Rights of the Data Subject and Data Requests

On this page, the rights of the data subject are explained and rights are described in relation to different legal bases for processing. There is a link on the page to a form through which you can make a data request concerning your personal data.

Please note that the processing of personal data concerns only registered individuals (users logging into the system). The processing of personal data does not apply to individuals who use the Service Manual without logging in as unregistered users.

The data subject has various rights concerning personal data under the General Data Protection Regulation. The legal basis for processing determines the rights related to personal data.

In the Service Manual, information is processed based on Article 6(1c) of the EU General Data Protection Regulation for municipal and state employees, and based on Article 6(1e) for service provider organizations. The data subject has, among other rights, the right to access their personal data, the right to rectify data, and the right to restrict data processing. The data controller must respond to the request without undue delay.

Article 6(1c) of the EU General Data Protection Regulation: processing is necessary for compliance with a legal obligation of the controller

Article 6(1c) of the EU General Data Protection Regulation applies to the processing of data concerning municipal and state employees.

Rights when processing is based on the controller's legal obligations:

• Right to be informed about the processing of personal data, unless expressly exempted by law
• Right to access information
• Right to rectify data
• Right to restrict data processing
• Obligation to notify individuals of corrections or restrictions to processing of personal data
• Right not to be subject to automated decision-making without a legal basis
• This can be permitted by legislation that establishes appropriate measures to protect the rights and freedoms of data subjects and legitimate interests.

EU General Data Protection Regulation Article 6(1)(e): Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

Article 6(1)(e) of the EU General Data Protection Regulation applies to the processing of data concerning personnel of service provider organizations.

Rights when processing is based on a task carried out in the public interest or the exercise of official authority:

• Right to be informed about the processing of personal data, unless expressly exempted by law
• Right to access information
• Right to rectify data
• Right to restrict data processing
• Obligation to notify individuals of corrections or restrictions to processing of personal data
• Right to object to the processing of data
• Right not to be subject to automated decision-making without a legal basis
• This can be permitted by legislation that establishes appropriate measures to protect the rights and freedoms of data subjects and legitimate interests.

The data subject has the right to verify what personal data the controller processes and for what purpose. In the Service Manual, the processing of personal data is based on the EU General Data Protection Regulation.

The data request pertains to the user register of the Service Manual. When you make a request to access, correct, or delete your own data, we will provide you with a copy of the personal data to which the request pertains.

The data controller must respond to the data request within one month. If there are multiple requests or they are complex, the controller may indicate the need for additional processing time, in which case the deadline is extended to three months from the date of the original request.

Learn more about the processing of personal data: https://uusi.palvelumanuaali.fi/en/data-privacy

Review the register description: https://uusi.palvelumanuaali.fi/en/data-privacy/privacy-policy