This privacy notice contains information to be disclosed with the data subjects in accordance with Article 13 and 14 of the General Data Protection Regulation (EU 2016/679) of the European Parliament and Council ("GDPR"). This privacy notice contains information on how personal data is collected, used, disclosed and stored in the Finnish Environment Institute (Syke). Data is collected within Horizon Europe project ISLANDR Work Package 1. More information about the project can be found in: www.islandr.eu
Joint data controllers and their data protection officers
Finnish Environment Institute (Syke)
Latokartanonkaari 11
00790 Helsinki
Finland
Email address: kirjaamo@syke.fi
Confidential e-mail address: https://turvaviesti.ymparisto.fi
tel. +358 295 252 001
Contact details of the data controller:
Henna Jylhä, researcher
firstname.lastname@syke.fi
Contact details of the data protection officer:
tietosuojaSYKE@syke.fi
Geologian tutkimuskeskus (Geological Survey of Finland, GTK)
Vuorimiehentie 5
02151 Espoo
Finland
Email address: gtk@gtk.fi
tel. +358 29 503 0000 (switchboard)
Contact details of the data controller:
Timo Tarvainen, senior scientist
firstname.lastname@gtk.fi
Contact details of the data protection officer:
E-mail: tietosuojavastaava@gtk.fi
tel. +358 29 503 0000 (switchboard)
Division of responsibilities between joint controllers
To the extent that the controllers named above are processing the same data and are jointly determining the purposes and means of the processing, they are joint controllers.
Syke is collecting the data through Webropol web questionnaire tool. Syke will share the collected data to GTK for the purposes of scientific research. Access to the data will only be on persons taking part in work package 1 of ISLANDR project in Syke and GTK. The data is stored on Syke and GTK computers that are password protected, and in folder location that is not shared with other persons or organisations or located in cloud services.
The data subject can implement their rights concerning the processing of personal data through the following contact person:
Henna Jylhä, researcher
firstname.lastname@syke.fi
The contact person will forward any inquiries to the other controllers as appropriate.
Timo Tarvainen, senior scientist
firstname.lastname@gtk.fi
Legal basis for data processing
We process your personal data for the purposes of scientific research and for communication purposes (Article 6 section 1 e of the General Data Protection Regulation) and your informed consent will be sought for this (Article 6 section 1 a of the General Data Protection Regulation). In addition, the processing is based on the section 4, paragraph 1 and 3 of the Finnish Data Protection Act (1050/2018).
personal data is requested from the participants themselves, we will also ask their consent for storing and using of their personal data. The collection of personal data for the purposes of research will be agreed upon separately amongst those concerned.
Collected and processed personal data and the purpose for processing
The personal data collected in the work package 1 of the ISLANDR research project include your name, your position in relation to soil contamination database (user / manager / owner of the database etc.), your work email address, your work telephone number, the name of the organization you present, the link to the website of the organization and the organisation’s postal address. The information is collected via public websites and questionnaires and interviews organized by the project. Participation in the questionnaires is voluntary.
Personal data is collected and processed only in order to collect research data and for communication purposes. The names of the individual persons participating in the research are not used in the analysis of the research material or in the reporting of the results.
Collected personal data will not be used for automatic decision making nor profiling.
Research data is used for a report depicting the status of soil pollution in the EU member countries.
Sources of personal data
Participants’ personal data is collected from public websites and documents and from the participants themselves.
Recipients of personal data
Persons appointed to work in the ISLANDR project work package 1 at Syke and at the Geological Survey of Finland (Geologian tutkimuskeskus, GTK), and who need the data for their work in ISLANDR project, have access to the personal data.
In addition, the personnel working for the survey tool Webropol have access to the data. Similarly, members of the staff of Valtori (Valtion tieto- ja viestintätekniikkakeskus Valtori, state-owned IT service provider for governmental organisations in Finland) have access to the data located in computers of governmental research organisations.
These service providers are considered as personal data processors, and they must follow Syke guidelines regarding personal data processing. Personal data will not be transferred or disclosed to countries outside the European Union or the European Economic Area.
Protection of personal data
The personal data collected with the Webropol software will be stored in the Webropol-service (www.webropol.fi). Connection to the service is secured with SLL certificate. In Syke, only persons appointed to ISLANDR project and with Webropol account can access the personal data. Syke will share this data to GTK personnel working in work package 1 for GTK to process the data on the part of answers related to local and diffuse soil contamination and to possibly contact the persons for further questions on the dataset.
The data controllers have implemented technical and organisational measures necessary to protect personal data and also require these measures of any service providers used by them.
Storing of personal data
Personal data will be kept for as long as the ISLANDR project has fulfilled its purpose. However, personal data will be removed when the project ends, latest in year 2026.
No personal data will be published together with the survey summary or otherwise.
Data subject’s rights
You have the right to know if your personal data is processed in the project, obtain a copy of your personal data and know the purpose of the processing. This notice aims to provide an extensive explanation about personal data processing in the ISLANDR project. If anything regarding our data processing is unclear, you may send in further questions to the contact persons named in this notice.
If any of your personal data is inaccurate, you may request us to rectify the inaccurate and faulty data and have the processing restricted pending the correction. When we rectify data on the basis of your request, we are obliged, if possible, to inform all recipients to whom the personal data has been disclosed of the rectification of the personal data.
You have the right to delete your personal data and to restrict its processing.
To extent the processing is based on your consent, you have at any time the right to withdraw your consent and have such personal data to be deleted by us.
In order to exercise these rights, please contact the contact persons stated in page 1 of this Privacy notice.
Not all of these rights can be exercised in all situations, depending on factors such as the basis for the processing of personal data. You also have the right to lodge a complaint with a supervisory authority in the EU Member State of your residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.