Data protection

Data Protection Officer

tietosuoja@siuntio.fi

Lepopirtintie 80
02570 Siuntio

Data protection in the services provided by the municipality of Siuntio

Everyone has the right to the protection of personal data concerning them. This means that personal data must be processed in an appropriate manner, always for a specific purpose and with the consent of the data subject or on the basis of other legitimate grounds laid down by law. The protection of personal data also means that everyone has a guaranteed right to access the data that has been collected about them and, if necessary, to have the data amended or deleted if the data needs to be rectified.

Definitions

According to the EU General Data Protection Regulation, “personal data” means any information relating to an identified or identifiable natural person, hereinafter referred to as “data subject” (e.g. name, personal identification number, photo, biometric or genetic data). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

“Processing of personal data” means any operation performed on personal data, whether by automatic or manual means. Processing includes the collection, recording, organization, structuring, storage, alteration, retrieval, use, disclosure, dissemination or otherwise making available, alignment, combination, restriction, erasure and destruction of personal data.

Principles of processing personal data

In the services provided by the municipality, personal data is processed lawfully and in a transparent manner in relation to the data subject. Lawfulness means that personal data is collected only for specified lawful purposes, and it may not be further processed in a manner that is incompatible with those purposes. Transparency means that the client has the right to be informed about how and for what purpose their personal data is processed.

What personal data is collected in municipal services?

Identifying data (name and personal identification number) is needed to target the right person for services, invoices and communications. Other identifying data, such as parcel number or vehicle registration number, may also be required for different services.
Contact information (home address, telephone number, email address) is needed to contact the client in all of our services.

Some statutory services also process the client’s financial data. For example, early childhood education client fees are based on the data subject’s income. Income information is also a prerequisite for the granting of discretionary or supplementary social assistance and debt counselling services.

Health data is processed in the municipality’s basic social services in the health and care services. The processing of health data is heavily regulated by special legislation, and health data is particularly well protected.

In multi-professional networks, such as student welfare services and rehabilitative work activities, different experts process personal data in their respective fields in order to provide the best service for the client (e.g. psychologists, social workers, welfare officers, doctors, youth workers). The data processed in such networks is strictly confidential.

Who can personal data be disclosed to?

Municipal service units may disclose data to other authorities if they are entitled by law to process the data in question. Within the municipality, data is regularly disclosed to Taitoa for invoicing purposes or for the payment of salaries and wages.

The municipality of Siuntio does not disclose any personal data for direct marketing purposes.

The municipality of Siuntio does not, in principle, disclose personal data to any third countries or outside the EU.

Right to complain to the data protection authority

The data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning them infringes the EU General Data Protection Regulation or national laws and regulations governing data protection.

Contact details of the supervisory authority

Office of the Data Protection Ombudsman
PL 800
00521 Helsinki

Street address
Ratapihantie 9, 6th floor,
Helsinki

029 56 66700

tietosuoja(at)om.fi