Privacy Policy Merikarviain the municipality

Processing of personal data

In the services provided by the municipality, personal data is processed in a lawful manner and transparently from the perspective of the data subject. Lawfulness means that personal data is collected only for a specific lawful purpose and may not be further processed in a manner incompatible with those purposes. Transparency means that the customer has the right to be informed about how and for what purpose their personal data is processed.

The retention periods for personal data related to matters initiated and processed in the municipality are determined in accordance with the Archives Act (831/1994), the regulation of the Archives Authority (AL 16465/07.01.01.03.02/2016) and the recommendations of the Association of Local Authorities.

What information do we process?

The scope of the information processed depends on the nature of the matter and what relevant information has been provided to us.

We usually process at least the following information:

• identification information (name, personal identification number)
• the contact information of the initiator, for example, telephone number, email address and/or postal address
• description of the matter
• information regarding the stages of the case processing

Identification information (name and personal identification number) is needed to target the service, invoices and communications to the right person. Different services may also require other identification information, such as the property ID. Contact information (home address, telephone number, email) is needed to reach the customer in all services.

Some statutory services also process the customer's financial information. For example, early childhood education client fees are determined based on income information. In multi-professional networks, such as student welfare and rehabilitative work activities, various experts process personal data in their own fields in order to provide the best service for the customer (including psychologists, social workers, curators, doctors, youth workers). The information processed in such networks is absolutely confidential.

Protection of personal data

In municipal services, personal data may only be processed by employees or officials whose specific job duties include processing the data. Access to the data is limited by personal access rights according to the job role, which ensures that the data is protected from unauthorized and incompatible processing. Technical protection measures prevent data loss or damage. Technical protection measures include, for example, access control, log data, backup and a secure data network. In addition, all municipal employees are required to maintain confidentiality and to familiarize themselves with data protection and security instructions.

Your data protection rights related to the processing of personal data

Right to receive information about the processing of personal data:

• You have the right to know for what purposes and in what ways we process your personal data.
• You have the right to know whether we are processing personal data concerning you. If we are processing it, you have the right to receive a copy of this data, unless we have a legitimate reason to refuse to exercise the right.

Right to rectify data:

• If the personal data we process about you is incorrect, you can ask us to correct the data.
• if we correct information based on your request, we are obliged to do so, where possible
• to notify all those to whom the information has previously been disclosed of the correction

The right to restrict data processing:

• If you believe that the information we process about you is incorrect, is being processed unlawfully, or you have objected to the processing of your information, you can ask us to restrict the processing of your information.

In this case, we can only process your data:

• with your consent
• if we need the information for the establishment, exercise or defense of legal claims
• in the public interest, or
• to protect the rights of another person
• If we restrict the processing of your data based on your request, we are obliged to inform all those to whom the data has previously been disclosed of the restriction, if possible.

Right to object to data processing

In certain situations, the data subject has the right to object to the processing of his or her personal data, i.e. to request that they not be processed at all. When the data are processed for the performance of a task carried out in the public interest, in the exercise of official authority vested in the controller, or in the legitimate interests pursued by the controller or by a third party, the data subject may object to the processing on grounds relating to his or her particular situation.

In this case, the processing of the data must be stopped, unless:

• the controller can demonstrate that there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or
• the processing is necessary for the establishment, exercise or defense of a legal claim.