Data subjects i.e. those whose personal data we process, have the rights stated in the GDPR to make the requests presented here. We may request additional information if necessary to confirm the identity of the requestor. We will answer the request at latest one month after the requestor has been identified and we have received enough information to fulfil the request.
8.1 Right to access and rectification
You have the right to request us to inform you what personal data we process concerning you (or that no data is processed), and request us to correct your personal data that are incorrect or incomplete (or outdated).
8.2 Right to erasure (‘right to be forgotten’) and right to restriction of processing
You have the right to request us to erase (or render anonymous) or restrict the processing of personal data concerning you that we process. We will comply with your request unless we have a legitimate ground not to delete the data, in which case you will be informed.
8.3 Right to object to processing
You have the right to object to the use of all or some of your personal data for selected purposes. We will comply with your request unless we have a legitimate ground to continue the processing (e.g. legal obligation), in which case you will be informed.
8.4 Right to data portability
You have the right to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller if the processing is based on consent or on a contract, and the processing is carried out by automated means.
8.5 Right to withdraw consent
If you have given your consent to certain processing, you have the right to withdraw your consent at any time regarding further processing of your personal data.
8.6 How to use these rights
You can use these rights by contacting us using the contact information found in the beginning of this Privacy Notice. The requests must be submitted in writing and include enough information to confirm your identity. We may request additional information if necessary.
We will inform the recipients of your personal data if you have requested the data to be rectified, erased or restricted, unless this proves impossible or involves disproportionate effort.
We have the right to refuse to act on requests that are manifestly unfounded (obviously unjustified) or excessive, in particular because of their repetitive character, or charge a reasonable fee based on the costs to fulfil the request.
8.7 Right to lodge a complaint with a supervisory authority
You have the right to complain to the competent supervisory authority if you believe your personal data has been processed incorrectly. Contact information:
Data Protection Ombudsman
Address: Ratapihantie 9, 6th floor, 00520 Helsinki
Phone: +358 29 56 66700