Anti-Racism Campaign privacy statement
Personal data processed for the communications and events of the Anti‑Racism Campaign.
1 General
This privacy statement includes the information required by Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation) for data subjects (natural persons). This statement is issued to data subjects upon the collection of personal data.
2 Data controller and its contact information
Prime Minister’s Office, PO Box 23, FI-0023 VALTIONEUVOSTO, Finland
kirjaamo.vnk@gov.fi
tel. +358 295 160 334
Finland’s ministries act as joint controllers when they process personal data in the common information systems of the Government.
3 Data protection officer contact information
Prime Minister’s Office, Finance Unit
Data Protection Officer Heidi Alajoki
tietosuojavastaava.vnk@gov.fi
4 Purpose of personal data processing
On 31 August 2023, the Government issued a statement to the Parliament on promoting equality, including gender equality, and non-discrimination in Finnish society. One of the measures is an anti-racism campaign led by the Prime Minister’s Office. The purpose of the campaign is to engage different operators and have them commit to concrete actions that promote equality and prevent racism in their operations. Communications are sent to different stakeholders to realise the objectives of the campaign.
Personal data is only recorded on a lawful basis. Primarily, the data is necessary for the provision of services and communication. Use of the services is voluntary, and any personal data collected is not processed for purposes other than those indicated herein.
The data is processed by ministry personnel, who maintain service content, as well as service providers and their subcontractors, who act as partners for a ministry under an agreement for the processing of personal data in accordance with GDPR requirements..
5 Bases for personal data processing
- Government Rules of Procedure (262/2003)
- Government Decree on the Prime Minister’s Office (393/2007)
Personal data is processed in a lawful manner in accordance with Article 6, paragraph 1, point c (compliance with a legal obligation).
6 Data subject groups and personal data categories
Data subject groups:
- Ministry employees
- Anti-Racism Campaign stakeholders
- Persons invited to and participating in Anti-Racism Campaign events
- Subscribers to the Anti-Racism Campaign newsletter
- Participants in Anti-Racism campaign communication campaigns and contests
Personal data categories:
- Contact information (organisational data, name, address, telephone number and email address)
- Diet (for event catering)
7 Sources of personal data not collected directly from the person
Data available from public sources.
8 Personal data processors and recipients
- Motiva Oy
- Webropol Oy, technical platform service provider
- Lyyti, technical platform service provider for event sign-up
- Microsoft Corporation, technical platform service provider for newsletter subscriptions
9 Transfer of personal data outside the EU or the EEA or to an international organisation
No personal data is transferred outside the EU or the EEA or to international organisations.
10 Personal data storage time
Personal data is stored for the length of the Anti-Racism Campaign (2024–2027).
11 Data subject rights
Data subjects have the right to be informed of the processing of their personal data by the data controller.
Data subjects also have the right to request:
- their personal data
- the correction or removal of erroneous or outdated data
- the restriction of the processing of their personal data
User rights and how to verify personal data
The supervisory authority for data protection in Finland is the Data Protection Ombudsman.
Further information about data protection and rights
12 Automated decisions and profiling
No personal data is used for automated decision-making or profiling that would affect the rights or liberties of the data subjects.
13 Personal data protection
As the data controller, the Prime Minister’s Office has carried out the necessary technical and organisational measures and requires the same of all personal data processors.