Privacy statement of Suomi.fi for Service Developers website
The Suomi.fi for Service Developers website brings together national solutions, good practices and clear guidelines for digital service designers.
The Suomi.fi for Service Developers website uses the Suomi.fi Quality Tools customer feedback form: Privacy statement for the customer feedback toolOpens in a new window.
1 Controller and contact persons
Digital and Population Data Services Agency
Lintulahdenkuja 2, 00530 Helsinki
PO Box 123, 00531 Helsinki, Finland
Telephone (switchboard) +358 295 536 000
Email kirjaamo(at)dvv.fi
Contact persons in register-related matters
Terhi Tuokkola, Chief Specialist
Lintulahdenkuja 2, 00530 Helsinki
Telephone (switchboard) +358 295 536 000
Email kirjaamo(at)dvv.fi
2 Data protection officer
Telephone (switchboard) +358 295 536 000
E-mail tietosuoja@dvv.fi
3 Purpose and legal basis for processing personal data
The register is the cache memory and event log of the Suomi.fi for Service Developers website administered by the Digital and Population Data Services Agency.
The following personal data are processed in accordance with sections 3 and 4 of the Act on joint Central Government e-Service Support Services (571/2016), section 3 of the Act on the Digital and Population Data Services Agency (304/2019), and section 17 of the Act on Information Management in Public Administration, in connection with the statutory tasks of the Digital and Population Data Services Agency:
- Data saved in the cache memory of the Suomi.fi for Service Developers web-site.
- The event log file of the Suomi.fi for Service Developers website means the register to which log data on the website use and events is saved.
The legal basis for monitoring the use of the website and the related statistics, analytics and reporting is the performance of a task carried out in the public interest.
The purpose of processing personal data is to facilitate the production and development of the Suomi.fi for Service Developers website well as assuring functionality. Personal data are processed to identify the users of the Suomi.fi for Service Developers website, to protect the personal data processed in the service as well as to guarantee infor-mation security and resolve any errors. The personal data kept in register is also used to demonstrate that data processing in the service has been correct and to investigate potential abuse.
Statistics are collected on the use of the Suomi.fi for Service Developers website for all users. The data collected on the use of the Suomi.fi for Service Developers website is used to determine the extent to which the website is used, to track expenses and their distribution, and for statistical purposes. Data are also used to assess the reliability, us-er-friendliness and quality of the website. When the data are used for statistical purpos-es, the data will be published in such a way that individual persons cannot be identified. For more information about the user data and cookies collected from the Suomi.fi for Service Developers website, go to Cookie information.
Valtori, which provides the Digital and Population Data Services Agency with IT infra-structure services, and its subcontractors manage the IT infrastructure of the Suomi.fi service registers.
4 Personal data retention period
The data entered in the event log file of the Suomi.fi for Service Developers website are retained for five (5) years.
The Digital and Population Data Services Agency has determined that with regard to event data, a five-year (5) retention period is necessary when taking into consideration the most common limitation periods for offences related to the processing of personal data and the limitation period for offences in office, which is five years.
5 Personal data to be processed
The following personal data are processed on users:
Data saved in cache memory:
- Data required for the use of the website (such as information on website contents) to ensure a smooth user experience
Data saved in the event log file:
- IP address
- Event data time stamps
When data are used for statistical purposes, collected data (IP address, visited pages, etc.) are processed in statistical format, from which individual users cannot be identi-fied. When compiling statistics, for example, IP addresses have been processed so that individual IP addresses cannot be identified. For more information about the user data and cookies collected from the Suomi.fi for Service Developers website, go to Cookie information.
6 Standard sources of data
The data sources of the register are the service transactions that take place on the website.
7 Disclosure of data
The controller may, unless otherwise provided in sections 11 and 12 of the Act on the Openness of Government Activities, disclose data on the use of the website entered in the register:
- to a person whose website use has been recorded.
- for other identified purpose where the person on whose website use information has been recorded has given their express consent to the disclosure.
Data can also be disclosed as statistics and in other ways, however, in such a manner that personal data is not disclosed.
Data can also be disclosed on other legal grounds.
8 Transferring data outside the EU or the EEA
No personal data is transferred outside the EU or the EEA or to international organisa-tions.
9 Automated decision-making
No personal data is used for automated decision-making.
10 Data subject’s rights
Right of access
You have the right to access your personal data and check its content.
For other information, you can submit a request to access to information to the Digital and Population Data Services Agency. Be prepared to provide proof of identity.
The controller must respond to the request by the data subject without delay, and, as a rule, access will be given within a month of the time the request was registered. How-ever, the aforementioned one-month timeline can be extended by two months at the most if the correction requested by the data subject so requires. The controller will no-tify the data subject of any possible extension to the correction period and the reasons for the extension.
Right to rectification
The Suomi.fi for Service Developers website stores only the IP address of the user, which, as a rule, is static data that cannot be rectified.
Limitations to the rights of the data subject
The processing of personal data is based on compliance with a statutory obligation. The implementation of the data subject's rights requires the identification of the person providing the feedback. The Digital and Population Data Services Agency cannot identify website users from the data they collect unless they are provided with addi-tional information on the user.
Most of the services provided by the Digital and Population Data Services Agency are based on compliance with the controller’s statutory obligation or on the performance of a duty of public interest or the exercise of public authority. In such cases, you do not have any right to demand that your personal data should be deleted or transferred to another system. Moreover, as a rule, you do not have any right to object to the pro-cessing of your personal data.
Right to submit a complaint to the supervisory authority
If you think that your personal data is processed unlawfully, you can submit a com-plaint to the Office of the Data Protection Ombudsman.
Office of the Data Protection Ombudsman
Street address Lintulahdenkuja 4, 00530 Helsinki, Finland
Postal address PO Box 800, 00531 Helsinki, Finland
Email tietosuoja(at)om.fi
Switchboard +358 29 566 6700
Registry +358 29 566 6768
For more information on submitting a complaint, see the website of the Office of the Data Protection Ombudsman at https://tietosuoja.fi/.
11 Other information
The privacy statement of the Suomi.fi for Service Developers website can be viewed on the service website and at the registry of the Digital and Population Data Services Agency.
Read more on general information on data protection at the Digital and Population Da-ta Services Agency at https://dvv.fi/en/data-protection.