{"id":4926,"date":"2018-12-07T14:27:22","date_gmt":"2018-12-07T12:27:22","guid":{"rendered":"https:\/\/tampereentilapalvelut.fi\/?page_id=4926"},"modified":"2020-09-23T08:23:39","modified_gmt":"2020-09-23T05:23:39","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/tampereentilapalvelut.fi\/en\/privacy-policy-2\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<section class=\"wpb-content-wrapper\"><p>[vc_row el_class=&#8221;bmargin&#8221;][vc_column width=&#8221;5\/6&#8243; offset=&#8221;vc_col-lg-8 vc_col-md-8 vc_col-xs-12&#8243;][vc_column_text]<\/p>\n<h1>Tilapalvelut\u2019s Privacy Policy<\/h1>\n<h3>EU General Data Protection Regulation (GDPR)<\/h3>\n<p>The data protection regulation shall apply from 25th May 2018 onwards. This has led to the processing regulations of personal data becoming more detailed and stricter. The requirements of the data protection regulation must be taken in to account in all processing of personal data: in processes, data systems and acquisitions.<\/p>\n<p>The aim of the new legislation is to improve the protection of personal data and the rights of data subjects. The appropriate processing of personal data increases transparency and strengthens the data subjects\u2019 rights to monitor the processing of their personal data.<\/p>\n<p>Various personal data is processed in Tilapalvelut Oy\u2019s operations, such as in connection with staff administration, finance administration and camera surveillance. For this reason, Tilapalvelut Oy is obliged to prove that data protection matters have been sufficiently considered in its operations. In other words, we must ensure that personal data is processed in a legal, appropriate, and in terms of the data subject, in a transparent manner. In addition to this, personal data must be processed in a way that ensures the appropriate security of the personal data, including protection from unauthorised and illegal processing, as well as accidental losses.<br \/>\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;5\/6&#8243;][vc_column_text]<\/p>\n<h2>Tilapalvelut\u2019s privacy policies<\/h2>\n<p>[\/vc_column_text][vc_column_text]<style>#sp-ea-6117 .spcollapsing { height: 0; overflow: hidden; transition-property: height;transition-duration: 500ms;}#sp-ea-6117.sp-easy-accordion>.sp-ea-single {margin-bottom: 10px; border: 1px solid #e2e2e2; }#sp-ea-6117.sp-easy-accordion>.sp-ea-single>.ea-header a {color: #444;}#sp-ea-6117.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body {background: #fff; color: #444;}#sp-ea-6117.sp-easy-accordion>.sp-ea-single {background: #eee;}#sp-ea-6117.sp-easy-accordion>.sp-ea-single>.ea-header a .ea-expand-icon { float: left; color: #444;font-size: 16px;}<\/style><div id=\"sp_easy_accordion-1781440773\"><div id=\"sp-ea-6117\" class=\"sp-ea-one sp-easy-accordion\" data-ea-active=\"ea-click\" data-ea-mode=\"vertical\" data-preloader=\"\" data-scroll-active-item=\"\" data-offset-to-scroll=\"0\"><div class=\"ea-card ea-expand sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61170\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61170\" aria-controls=\"collapse61170\" href=\"#\" aria-expanded=\"true\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-minus\"><\/i> Tilapalvelut as a data controller<\/a><\/h3><div class=\"sp-collapse spcollapse collapsed show\" id=\"collapse61170\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61170\"> <div class=\"ea-body\"><p>The law requires Tilapalvelut, as the data controller, to prepare a privacy policy for each person register. The policy is used to, for example, inform customers about why their data is collected and what the data is used for.<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61171\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61171\" aria-controls=\"collapse61171\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Camera surveillance\u2019s person register<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61171\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61171\"> <div class=\"ea-body\"><p><strong>Person register\u2019s data<\/strong><\/p><h3><strong>1. Name of the register<\/strong><\/h3><p>Tampere Tilapalvelut Oy\u2019s camera surveillance person register<\/p><h3>2. Purpose for processing personal data<\/h3><ul><li>Access control<\/li><li>Ensuring person safety<\/li><li>Prevention of situations that risk safety<\/li><li>Investigation of situation that has caused a risk to general safety<\/li><li>Investigation of situation that has been caused by an occupational accident or a risk to occupational safety<\/li><li>Protection of assets<\/li><li>Prevention of misuse<\/li><li>Investigation of misuse<\/li><li>Ensuring the benefits and rights of employees<\/li><\/ul><p>According to Section 16 Subsection 1 of the Act on the Protection of Privacy in Working Life (759\/2004), the employer may implement surveillance that is based on the use of a technical device, which conveys continuous imaging or records image (camera surveillance) in premises that are in use, for the purpose of ensuring the personal safety of employees and other people in the premises, for the protection of property or to supervise the appropriate completion of production processes, as well as to prevent and investigate and situations that have placed property or a production process at risk.<\/p><p>In addition, the employer has the right to use the register\u2019s data to prove the reason for terminating an employment in situations referred to in Section 17 Subsection 2:1-3 of the Act on the Protection of Privacy in Working Life, for resolving or proving any disturbance or harassment referred to in the Act on Equality between Men and Women (609\/1986) or harassment and inappropriate behaviour referred to in the Occupational Safety and Health Act (738\/2002), as well as to resolve any occupational accident or other situation that has caused danger or threat as referred to in the Occupational Safety and Health Act.<\/p><h3>3. Data controller<\/h3><p>Tampere Tilapalvelut Oy, business ID 2863261-6<\/p><h3>4. Data Protection Officer<\/h3><p>Data Protection Officer Antti R\u00e4s\u00e4nen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>Phone 040 806 3145<\/p><h3>5. Register\u2019s contact person and contact details<\/h3><p>Maintenance Engineer Matti Pulkkinen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 0500 806 053<\/p><h3>6.\u00a0Processing of register\u2019s personal data has been outsourced with a service agreement<\/h3><ul><li>Yes<\/li><\/ul><p>More information about outsourced processing:<\/p><p>There are mandates involved with the maintenance duties and expert application support of the register\u2019s electronic data systems and their servers.<\/p><h3>7.\u00a0Legality of processing personal data<\/h3><p><strong>A)<\/strong><\/p><p>Legitimate interest. The data controller\u2019s legitimate interest is based on the data controller\u2019s right to protect and monitor the data controller\u2019s property as well as ensure the safety of the data controller\u2019s properties and facilities. Camera surveillance has been organised in such a way that it does not violate the privacy protection of data subjects more than is necessary on the basis of the intended purposes defined by the data controller. The rights and freedoms of the data subjects do not supersede the data controller\u2019s legitimate interest.<\/p><p><strong>B)<\/strong><\/p><p>The register is a public authority register<\/p><p><strong>C)<\/strong><\/p><p>The register\u2019s data is used for automated individual decisions, including profiling<\/p><ul><li>No<\/li><\/ul><h2>Person register\u2019s personal data, data sources and disclosure of data<\/h2><h3>8. Personal data in the register<\/h3><ul><li>Image and audio material recorded by cameras that are part of the surveillance system, which has been created in premises and yard areas that are within the scope of technical camera surveillance, including the time of recording and the place of recording.<\/li><li>Surveillance areas are, in principle, indicated with visible \u201cRecording video surveillance\u201d signs and\/or stickers.<\/li><li>Reports created on the basis of material<\/li><\/ul><p><strong>Publicity and confidentiality of information:<\/strong><\/p><p>Recorded personal data is confidential<\/p><p><strong>Associating data with other person registers:<\/strong><\/p><p>Where necessary, data is combined with register data concerning access control and safety e.g. in criminal investigations (e.g. electronic door openings with access rights)<\/p><h3>9.\u00a0Maintenance systems of register data (system\u2019s\/application\u2019s name(s))<\/h3><p>Video recorders and computer hardware<\/p><h3>10. The register includes manual (paper) material<\/h3><p>Yes<\/p><h3>11.\u00a0Data sources of the register<\/h3><p>Image and audio material conveyed by cameras in the recording surveillance system<\/p><h3>12.\u00a0Principles concerning the protection of data<\/h3><p>The storage, archiving, deletion and other processing of data is controlled with archive formation plans and data security and data protection guidelines. Data that has been electronically stored in the register has been protected in such a way that only authorised persons have access to such data. Each user agrees to the terms set out on the Use and confidentiality of data and data systems, when gaining access rights.<\/p><h3>13.\u00a0Disclosure of personal data in the register<\/h3><p>Regular disclosures of data<\/p><ul><li>No<\/li><\/ul><p><strong>Basis for the disclosure of data<\/strong><\/p><p>In suspected criminal situations, data may be disclosed to police authorities, if they have a justified reason to gain access to the data.<\/p><p>Data can be disclosed and processed between the City of Tampere\u2019s own organisations for the purpose of promoting and implementing tasks carried out between business organisations and the City of Tampere\u2019s organisations.<\/p><h3>14.\u00a0Transfer of the register\u2019s data to a third country or international organisation (outside the EU or European Economic Area (EEA))<\/h3><p>No<\/p><h3>15.\u00a0Personal data\u2019s retention periods \/ Criteria determining the retention period<\/h3><p>Recordings are stored carefully in such a way that they are only available to authorised people. The retention period is on average 14 days. If a report concerning damages, a crime or other matter requiring investigation is made during the retention period, the material can be retained to this extent for the period necessary for carrying out investigations. Recording equipment and recordings are stored in monitored facilities and they can only be processed by authorised people.<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61172\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61172\" aria-controls=\"collapse61172\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Register of contracts<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61172\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61172\"> <div class=\"ea-body\"><p><strong>Person register\u2019s data<\/strong><\/p><h3>1.\u00a0Name of the register<\/h3><p>Tampere Tilapalvelut Oy\u2019s register of contracts<\/p><h3>2.\u00a0Purpose for processing personal data<\/h3><ul><li>Contract management and monitoring<\/li><li>Maintenance of customer accounts<\/li><li>Making orders<\/li><li>Validity and termination of agreements<\/li><\/ul><p>Tilapalvelut Oy\u2019s contracts are stored in the register of contracts. The register allows contract documents to be available and utilisable in the company\u2019s daily internal activities. The data subjects of the register are people, who have a proper connection to the data controller as representatives of contractual partners.<\/p><p>Contracts are available to the company\u2019s employees, who need the information to carry out their work duties. In addition, the framework agreements\u2019 data is available to the employees of the Properties, premises and housing policy service group.<\/p><h3>3.\u00a0Data controller<\/h3><p>Tampere Tilapalvelut Oy, business ID 2863261-6<\/p><h3>4.\u00a0Person in charge of register, job title and contact details<\/h3><p>Administration Manager Mauri Heikkinen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 040 773 4505<\/p><h3>5.\u00a0Register\u2019s contact person and contact details<\/h3><p>Designer Anna Koivum\u00e4ki<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 040 660 1941<\/p><h3>6.\u00a0Processing of register\u2019s personal data has been outsourced with a service agreement<\/h3><p>No<\/p><h3>7.\u00a0 Legality of processing personal data<\/h3><p><strong>A)<\/strong><\/p><ul><li>Enforcement of a contract<\/li><\/ul><p><strong>B)<\/strong><\/p><p>The register is a public authority register<\/p><ul><li>No<\/li><\/ul><p>The register is public administration\u2019s voluntary tasks\u2019 register<\/p><ul><li>No<\/li><\/ul><p><strong>C)<\/strong><\/p><p>The register\u2019s data is used for automated individual decisions, including profiling<\/p><ul><li>No<\/li><\/ul><p>\u00a0<\/p><h2>Person register\u2019s personal data, data sources and disclosure of data<\/h2><h3>8. Personal data in the register<\/h3><ul><li>Contact details of contract contact persons (name, email, phone number, job title)<\/li><li>Information of the employees of a contractual partner (photo, date of birth, education, work experience, qualifications)<\/li><\/ul><h3>9. Maintenance systems of register data (system\u2019s\/application\u2019s name(s))<\/h3><ul><li>Intranet (Tilapalvelut Oy)<\/li><li>Microsoft Office<\/li><li>Internal network\u2019s protected\/restricted network hard drive<\/li><li>Virta offices<\/li><\/ul><h3>10. The register includes manual (paper) material<\/h3><p>Yes, Tilapalvelut Oy\u2019s paper archive<\/p><h3>11. Data sources of the register<\/h3><p>Contractual partner<\/p><h3>12. Principles concerning the protection of data<\/h3><p>The storage, archiving, deletion and other processing of data is controlled with archiving guidelines and data security and data protection guidelines. Data that has been electronically stored in the register has been protected in such a way that only authorised persons have access to such data. Each user agrees to the terms set out on the Use and confidentiality of data and data systems, when gaining access rights.<\/p><p>The data of the register of contracts is protected by means of user rights. The manual material is in locked archive premises.<\/p><h3>13. Disclosure of personal data in the register<\/h3><p>Regular disclosures of data<\/p><ul><li>No<\/li><\/ul><h3>14. Transfer of the register\u2019s data to a third country or international organisation (outside the EU or European Economic Area (EEA))<\/h3><p>No<\/p><h3>15. Personal data\u2019s retention periods \/ Criteria determining the retention period<\/h3><p>The retention period of contracts has been defined in Tilapalvelut\u2019s archive formation plan.<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61173\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61173\" aria-controls=\"collapse61173\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Finance administration\u2019s person register<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61173\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61173\"> <div class=\"ea-body\"><p><strong>Person register\u2019s data<\/strong><\/p><h3>1. Name of the register<\/h3><p>Tampere Tilapalvelut Oy\u2019s finance administration\u2019s person register<\/p><h3>2. Purpose for processing personal data<\/h3><p>The data controller (Tampere Tilapalvelut Oy) collects, stores, organises, analyses, retains, edits, searches and disclosed personal data for the purposes of carrying out sales invoicing and purchase invoices.<\/p><p>The data subjects of the register are people, who have a proper connection to the data controller, either as a customer or a contractual partner. Registered personal data may also be based on the data controller\u2019s customer mandate or for the implementation of a service performance defined by law.<\/p><p>The data controller uses data in the register to carry out tasks concerning the data subjects that it is subject to in accordance with laws (Art 6 Section 1 c), separate decisions, orders or on the basis of a need concerning the fulfilment of a contract (Art 6 Section 1 b).<\/p><h3>3. Data controller<\/h3><p>Tampere Tilapalvelut Oy, business ID 2863261-6<\/p><h3>4. Person in charge of register, job title and contact details<\/h3><p>Financial Manager Jani Knuuttila<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 040 5423 136<\/p><h3>5. Register\u2019s contact person and contact details<\/h3><p>ICT Officer Antti R\u00e4s\u00e4nen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 040 806 3145<\/p><h3>6. Processing of register\u2019s personal data has been outsourced with a service agreement<\/h3><ul><li>Yes<\/li><\/ul><p>At the company\u2019s mandate, third-party service providers shall process personal data, for example, in connection with opening data in the SAP system and in connection with RATI notifications (obligation to inform concerning construction). In addition, there are mandates involved with the maintenance duties and application expert support of the register\u2019s electronic data systems and their servers.<\/p><h3>7. Legality of processing personal data<\/h3><p><strong>A)<\/strong><\/p><p>Legal obligation<\/p><p>Legislation guiding operations:<\/p><ul><li>Archives Act (831\/1994)<\/li><li>Value Added Tax Act (1501\/1993)<\/li><li>EU General Data Protection Regulation (2016\/679)<\/li><li>Accounting Act (1336\/1997)<\/li><li>Act on Tax Assessment Procedure (1558\/1995)<\/li><li>Act on Debt Collection (513\/1999)<\/li><li>Act on the Status and Rights of Social Welfare Clients (812\/2000)<\/li><li>Data Protection Act (added, when the law is approved by the Parliament).<\/li><\/ul><p>Enforcement of a contract<\/p><p><strong>B)<\/strong><\/p><p>The register is a public authority register<\/p><ul><li>No<\/li><\/ul><p>The register is public administration\u2019s voluntary tasks\u2019 register<\/p><ul><li>No<\/li><\/ul><p><strong>C)<\/strong><\/p><p>The register\u2019s data is used for automated individual decisions, including profiling<\/p><ul><li>No<\/li><\/ul><p>\u00a0<\/p><h2>Person register\u2019s personal data, data sources and disclosure of data<\/h2><h3>8. Personal data in the register<\/h3><ul><li>Tampere Tilapalvelut Oy\u2019s customers and contractual partners: Name, phone number, address details.<\/li><li>Personal data received by Tampere Tilapalvelut Oy and personal data based on mandates of the City of Tampere (Elderly people\u2019s services and Disabled services) for the implementation and invoicing of service performances: Name and address details.<\/li><\/ul><h3>9. Maintenance systems of register data (system\u2019s\/application\u2019s name(s))<\/h3><ul><li>SAP system (Systeme, Anwendungen und Produkte in der Datenverarbeitung Aktiengesellschaft).<\/li><li>Internal network\u2019s protected\/restricted network hard drive.<\/li><li>Virta offices.<\/li><\/ul><h3>10. The register includes manual (paper) material<\/h3><p>Yes, Tilapalvelut Oy\u2019s paper archive.<\/p><h3>11. Data sources of the register<\/h3><ul><li>Customers<\/li><li>Contractual partners and clients<\/li><li>Business and organisation data system<\/li><li>Tilaajavastuu online service<\/li><\/ul><h3>12. Principles concerning the protection of data<\/h3><p>The storage, archiving, deletion and other processing of data is controlled with archiving guidelines and data security and data protection guidelines. Data that has been electronically stored in the register has been protected in such a way that only authorised persons have access to such data. Each user agrees to the terms set out on the Use and confidentiality of data and data systems, when gaining access rights. There is access control and\/or locked doors in place in case of manual archives and operating units. Documents are stored in monitored facilities and\/or locked cabinets<\/p><h3>13.\u00a0Disclosure of personal data in the register<\/h3><p>Regular disclosures of data<\/p><ul><li>Yes<\/li><\/ul><p>The data controller shall further disclose necessary personal data to the City of Tampere (Elderly people\u2019s services and Disabled services) which it has received for the implementation of assigned mandates (such as the name and address details of the subject of the mandate) in connection with sales invoices. The transfer of data is therefore a case of further disclosing to a data source, who the data controller has received the personal data from.<\/p><h3>14. Transfer of the register\u2019s data to a third country or international organisation (outside the EU or European Economic Area (EEA))<\/h3><p>No<\/p><h3>15. Personal data\u2019s retention periods \/ Criteria determining the retention period<\/h3><p>The data controller shall not store personal data for longer than allowed by law, and only for the duration necessary for offering the data controller\u2019s services and for implementing the obligations set out by legislation.<\/p><p>According to Section 2 Subsection 10.1 of the Accounting Act, the financial statements, annual report, accounting books and the list of accounting books and materials must be stored for at least 10 years after the end of the financial year in order to meet the requirements set out in Section 6,7 and 9 of the second chapter. In addition, according to Section 2 Subsection 10.2 of the Accounting Act, the receipts for the financial year, correspondence concerning business transactions as well as accounting books other than those referred to in Subsection 1 shall be stored for at least six years from the end of the year during which the financial year has ended, in such a way that the requirements of Section 6, 7 and 9 are fulfilled. According to the Value Added Tax Act (1501\/1993), any receipts concerning property investments must be retained for 13 years from the end of the calendar year that ends, when the review period referred to in the Value Added Tax Act begins (209 q \u00a7).<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61174\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61174\" aria-controls=\"collapse61174\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Staff administration\u2019s person register<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61174\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61174\"> <div class=\"ea-body\"><p><strong>Person register\u2019s data<\/strong><\/p><h3>1. Name of the register<\/h3><p>Tampere Tilapalvelut Oy\u2019s staff administration\u2019s person register<\/p><h3>2. Purpose for processing personal data<\/h3><p>Management of staff administration and service relationship matters.<\/p><p>The data subjects of the register are people, who have an appropriate connection with the data controller either as an employee, a former employee, a person working on a mandate or a person who has worked on a mandate, a jobseeker, a student, a trainee or as a person who belongs or has belonged to the proscribed organs of the company.<\/p><p>The company uses the data in the register when carrying out such activities concerning the data subjects, which are its responsibility on the basis of laws, collective agreements and separate decisions and regulations. The register is also used for acquiring work force, supporting the internal access of staff, maintaining the staff\u2019s skill data, maintenance of vaccination data, as a tool for employees as well as a tool for staff management.<\/p><h3>3. Data controller<\/h3><p>Tampere Tilapalvelut Oy, business ID 2863261-6<\/p><h3>4. Data Protection Officer<\/h3><p>Data Protection Officer Antti R\u00e4s\u00e4nen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>Phone 040 806 3145<\/p><h3>5. Register\u2019s contact person and contact details<\/h3><p>Administration Manager Mauri Heikkinen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 040-773 4505<\/p><h3>6. Processing of register\u2019s personal data has been outsourced with a service agreement<\/h3><p>Yes<\/p><p>At the company\u2019s mandate, third-party service providers shall process personal data, for example, in connection with interviews and assessments concerning recruitments. In addition, there are mandates involved with the maintenance duties and application expert support of the register\u2019s electronic data systems and their servers.<\/p><h3>7. Legality of processing personal data<\/h3><p><strong>A)<\/strong><\/p><ul><li>Legitimate interest. The data controller\u2019s legitimate interest is based on the data controller\u2019s right to process employees\u2019 personal data otherwise than just to enforce an employee\u2019s employment contract, to the extent necessary while considering that the data controller may only process personal data that is directly necessary in terms of the employee\u2019s employment, which are related to the management of the employment parties\u2019 rights and obligations or the benefits offered to the employees by the employer, or due to the special nature of the work duties. The rights and freedoms of the data subjects do not supersede the data controller\u2019s legitimate interest.<\/li><li>Legal obligation. The processing of personal data is partly based on the data controller\u2019s legal obligations, such as the requirements set out by employment contracts legislation and legislation concerning occupational safety.<\/li><li>Consent<\/li><li>The data subject has the right at any time to withdraw consent concerning the processing of personal data without notifying the data controller.<\/li><li>Enforcement of a contract<\/li><li>The processing of personal data is necessary for enforcing and preparing an employment contract.<\/li><\/ul><p><strong>B)<\/strong><\/p><p>The register\u2019s data is used for automated individual decisions, including profiling<\/p><ul><li>No<\/li><\/ul><p>\u00a0<\/p><h2>Person register\u2019s personal data, data sources and disclosure of data<\/h2><h3>8. Personal data in the register<\/h3><p>Description of data subjects\u2019 groups and personal data groups:<\/p><p>Basic details, such as<\/p><ul><li>Name<\/li><li>Social security number<\/li><li>Home address and other contact details<\/li><li>Bank contact details and tax card<\/li><li>Contact details of next-of-kin<\/li><\/ul><p>Basic details related to employment, such as<\/p><ul><li>Start and end date of employment<\/li><li>Employee\u2019s photograph<\/li><li>Employment contract and its terms, such as monetary wage and other methods of remuneration and benefits<\/li><li>Content of job duties and title<\/li><li>Details concerning employment benefits<\/li><li>Details related to taxes and employer fees<\/li><li>Details related to insuring the employee<\/li><li>Details about trade union membership<\/li><li>Separate commitments and consents collected from the employee, such as the right to review emails or a separate non-disclosure agreement<\/li><li>Details concerning the end of employment and work certificates<\/li><\/ul><p>Details concerning the management of work duties, work development and the monitoring of working hours<\/p><ul><li>Working time accounts<\/li><li>Qualification details and details concerning training<\/li><li>Details concerning objectives and development discussions<\/li><li>Details about responsibility duties and memberships paid by the employer<\/li><li>Sick leaves, annual leaves, parental leaves and family care leaves as well as any other agreed absences (e.g. study and job alternation leaves)<\/li><li>Medical certificates or statements or other details concerning the employee\u2019s health status or work capacity, to the extent that legislation allows the processing of such data<\/li><\/ul><p>Details concerning work equipment, such as<\/p><ul><li>Licences issued to the employee and usernames and passwords to the employee\u2019s electronic systems and registers<\/li><li>Identification details of work equipment assigned to the employee, such as for computers and mobile devices, as well as access cards, keys and other equivalent equipment<\/li><\/ul><h3>9. Maintenance systems of register data (system\u2019s\/application\u2019s name(s))<\/h3><ul><li>DNA switch\/phonebook<\/li><li>Efecte<\/li><li>E-form<\/li><li>ESS7 (added)<\/li><li>ID card system<\/li><li>HEPE<\/li><li>City\u2019s website<\/li><li>Microsoft Office<\/li><li>Personec F and Personec F (ESS)<\/li><li>SAP Bw<\/li><li>SAP Hr<\/li><li>SAP portal<\/li><li>Selma<\/li><li>Sinfo<\/li><li>Timecon GMS<\/li><li>Titania<\/li><li>Trip &amp; Expence<\/li><li>Tunkki<\/li><li>Ty\u00f6turva Monitor<\/li><li>Internal network\u2019s protected\/restricted network hard drive<\/li><li>Virta offices<\/li><li>Windows (AD)<\/li><\/ul><h3>10.\u00a0The register includes manual (paper) material<\/h3><p>Yes<\/p><h3>11.\u00a0Data sources of the register<\/h3><ul><li>Data subject him-\/herself<\/li><li>Data subject\u2019s supervisor<\/li><li>Interviews related to job seeking<\/li><li>Staff administration\u2019s decisions<\/li><li>Police authority<\/li><li>Kela<\/li><li>Occupational healthcare and other providers of health care services<\/li><li>Keva<\/li><li>Insurance companies<\/li><li>Tax administration<\/li><li>Employment and Economic Development Centre<\/li><\/ul><p>Where necessary, data is combined with the City of Tampere\u2019s and Tilapalvelut Oy\u2019s camera surveillance register details and the company\u2019s and city\u2019s access control, working hours and meal allowance person register, as well as the details of the region of Tampere\u2019s user and non-disclosure register of data and data systems.<\/p><p>In addition, the information of the register is combined with the information of the user register of the data systems used by the data controller.<\/p><p>Data is also combined with the occupational health care information acquired by the company.<\/p><h3>12. Principles concerning the protection of data<\/h3><p>The storage, archiving, deletion and other processing of data is controlled with archive formation plans and data security and data protection guidelines. Data that has been electronically stored in the register has been protected in such a way that only authorised persons have access to such data. Each user agrees to the terms set out on the Use and confidentiality of data and data systems, when gaining access rights.<\/p><h3>13. Disclosure of personal data in the register<\/h3><p>Regular disclosures of data<\/p><ul><li>Yes<\/li><\/ul><p>Personal data is disclosed within the scope allowed and obliged by currently prevailing legislation. Data is regularly disclosed to Tax Administration, Kela, pension institutions, occupational health care providers and trade unions.<\/p><p>Data is transferred to service suppliers mentioned in Section 9 as well as equivalent operators, who process personal data on behalf of the data controller.<\/p><h3>14. Transfer of the register\u2019s data to a third country or international organisation (outside the EU or European Economic Area (EEA))<\/h3><p>No<\/p><h3>15. Personal data\u2019s retention periods \/ Criteria determining the retention period<\/h3><p>Storage is carried out in accordance with Tampere Tilapalvelut Oy\u2019s archive formation plan.<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61175\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61175\" aria-controls=\"collapse61175\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Project administration\u2019s person register<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61175\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61175\"> <div class=\"ea-body\"><p><strong>Person register\u2019s data<\/strong><\/p><h3>1. Name of the register<\/h3><p>Tampere Tilapalvelut Oy\u2019s project administration\u2019s person register<\/p><h3>2. Purpose for processing personal data<\/h3><p>Projects\u2019 contact detail lists, monitoring of project progress and conveyance of information, e.g. distribution of minutes, meeting invitations, etc.<\/p><p>The data subjects of the register are people, who have a proper connection to the data controller, either as a customer or a supplier.<\/p><h3>3. Data controller<\/h3><p>Tampere Tilapalvelut Oy, business ID 2863261-6<\/p><h3>4. Person in charge of register, job title and contact details<\/h3><p>Development Manager Jukka Kauppinen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 050 321 0355<\/p><h3>5. Register\u2019s contact person and contact details<\/h3><p>ICT Officer Antti R\u00e4s\u00e4nen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 040 806 3145<\/p><h3>6. Processing of register\u2019s personal data has been outsourced with a service agreement<\/h3><p>No<\/p><h3>7. Legality of processing personal data<\/h3><p><strong>A)<\/strong><\/p><ul><li>Enforcement of a contract<\/li><\/ul><p><strong>B)<\/strong><\/p><p>The register is a public authority register<\/p><ul><li>No<\/li><\/ul><p>The register is public administration\u2019s voluntary tasks\u2019 register<\/p><ul><li>No<\/li><\/ul><p><strong>C)<\/strong><\/p><p>The register\u2019s data is used for automated individual decisions, including profiling<\/p><ul><li>No<\/li><\/ul><p>\u00a0<\/p><h2>Person register\u2019s personal data, data sources and disclosure of data<\/h2><h3>8. Personal data in the register<\/h3><p>Description of data subjects\u2019 groups and personal data groups<\/p><ul><li>Contact details of people participating in the project (name, email, phone number, job title, employer)<\/li><\/ul><p>Maintenance systems of register data (system\u2019s\/application\u2019s name(s))<\/p><ul><li>Haahtela Pris (project bank)<\/li><li>Internal network\u2019s protected\/restricted network hard drive<\/li><li>Virta offices<\/li><\/ul><h3>9. The register includes manual (paper) material<\/h3><p>No<\/p><h3>10. Data sources of the register<\/h3><p>Data subjects themselves<\/p><h3>11. Principles concerning the protection of data<\/h3><p>The storage, archiving, deletion and other processing of data is controlled with archiving guidelines and data security and data protection guidelines. Data that has been electronically stored in the register has been protected in such a way that only authorised persons have access to such data. Each user agrees to the terms set out on the Use and confidentiality of data and data systems, when gaining access rights.<\/p><h3>12. Disclosure of personal data in the register<\/h3><p>Regular disclosures of data<\/p><ul><li>No<\/li><\/ul><h3>13. Transfer of the register\u2019s data to a third country or international organisation (outside the EU or European Economic Area (EEA))<\/h3><p>No<\/p><h3>14. Personal data\u2019s retention periods \/ Criteria determining the retention period<\/h3><p>Duration and warranty period of a project<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61176\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61176\" aria-controls=\"collapse61176\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Administration\u2019s privacy policy<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61176\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61176\"> <div class=\"ea-body\"><p><strong>Person register\u2019s data<\/strong><\/p><h3>1. Name of the register<\/h3><p>Tampere Tilapalvelut Oy\u2019s maintenance\u2019s person register<\/p><h3>2. Purpose for processing personal data<\/h3><p>Duties concerning the maintenance of properties and the arrangement of services. Easy availability of contact persons is ensured.<\/p><p>The data subjects of the register are people, who have a proper connection to the data controller, either as a service provider, client or user of the premises.<\/p><h3>3. Data controller<\/h3><p>Tampere Tilapalvelut Oy, business ID 2863261-6<\/p><h3>4. Person in charge of register, job title and contact details<\/h3><p>Maintenance Manager Marko Siirtola<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 050-3516437<\/p><h3>5. Register\u2019s contact person and contact details<\/h3><p>Maintenance Manager Marko Siirtola<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 050-3516437<\/p><h3>6. Processing of register\u2019s personal data has been outsourced with a service agreement<\/h3><p>Yes<\/p><h3>7. Legality of processing personal data<\/h3><p><strong>A)<\/strong><\/p><ul><li>Consent<\/li><li>Enforcement of a contract<\/li><\/ul><p><strong>B)<\/strong><\/p><p>The register is a public authority register<\/p><ul><li>No<\/li><\/ul><p>The register is public administration\u2019s voluntary tasks\u2019 register<\/p><ul><li>No<\/li><\/ul><p><strong>C)<\/strong><\/p><p>The register\u2019s data is used for automated individual decisions, including profiling<\/p><ul><li>No<\/li><\/ul><p>\u00a0<\/p><h2>Person register\u2019s personal data, data sources and disclosure of data<\/h2><h3>8. Personal data in the register<\/h3><p>Description of data subjects\u2019 groups and personal data groups:<\/p><ul><li>User details (job title, name, phone, mobile, email, language, RES publication key, PRIS publication key) (Property data)<\/li><li>Company register (private person) (Name, social security number, address details, phone, email and bank details) (Property data)<\/li><li>Company register (company) (Name, address details, phone and email) (Property data)<\/li><li>User register (Name, user group, address, email, phone, fax, social security number, profession, employer, salary base, language, e-billing address and additional information) (Property data)<\/li><li>Property managers and other staff of Tilapalvelut Oy\u2019s subjects (Name, phone) (RES)<\/li><li>Service request operators (customers)<\/li><li>Service providers and their contact details<\/li><\/ul><h3>9. Maintenance systems of register data (system\u2019s\/application\u2019s name(s))<\/h3><ul><li>Haahtela property data<\/li><li>Haahtela RES<\/li><li>Haahtela Pris<\/li><li>E-form<\/li><li>Internal network\u2019s protected\/restricted network hard drive<\/li><li>Virta offices<\/li><\/ul><h3>10. The register includes manual (paper) material<\/h3><p>Yes<\/p><h3>11.\u00a0Data sources of the register<\/h3><ul><li>Data subject him-\/herself<\/li><li>Data subject\u2019s supervisor<\/li><li>Users of premises<\/li><li>City of Tampere (Properties, premises and housing policy service group)<\/li><li>Tredu kiinteist\u00f6t Oy<\/li><li>Tampere Palvelukiinteist\u00f6t Oy<\/li><\/ul><h3>12. Principles concerning the protection of data<\/h3><p>The storage, archiving, deletion and other processing of data is controlled with archive formation plans and data security and data protection guidelines. Data that has been electronically stored in the register has been protected in such a way that only authorised persons have access to such data. Each user agrees to the terms set out on the Use and confidentiality of data and data systems, when gaining access rights.<\/p><h3>13. Disclosure of personal data in the register<\/h3><p>Regular disclosures of data<\/p><ul><li>No<\/li><\/ul><h3>14. Transfer of the register\u2019s data to a third country or international organisation (outside the EU or European Economic Area (EEA))<\/h3><p>No<\/p><h3>15 .Personal data\u2019s retention periods \/ Criteria determining the retention period<\/h3><p>Storage is implemented in accordance with the company\u2019s and the City of Tampere\u2019s archive formation plans to the extent that a service concerning the company\u2019s person registers is purchased by the City of Tampere.<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61177\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61177\" aria-controls=\"collapse61177\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Customer register<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61177\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61177\"> <div class=\"ea-body\"><p><strong>Customer register\u2019s data<\/strong><\/p><h3>1. Name of the register<\/h3><p>Tampere Tilapalvelut Oy\u2019s customer register<\/p><h3>2. Purpose for processing personal data<\/h3><p>Tilapalvelut\u2019s customers\u2019 data is stored in the register. Personal data is processed for purposes that concern the management, administration and development of the customer account, as well as for carrying out customer surveys.<\/p><p>The basis for processing personal data is the customer relationship between the data controller and the customer.<\/p><p>The data controller shall personally process personal data as well as utilise contractual partners operating on behalf of the data controller in the processing of personal data.<\/p><h3>3. Data controller<\/h3><p>Tampere Tilapalvelut Oy, business ID 2863261-6<\/p><h3>4. Data Protection Officer<\/h3><p>Data Protection Officer Antti R\u00e4s\u00e4nen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>Phone 040 806 3145<\/p><h3>5. Register\u2019s contact person and contact details<\/h3><p>Administration Manager Mauri Heikkinen<br \/>Tampere Tilapalvelut Oy<br \/>PO Box 1000, 33101 Tampere<br \/>phone 040-773 4505<\/p><h3>6. Processing of register\u2019s personal data has been outsourced with a service agreement<\/h3><p>Yes<\/p><p>At the company\u2019s mandate, third-party service providers shall process personal data in connection with customer satisfaction surveys.<\/p><h3>7. Legality of processing personal data<\/h3><p>Legitimate interest. Personal data is processed in the management of customer accounts.<\/p><p>\u00a0<\/p><h2>Person register\u2019s personal data, data sources and disclosure of data<\/h2><h3>8. Personal data in the register<\/h3><p>The following information is processed about the data subject:<\/p><p>Name, title, work email, work phone number, property name, property address, service sector, industry, level of customer account.<\/p><h3>9. Data sources of the register<\/h3><p>The data subjects themselves and public data sources<\/p><h3>10.\u00a0Principles concerning the protection of data<\/h3><p>The storage, archiving, deletion and other processing of data is controlled with archive formation plans and data security and data protection guidelines. Data that has been electronically stored in the register has been protected in such a way that only authorised persons have access to such data.<\/p><h3>11.\u00a0Disclosure of personal data in the register<\/h3><p>No<\/p><h3>12.\u00a0Transfer of the register\u2019s data to a third country or international organisation (outside the EU or European Economic Area (EEA))<\/h3><p>No<\/p><h3>13.\u00a0Personal data\u2019s retention periods \/ Criteria determining the retention period<\/h3><p>Storage is carried out in accordance with Tampere Tilapalvelut Oy\u2019s archive formation plan.<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61178\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61178\" aria-controls=\"collapse61178\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Rights of the data subject<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61178\" data-parent=\"#sp-ea-6117\" role=\"region\" aria-labelledby=\"ea-header-61178\"> <div class=\"ea-body\"><h3>Rights of the data subject and their implementation in Tampere Tilapalvelut Oy\u2019s person registers<\/h3><p>The EU General Data Protection Regulation (EU) 2016\/679 ensures various rights for the person, whose data is processed (=data subject). Rights are applied in different ways depending on the basis of processing personal data. The person has e.g. the right to know, if his\/her personal data is being processed and what personal data is processed, as well as the right to request for details about him\/her. The person also has the right to require any incorrect personal data to be rectified.<\/p><h3>Right to review data (right to access personal data, Article 15)<\/h3><p>The person has the right to know, whether or not his\/her personal data is being processed, and what personal data is stored about him\/her. At the data subject\u2019s request, Tampere Tilapalvelut Oy shall deliver the details as soon as possible without undue delay. The deadline for delivering details or providing additional information concerning a request for data is one month from the receipt of the request. If the request for data is abnormally complex or extensive, the deadline can be extended to two months.<\/p><p>In principle, the data subject\u2019s details are delivered free of charge. If several copies are requested, Tilapalvelut may however charge a reasonable fee for them based on administrative costs. If the request for data is eminently unjustified or unreasonable, particularly if requests for data are repeatedly presented, Tilapalvelut may charge for the administrative costs caused for delivering the details or refuse to deliver the details at all. In such cases, Tilapalvelut shall prove the distinct unfounded or excessive nature of the request.<\/p><p>If Tilapalvelut does not deliver the data, a written certificate on the matter shall be issued. In the same connection, we tell about the right to legal remedies, for example, the option to appeal to a supervising authority.<\/p><h3>Right to rectify information (Article 16)<\/h3><p>The person has the right to require that any personal data concerning him\/her that are incorrect, inaccurate or incomplete are rectified or supplemented without undue delay. In addition, the person has the right to require that any unnecessary personal data is removed. The necessity and inaccuracy are assessed according to the recording moment of the data.<\/p><p>If Tilapalvelut does not approve the request to rectify, a written certificate is issued, which states the reasons on which basis the request has not been approved. We shall also tell about the right to legal remedies, for example, the option to appeal to a supervising authority.<\/p><h3>Right to be forgotten (Article 17)<\/h3><p>Only in certain exceptional situations, the person has the right to have all his\/her personal data removed from Tilapalvelut\u2019s registers (right to be forgotten). Such right does not however apply in cases where the processing of personal data is necessary to fulfil a legal obligation or for the purpose of using the government Tilapalvelut is entitled to. Tilapalvelut\u2019s archiving guidelines and the storage times of data set out in legislation shall apply to the storage and removal of data.<\/p><h3>Right to limit processing (Article 18)<\/h3><p>A person may, in certain circumstances, have the right to request for limitation of processing his\/her personal data for the duration that his\/her data has been appropriately reviewed, rectified or supplemented.<\/p><h3>Right to transfer data from one system to another (Article 20)<\/h3><p>The right does not apply to such processing of personal data, which is necessary for carrying out a task concerning general interest or for using the government that the data controller is entitled to. Thus, the right is not applicable in principle to Tilapalvelut\u2019s person registers.<\/p><h3>Right to oppose (Article 21)<\/h3><p>The person has the right to oppose the processing of personal data at any time on the basis of his\/her personal, special circumstances, even if processing is based on carrying out a task concerning general interest or the use of the governing power that Tilapalvelut is entitled to. In this case, data may only be continued to be processed, if there is a substantially important and justified reason for the processing, which can be proven.<\/p><h3>Right to complain to an authority (Article 77)<\/h3><p>A person has the right to appeal particularly to the supervising authority of his\/her permanent residential or workplace location, if he\/she deems that the EU General Data Protection Regulation (EU) 2016\/679 is being violated in the processing of personal data. In addition to this, the person has the right to use other administrative appeal methods and legal remedies.<\/p><p>A person also has the right to make a claim against the data controller or the personal data processing organisation, if he\/she deems that his\/her rights have been violate due to the data protection regulation not being observed in the processing of his\/her personal data.<\/p><h3>How are rights implemented?<\/h3><p>Please contact Tilapalvelut\u2019s Data Protection Officer or the register\u2019s contact person.<\/p><p><strong>Data Protection Officer:<\/strong><br \/>Antti R\u00e4s\u00e4nen<br \/>ICT Officer<br \/>040 306 3145<br \/>firstname.lastname@tampere.fi<\/p><\/div><\/div><\/div><\/div><\/div>[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/6&#8243;][\/vc_column][\/vc_row][vc_row][vc_column width=&#8221;5\/6&#8243;][vc_column_text]<\/p>\n<h2>Data protection officer&#8217;s contact details and duties<\/h2>\n<p>[\/vc_column_text][vc_column_text]<style>#sp-ea-6119 .spcollapsing { height: 0; overflow: hidden; transition-property: height;transition-duration: 500ms;}#sp-ea-6119.sp-easy-accordion>.sp-ea-single {margin-bottom: 10px; border: 1px solid #e2e2e2; }#sp-ea-6119.sp-easy-accordion>.sp-ea-single>.ea-header a {color: #444;}#sp-ea-6119.sp-easy-accordion>.sp-ea-single>.sp-collapse>.ea-body {background: #fff; color: #444;}#sp-ea-6119.sp-easy-accordion>.sp-ea-single {background: #eee;}#sp-ea-6119.sp-easy-accordion>.sp-ea-single>.ea-header a .ea-expand-icon { float: left; color: #444;font-size: 16px;}<\/style><div id=\"sp_easy_accordion-1781440773\"><div id=\"sp-ea-6119\" class=\"sp-ea-one sp-easy-accordion\" data-ea-active=\"ea-click\" data-ea-mode=\"vertical\" data-preloader=\"\" data-scroll-active-item=\"\" data-offset-to-scroll=\"0\"><div class=\"ea-card ea-expand sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61190\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61190\" aria-controls=\"collapse61190\" href=\"#\" aria-expanded=\"true\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-minus\"><\/i> Data Protection Officer<\/a><\/h3><div class=\"sp-collapse spcollapse collapsed show\" id=\"collapse61190\" data-parent=\"#sp-ea-6119\" role=\"region\" aria-labelledby=\"ea-header-61190\"> <div class=\"ea-body\"><p><strong>Antti R\u00e4s\u00e4nen<\/strong><br \/>ICT Officer<br \/>040 306 3145<br \/>firstname.lastname@tampere.fi<\/p><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61191\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61191\" aria-controls=\"collapse61191\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Role and duties of the data protection officer<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61191\" data-parent=\"#sp-ea-6119\" role=\"region\" aria-labelledby=\"ea-header-61191\"> <div class=\"ea-body\"><ul><li>Participates in the planning operations concerning the organisation\u2019s processing of personal data<\/li><li>Participates in the preparation and maintenance concerning the data protection and data privacy guidelines approved by the data controller<\/li><li>Monitors and supervises the processing of personal data and their protection methods<\/li><li>Participates in the implementation of data protection training organised for the data controller\u2019s staff<\/li><li>Supports the staff and data subjects in data protection issues<\/li><li>Operates as a link to supervising authorities<\/li><li>Reports to the management group of the organisation about the status of data protection and development needs, including internal audits and user supervision<\/li><li>Is responsible for other tasks supporting data protection that have been assigned by the management group of the organisation<\/li><\/ul><\/div><\/div><\/div><div class=\"ea-card sp-ea-single\"><h3 class=\"ea-header\"><a class=\"collapsed\" id=\"ea-header-61192\" role=\"button\" data-sptoggle=\"spcollapse\" data-sptarget=\"#collapse61192\" aria-controls=\"collapse61192\" href=\"#\" aria-expanded=\"false\" tabindex=\"0\"><i aria-hidden=\"true\" role=\"presentation\" class=\"ea-expand-icon eap-icon-ea-expand-plus\"><\/i> Rights of the data subject<\/a><\/h3><div class=\"sp-collapse spcollapse \" id=\"collapse61192\" data-parent=\"#sp-ea-6119\" role=\"region\" aria-labelledby=\"ea-header-61192\"> <div class=\"ea-body\"><h3>Rights of the data subject and their implementation in Tampere Tilapalvelut Oy\u2019s person registers<\/h3><p>The EU General Data Protection Regulation (EU) 2016\/679 ensures various rights for the person, whose data is processed (=data subject). Rights are applied in different ways depending on the basis of processing personal data. The person has e.g. the right to know, if his\/her personal data is being processed and what personal data is processed, as well as the right to request for details about him\/her. The person also has the right to require any incorrect personal data to be rectified.<\/p><h3>Right to review data (right to access personal data, Article 15)<\/h3><p>The person has the right to know, whether or not his\/her personal data is being processed, and what personal data is stored about him\/her. At the data subject\u2019s request, Tampere Tilapalvelut Oy shall deliver the details as soon as possible without undue delay. The deadline for delivering details or providing additional information concerning a request for data is one month from the receipt of the request. If the request for data is abnormally complex or extensive, the deadline can be extended to two months.<\/p><p>In principle, the data subject\u2019s details are delivered free of charge. If several copies are requested, Tilapalvelut may however charge a reasonable fee for them based on administrative costs. If the request for data is eminently unjustified or unreasonable, particularly if requests for data are repeatedly presented, Tilapalvelut may charge for the administrative costs caused for delivering the details or refuse to deliver the details at all. In such cases, Tilapalvelut shall prove the distinct unfounded or excessive nature of the request.<\/p><p>If Tilapalvelut does not deliver the data, a written certificate on the matter shall be issued. In the same connection, we tell about the right to legal remedies, for example, the option to appeal to a supervising authority.<\/p><h3>Right to rectify information (Article 16)<\/h3><p>The person has the right to require that any personal data concerning him\/her that are incorrect, inaccurate or incomplete are rectified or supplemented without undue delay. In addition, the person has the right to require that any unnecessary personal data is removed. The necessity and inaccuracy are assessed according to the recording moment of the data.<\/p><p>If Tilapalvelut does not approve the request to rectify, a written certificate is issued, which states the reasons on which basis the request has not been approved. We shall also tell about the right to legal remedies, for example, the option to appeal to a supervising authority.<\/p><h3>Right to be forgotten (Article 17)<\/h3><p>Only in certain exceptional situations, the person has the right to have all his\/her personal data removed from Tilapalvelut\u2019s registers (right to be forgotten). Such right does not however apply in cases where the processing of personal data is necessary to fulfil a legal obligation or for the purpose of using the government Tilapalvelut is entitled to. Tilapalvelut\u2019s archiving guidelines and the storage times of data set out in legislation shall apply to the storage and removal of data.<\/p><h3>Right to limit processing (Article 18)<\/h3><p>A person may, in certain circumstances, have the right to request for limitation of processing his\/her personal data for the duration that his\/her data has been appropriately reviewed, rectified or supplemented.<\/p><h3>Right to transfer data from one system to another (Article 20)<\/h3><p>The right does not apply to such processing of personal data, which is necessary for carrying out a task concerning general interest or for using the government that the data controller is entitled to. Thus, the right is not applicable in principle to Tilapalvelut\u2019s person registers.<\/p><h3>Right to oppose (Article 21)<\/h3><p>The person has the right to oppose the processing of personal data at any time on the basis of his\/her personal, special circumstances, even if processing is based on carrying out a task concerning general interest or the use of the governing power that Tilapalvelut is entitled to. In this case, data may only be continued to be processed, if there is a substantially important and justified reason for the processing, which can be proven.<\/p><h3>Right to complain to an authority (Article 77)<\/h3><p>A person has the right to appeal particularly to the supervising authority of his\/her permanent residential or workplace location, if he\/she deems that the EU General Data Protection Regulation (EU) 2016\/679 is being violated in the processing of personal data. In addition to this, the person has the right to use other administrative appeal methods and legal remedies.<\/p><p>A person also has the right to make a claim against the data controller or the personal data processing organisation, if he\/she deems that his\/her rights have been violate due to the data protection regulation not being observed in the processing of his\/her personal data.<\/p><h3>How are rights implemented?<\/h3><p>Please contact Tilapalvelut\u2019s Data Protection Officer or the register\u2019s contact person.<\/p><p><strong>Data Protection Officer:<\/strong><br \/>Antti R\u00e4s\u00e4nen<br \/>ICT Officer<br \/>040 306 3145<br \/>firstname.lastname@tampere.fi<\/p><\/div><\/div><\/div><\/div><\/div>[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/6&#8243;][\/vc_column][\/vc_row][vc_row][vc_column][vc_empty_space height=&#8221;30px&#8221;][\/vc_column][\/vc_row]<\/p>\n<\/section>","protected":false},"excerpt":{"rendered":"<p>[vc_row el_class=&rdquo;bmargin&rdquo;][vc_column width=&rdquo;5\/6&Prime; offset=&rdquo;vc_col-lg-8 vc_col-md-8 vc_col-xs-12&Prime;][vc_column_text] Tilapalvelut&rsquo;s Privacy Policy EU General Data Protection Regulation (GDPR) The data protection regulation shall apply from 25th May 2018 onwards.<span class=\"excerpt-hellip\"> [\u2026]<\/span><\/p>\n","protected":false},"author":22,"featured_media":4830,"parent":0,"menu_order":21,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-4926","page","type-page","status-publish","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/pages\/4926","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/users\/22"}],"replies":[{"embeddable":true,"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/comments?post=4926"}],"version-history":[{"count":30,"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/pages\/4926\/revisions"}],"predecessor-version":[{"id":6121,"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/pages\/4926\/revisions\/6121"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/media\/4830"}],"wp:attachment":[{"href":"https:\/\/tampereentilapalvelut.fi\/en\/wp-json\/wp\/v2\/media?parent=4926"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}