Rights of the data subject

The rights of the data subject are laid down in Articles 15-22 of the General Data Protection Regulation of the EU:

• right to access the data
• rectification or erasure of the personal data
• restricting the processing of the personal data
• right to data portability
• right to object

The data subject may access their data once a year free of charge. A fee may be charged if the data subject uses their right of access more than once during the same year.

The Data Protection Officer of the Seinäjoki University of Applied Sciences is the contact person for matters concerning the data subject’s rights.

Contact details of the Data Protection Officer:

Jarmo Jaskari, Data Protection Officer, Seinäjoki University of Applied Sciences
tel. +358 40 868 0680
jarmo.jaskari(at)seamk.fi

Correction of errors

The controller must, on its own initiative or at the request of the data subject, without undue delay rectify, erase or supplement personal data contained in its personal data file that is erroneous, unnecessary, incomplete or obsolete as regards the purpose of the processing (section 29 of the Personal Data Act).

The person responsible for data file matters must, immediately after having notified the error, correct the error or notify a person authorised to correct the error. The data subject has the right to request the correction of the error and the error must be corrected without undue delay. If the data subject’s request to correct the error is refused, a certificate of refusal must be issued in writing. The data subject has the right to refer the matter to the Data Protection Ombudsman at: Office of the Data Protection Ombudsman, PO Box 315, FI-00181 Helsinki, Finland. The Data Protection Ombudsman may order the controller to correct the data error.

The request to correct the error must be submitted orally or in writing to the person managing the data file and, if necessary, the identity of the data subject is checked in the process.

In other cases, the correction request must be sent to the following address:

Seinäjoki University of Applied Sciences
Jarmo Jaskari, Data Protection Officer
P.O. Box 412 (Kampusranta 11)
FI-60101 Seinäjoki, Finland

Other rights relating to the processing of personal data

If the person requesting the information is not known or their identity cannot be established by other means, the person in question must prove their identity before the information is disclosed. An official photo identity document (driving licence, passport, a personal identity card issued by the police, or a Kela card) can be used to establish the identity.

Right to prohibit the disclosure of address information

The data subject has the right to prohibit the disclosure of data on him or her contained in the Population Information System and documents related to it

• for direct advertising, distance selling, other direct marketing, market research and opinion polls (section 30 of the Personal Data Act)
• as address service (section 25(5) of the Population Information Act)
• for public registers (section 30 of the Personal Data Act)
• for genealogical research (section 30 of the Personal Data Act).

The application for prohibiting the disclosure of the above personal data must be submitted to the Population Register Centre or a Local Register Office. After the prohibition has taken effect, the Population Register Centre will no longer supply above data to SeAMK as an address service. A data subject who does not want to provide their address information is personally responsible for any harm and damage that arises when the data subject cannot be reached.

Non-disclosure for personal safety reasons

If a person has justified reasons to believe that their own safety or the safety of their family is threatened, the Local Register Office may, at the person’s request, order that the person’s municipality of residence or address data stored in the Population Information System may only be disclosed to the authorities. The application for a non-disclosure for personal safety reasons must be in writing, give the grounds for the request and it must be submitted to the Local Register Office by post, email or in person. When issued for the first time, a non-disclosure for personal safety reasons may be in effect for a maximum of five years and it can be extended for two years at a time. There are cases where the address of a person granted a non-disclosure for personal safety reasons is not even disclosed to the authorities. The authorities entering contact details of the person in question in their systems are also notified of the non-disclosure for personal safety reasons.

A person granted a non-disclosure for personal safety reasons must submit notification of the matter to the person responsible for the data file, if necessary.

Restraining order

A restraining order means that in order to protect a person’s life, health, liberty or privacy, another person is prohibited from contacting him or her. Anybody that has justified reasons to feel threatened or harassed by somebody else may apply for a restraining order. The application for a restraining order must be submitted to the police or a district court.

A person granted a restraining order must submit notification of the matter to the person responsible for the data file, if necessary.