Data protection
Data protection is a fundamental right for everyone. It means that we protect your personal data and ensure that your rights are upheld when we process your information.
The processing of personal data is governed by the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act, and several specific acts of legislation. The purpose of these laws is to ensure that your data is processed securely and correctly.
When you use the city’s services, we collect and use your data only to the extent necessary to handle your matter and provide the service. We collect data into different registers according to their purpose of use.
The city’s privacy notices provide more detailed information on how and why we process personal data in various services.
The legal basis for processing personal data
The majority of the city’s services are based on a statutory obligation, a task carried out in the public interest, or the exercise of official authority. In these situations, we do not require your separate consent for the processing of personal data.
Some services are based on your consent. When personal data is processed on the basis of consent, you may withdraw your consent at any time.
How we protect your data
In the processing, archiving, and disposal of personal data, we comply with
- the data management plan, which guides the processing and storage of data
- good data processing practices, and
- national information security and data protection guidelines.
We regularly train our staff in the correct processing of personal data and monitor the use of data. Systems containing personal data are protected, and data may only be processed by those individuals who are entitled to do so based on their work duties.
The city’s personnel are bound by a duty of confidentiality and professional secrecy.