Privacy statement

Kiinteistöosakeyhtiö Laakson yhteissairaala (real estate company)

1. General information

This privacy statement is a document in accordance with the General Data Protection Regulation (EU) 2016/679 concerning data protection practices.

2. Controller

Name:
Kiinteistöosakeyhtiö Laakson yhteissairaala (real estate company)

Address:
c/o HUS Facilities Center
P.O. Box 303
FI-00029 HUS

3. Person in charge of the register

Maarit Tulokas, Director of Construction Project Management
maarit.tulokas@hus.fi

4. Purpose of processing personal data

Personal data is used to carry out the duties of the controller, i.e. the real estate company.

The legal basis for processing is either the consent of the person or the contractual relationship to which the data subject is a party or as their representative or contact person.

5. Data content of the register

The register may contain the following information:

  • Name
  • Email address
  • Phone number
  • Organization and position
  • Organization address information and Business ID
  • Any other information provided by the data subject.

6. Regular sources of data

The information contained in the register is regularly obtained from the data subject or from the data subject’s employer.

As a rule, the controller does not disclose the data subject’s data to third parties, except where required by Finnish law or the authorities. Personal data in electronic form is stored on servers located in the EU or EEA.

7. Principles of registry protection

The manually stored data is stored in a locked space, which can only be accessed by a person handling relevant matters or documents. Electronically stored data is located on a password-protected server. Persons processing personal data are bound by the obligation of professional secrecy regarding the data received from the register.

8. Rights of the data subject

The data subject has the following rights:

  • Right of access to their personal data Article 15 data subject may submit a written request for information regarding their data
  • Right to rectification (Article 16) the data subject may submit a written claim for correction of data
  • Right to erasure (Article 17) data subject may request the deletion of personal data that is no longer necessary in relation to the purposes for which they were collected or that is incorrect
  • The right to restriction of processing (Article 18) the data subject may make a free-form claim, which is always processed on a case-by-case basis
  • The right to object to processing (Article 21) the data subject may make a free-form claim, which is always processed on a case-by-case basis
  • The right to data portability from one system to another (Article 20) data subject may make a free-form claim, which is always processed on a case-by-case basis

Applications or requirements concerning the above rights will be submitted to the controller’s contact person.

9. Retention periods of personal data

Personal data is stored for the time needed to carry out the controller’s duties. Personal data whose processing is no longer necessary is erased once a year.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to other administrative remedies or judicial remedies, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the member state where his or her usual place of residence or place of work is situated or where the alleged infringement has taken place, if the data subject considers that the processing of personal data relating to him or her infringes EU’s General Data Protection Regulation.

Contact details of the supervisory authority:
Office of the Data Protection Ombudsman
https://tietosuoja.fi/etusivu
Street address: Lintulahdenkuja 4, FI-00530 Helsinki
Mailing address: P.O.Box 800, FI-00531 HELSINKI
Email: tietosuoja(at)om.fi
Switchboard: 029 566 6700 Registry: 029 566 6768