Media Register Privacy Notice

Updated

Legal references:

  • Data Protection Act (1050/2018)
  • EU General Data Protection Regulation (GDPR 2016/679)
  • Act on the Openness of Government Activities (621/1999)

1. NAME OF THE REGISTER

Media register of the Matriculation Examination Board.

2. CONTROLLER 

Secretariat of the Matriculation Examination Board

  • Address: Hakaniemenranta 6, 00530 HELSINKI
  • Opening hours: weekdays 8:00–16:15
  • Controller’s representative: Mikko Salmi, lautakunta@ylioppilastutkinto.fi, 0295 331 700 (switchboard)
  • Contact details of the Data Protection Officer: Jyrki Tuohela, tietosuoja@oph.fi, 0295 331 000 (switchboard) 

3. PURPOSE OF PROCESSING PERSONAL DATA 

The legal basis for processing personal data under the GDPR is the data subject’s consent (documented, freely given, specific, informed and unambiguous). The purpose of the Matriculation Examination Board’s media register is to maintain contact with media representatives and to disseminate information related to the Matriculation Examination.

4. CATEGORIES OF DATA SUBJECTS

  • Media representatives who have expressed in writing their wish to be included in the register

5. DATA CONTENT OF THE REGISTER

The following data are stored in the media register of the Matriculation Examination Board:

  • name of the person
  • email address provided by the person
  • name of the organisation represented by the person

6. SOURCES OF DATA

There are no other data sources than the data subject’s own request or consent to be entered into the register.

7. DISCLOSURES OF DATA

The disclosure of personal data from the media register is governed by the provisions laid down in the Act on the Openness of Government Activities (Data Protection Act 1050/2018, section 28). Data are not disclosed on a regular basis.

8. TRANSFER OF DATA OUTSIDE THE EU OR EEA 

Data are not transferred outside the European Union or the European Economic Area.

9. PRINCIPLES OF REGISTER PROTECTION

The data are stored on a network drive to which access is restricted to officials of the Secretariat of the Matriculation Examination Board. The service provider of the network drive is the Government ICT Centre Valtori, which is responsible for its information security. 

10. DATA SUBJECT RIGHTS

Right of access 

The Secretariat of the Matriculation Examination Board provides data subjects with the right to access personal data concerning them.

Right to rectification 

The data subject has the right to have incorrect, inaccurate, incomplete, outdated or unnecessary data corrected or supplemented.

Right to erasure 

The data subject may request the deletion of their personal data from the systems of the Matriculation Examination Board. Measures requested will be carried out unless there is a justified reason not to delete the data, for example to fulfil statutory obligations. It may be that data is not deleted immediately from all backup or similar systems.

Right to object 

The data subject may request restrictions on the processing of their personal data where the data are processed for purposes other than the provision of the service or compliance with statutory obligations. The data subject may object to the future processing of their personal data, even where the processing is based on previously given consent.

Right to data portability 

The data subject has the right to receive their personal data in a structured and commonly used format in order to transfer them to another controller. The data subject may exercise their rights by contacting the controller. Every data subject has the right to lodge a complaint with the Data Protection Ombudsman regarding an alleged infringement related to the processing of personal data.

11. USE OF DATA IN AUTOMATED DECISION-MAKING AND PROFILING 

The data contained in the register are not used for profiling, nor are they subject to automated decision-making.