Controller
Finnish Food Authority
P.O. Box 100
FI-00027 FINNISH FOOD AUTHORITY
Tel. +358 29 530 0400 (switchboard), kirjaamo@ruokavirasto.fi
Contact person in matters related to the register
Matti Puolimatka
P.O. Box 100
FI-00027 FINNISH FOOD AUTHORITY
Tel. +358 29 530 0400 (switchboard), kirjaamo@ruokavirasto.fi
Contact details of the Data Protection Officer
Hanna Westinen
P.O. Box 100, FI-00027 FINNISH FOOD AUTHORITY
Tel. +358 29 530 0400 (switchboard)
tietosuojavastaava@ruokavirasto.fi
Purpose and legal basis for the processing of personal data
Law 1206/1994 of Agricultural Intervention Fund (MIRA); EU 907/2014; EU 1306/2013
Data content of the material to be processed
Regular sources of information
Customer, The Business Information System – YTJ.
Recipients to whom personal data is regularly disclosed
The Regional State Administrative Agency, the Centre for Economic Development, Transport and the Environment and the municipality are the joint controllers of the food administration’s information pool together with the Finnish Food Authority, each of which can use the data to carry out their own statutory duties.
Information may be disclosed on the basis of the Act on the Openness of Government Activities (621/1999).
Information may be disclosed to Ministry of Agriculture and Forestry of Finland, Tax Administration, Statistics Finland and Customs.
Transfer of data outside the EU/EEA or to an international organisation
Data from the register will not be disclosed outside the EU/EEA area.
Retention period of personal data
The data collected in the register will be stored only for as long and to the extent necessary in relation to the original or compatible purposes for which the personal data have been collected. Personal data stored in the register are deleted when there is no longer a legal basis for their processing, unless The National Archives of Finland has ordered them to be stored permanently. The retention periods are defined in the data management plan.
Principles of the protection of the register
The security of the register and the confidentiality, integrity and availability of personal data are ensured by appropriate technical and organisational measures.
Automated decision-making and profiling
Personal data are not used for automated decision-making or profiling.
Rights of the data subject
Right to review and rectify the data
The request for review must be presented in a signed document. Requests for review cannot be made over the phone. Anyone requesting information under the right to review the data may also request for review in person by visiting the controller. You need to be prepared to prove your identity. When information is requested, the information necessary for searching for and supplying the information must be provided. These include, for example, name, address and, if necessary, e.g. a social security number, the relevant data to be reviewed, and whether all data or data for a specific period of time are to be reviewed.
The form for making a request for review can be found at www.ruokavirasto.fi.
An individual request for review or rectification is made by submitting the request to the controller (kirjaamo@ruokavirasto.fi) or to the Data Protection Officer (tietosuojavastaava@ruokavirasto.fi).
Restrictions on the rights of the data subject with regard to the processing of personal data
The data subject does not have the right to request the deletion of their data, as the processing of data is based on legislation. For this reason, the data subject also has no right to object to the processing of their personal data or to have their data transferred to another system. There is also no right to restrict the processing of personal data pursuant to Article 18 of the EU General Data Protection Regulation (560/2021, Section 2.2).
In certain cases, the data subject has the right to have the processing of their personal data restricted pursuant to Article 18 of the EU General Data Protection Regulation.
Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with the supervisory authority if the data subject considers that the processing of their personal data is in violation to the applicable data protection regulations. The supervisory authority is the office of the Data Protection Ombudsman, whose contact details can be found at www.tietosuoja.fi.