Controller
Finnish Food Authority
Mustialankatu 3, 00790 Helsinki
Tel. +358 29 530 0400 (switchboard), kirjaamo@ruokavirasto.fi
Contact person in matters related to the register
Carmela Hellsten, Annukka Markkula and Sari Sippola
P.O. Box 100, FI-00027 FINNISH FOOD AUTHORITY
Tel. +358 29 530 0400 (switchboard)
Contact details of the Data Protection Officer
Hanna Westinen
P.O. Box 100, FI-00027 FINNISH FOOD AUTHORITY
Tel. +358 29 530 0400 (switchboard)
tietosuojavastaava@ruokavirasto.fi
Purpose and legal basis for the processing of personal data
Registration grounds:
Food Act (297/2021)
Decree of the Ministry of Agriculture and Forestry on food control (315/2021)
EU Official Controls Regulation (625/2017)
Commission Regulation (EC) on marketing standards for eggs (589/2008)
Commission Regulation (EC) on marketing standards for eggs for hatching and farmyard poultry chicks (617/2008)
Repealed Food Act 23/2006
Decree of the Ministry of Agriculture and Forestry 118/2006, repealed 1397/2019
Purpose for the processing:
Management of customer and operator information of food and contact material control sites subject to the Food Act.
Data content of the material to be processed
Food premises; Approved food premises; Primary production sites; Contact material sites; First destinations
Information related to the safety of food products and contact materials and their processing. Information related to monitoring and controlling the quality of food products in accordance with food provisions. Information related to controlling national commercial activity.
Main categories of data: Operator information; Operation information; Codes and classifications; Operating location information; Control information; Realization and monitoring information
Regular sources of information
Reports by food and contact material operators, control information submitted by municipal food authorities, and the information gathered during inspections by the Finnish Food Authority
Recipients to whom personal data is regularly disclosed
The Regional State Administrative Agency, the Centre for Economic Development, Transport and the Environment and the municipality are the joint controllers of the food administration’s information pool together with the Finnish Food Authority, each of which can use the data to carry out their own statutory duties.
Information may be disclosed on the basis of the Act on the Openness of Government Activities (621/1999).
Transfer of data outside the EU/EEA or to an international organisation
Data from the register will not be disclosed outside the EU/EEA area.
Retention period of personal data
The data collected in the register will be stored only for as long and to the extent necessary in relation to the original or compatible purposes for which the personal data have been collected. Personal data stored in the register are deleted when there is no longer a legal basis for their processing, unless The National Archives of Finland has ordered them to be stored permanently. The retention periods are defined in the data management plan.
Principles of the protection of the register
The security of the register and the confidentiality, integrity and availability of personal data are ensured by appropriate technical and organisational measures.
Automated decision-making and profiling
Personal data are not used for automated decision-making or profiling.
Rights of the data subject
Right to review and rectify the data
The request for review must be presented in a signed document. Requests for review cannot be made over the phone. Anyone requesting information under the right to review the data may also request for review in person by visiting the controller. You need to be prepared to prove your identity. When information is requested, the information necessary for searching for and supplying the information must be provided. These include, for example, name, address and, if necessary, e.g. a social security number, the relevant data to be reviewed, and whether all data or data for a specific period of time are to be reviewed.
The form for making a request for review can be found at www.ruokavirasto.fi.
An individual request for review or rectification is made by submitting the request to the controller (kirjaamo@ruokavirasto.fi) or to the Data Protection Officer (tietosuojavastaava@ruokavirasto.fi).
Restrictions on the rights of the data subject with regard to the processing of personal data
The data subject does not have the right to request the deletion of their data, as the processing of data is based on legislation. For this reason, the data subject also has no right to object to the processing of their personal data or to have their data transferred to another system. There is also no right to restrict the processing of personal data pursuant to Article 18 of the EU General Data Protection Regulation (560/2021, Section 2.2).
In certain cases, the data subject has the right to have the processing of their personal data restricted pursuant to Article 18 of the EU General Data Protection Regulation.
Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with the supervisory authority if the data subject considers that the processing of their personal data is in violation to the applicable data protection regulations. The supervisory authority is the office of the Data Protection Ombudsman, whose contact details can be found at www.tietosuoja.fi.