GDPR

Data protection practices of the Human Rights Centre

On this page, we tell you about

  • the rights that you have when we process your personal data, and

  • the Human Rights Centre as a data controller and how we process personal data.

 Your data protection rights 

 Right to obtain information on the processing of personal data 

  • You have the right to know whether we process personal data concerning you. If we do, you have the right to receive a copy of these data.

  • You have the right to know for what purposes and in what ways we process your personal data.

 Right to have incorrect data rectified and to restrict the processing of data 

  • If your personal data that we are processing are incorrect, you can request that we rectify the data.

  • If we rectify data on the basis of your request, we have an obligation, where possible, to notify the rectification to everyone that the data have previously been disclosed to.

  • You have the right to prohibit us from processing your data and/or withdraw the consent you have previously given for the processing of the data.

 Exercising the rights in practice 

If you would like to

  • know more about the processing of personal data at the HRC,

  • know whether the HRC processes personal data concerning you,

  • inspect the personal data concerning you,

  • have any incorrect data concerning you rectified or restrict the processing of your data, or

  • know more about the processing of personal data at the HRC,

contact: info@ihmisoikeuskeskus.fi.

 

The Human Rights Centre as a data controller 

 DATA CONTROLLER

Name: Human Rights Centre

Mailing address: Aurorankatu 6, 00102 Eduskunta, Helsinki, Finland

Email: info@ihmisoikeuskeskus.fi

 

Privacy policy of the Human Rights Centre

The purpose of collecting personal data 

The Human Rights Centre (HRC) collects personal data for the following purposes:

  • Storing contact details for the stakeholder register. The purpose of the stakeholder register is to manage the contact details of the stakeholders’ representatives to implement the HRC’s tasks, for example, to send event invitations or press releases about publications.

  • Collecting information on persons who have confirmed their attendance at events organised by the HRC for the purpose of access control in venues such as Parliament, placing orders for the food and drinks possibly served during the events, and delivering material related to the events.

  • Storing contact details for sending the newsletter.

  • Recording contact requests, such as citizens’ letters, in the case management system for their processing, and for monitoring and documenting work.

  • Storing data required for the implementation of studies, interviews, surveys and reports.

  • The contact details of the HRC’s current and former personnel as well as the contact details of the current and former members of the Human Rights Delegation and its divisions are also stored in the Human Rights Centre.

Collecting details of persons in the HRC's stakeholder register

The data on the persons in the stakeholder register are obtained from the persons themselves or from public sources. When the data is obtained from public sources, the person concerned is informed that their personal data have been added to the register. 

The following details are recorded in the register:

  • the person’s first and last names, e-mail address and possible background organisation or agency.

The data are stored in an online file storage in a secure internal network. Only the HRC’s personnel have access to the file storage.

Collecting details of persons who have registered for the HRC’s events

Registration for the HRC's events takes place through the Webropol system. The following details are recorded in the system:

  • the first and last names, e-mail addresses and possible background organisation or agency the persons who have confirmed their attendance,

  • if the event has catering, the register may also include information on food allergies,

  • information on the possible need for special arrangements (e.g., induction loop)

Webropol’s privacy policy

Registration may also take place using the registration form on the Yhdistysavain website.

Yhdistysavain’s privacy policy 

The system that will be used is indicated in the acknowledgement of receipt of the registration.

If necessary, the HRC will add the details of the speakers, assistants, interpreters and other similar people participating in organising the event to the system for the purposes of access control and catering.

The HRC deletes the participants’ personal data from the system three months after the event.

 

Collecting details of the questions and other similar contact requests addressed to the HRC 

Details of the contact requests such as different enquiries received by the HRC are recorded in the case management system. The details recorded include

  • the name and email address of the person contacting the HRC

  •  the content of the contact request.

The HRC uses the case management system of the Office of the Parliamentary Ombudsman to register the contact requests.

Record of the processing activities in the record and the case management system of the Office of the Parliamentary Ombudsman 

 

Collecting details of the individuals who have subscribed to the HRC’s newsletter 

The HRC stores the details of the individuals who have subscribed to the HRC’s newsletter in the Mailchimp system. The data recorded include:

  • the subscriber’s email address

  • the subscriber’s first and last names if the person concerned has recorded them in connection with the subscription.

Mailchimp’s privacy policy

 

Collecting details of the HRC’s current and former personnel as well as of the current and former members of the Human Rights Delegation and its divisions.

The HRC stores the contact details of its current and former personnel as well as the contact details of the current and former members of the Human Rights Delegation and its divisions. The data recorded include:

  • the person's first and last names

  • the person's email address.

The data are stored in an online file storage in a secure internal network. Only the HRC’s personnel have access to the file storage.