsinki, Finland
tieke(at)tieke.fi
+358 9 4763 0400
The contents of this publication only reflect the views of its authors, who take sole responsibility for them. The European Union or CERV Programme are not responsible for the contents of this publication.
