1. Data controller
Regional Council of Kainuu (Kainuun liitto)
87100 Kajaani, Finland
+358 40 722 0900 (registry office)
At the office of Regional Council of Kainuu, the regional board is the official data controller.
2. Point of Contact
For more information regarding the data protection, please contact our Data Protection Officer, an internal expert who monitors the processing of personal data and assists the official data controller in complying with the data protection regulations.
Administrative Director Paula Halonen
+358 44 4100 728
3. Purpose of personal data processing and basis for processing
The Kainuu.fi website is open to everyone to read without logging in and providing their personal information.
The site includes a contact form that asks for personal information.
- The contact form can be used to contact the website administration in any matter related to the Kainuu.fi website. The form is automatically sent to the registry office of Regional Council of Kainuu for processing.
- Personal information is requested in order for the administration to provide an answer to the feedback or question provided by the sender. The contact data will be deleted once the feedback has been processed.
- If the message/ feedback received via the contact form relates to an official matter to be recorded in the data management system, the information will be archived in accordance with the archiving instructions of the Regional Council of Kainuu.
4. Personal Information Requested on the Online Form
The following information can be requested from the online form:
- E-mail address
- Phone number
5. Data subject’s rights
The data subject has following rights regarding their data. Any requests shall be directed to the data controller at address firstname.lastname@example.org.
Right to obtain access to the information (Right of Access)
The data subject shall have the right to inspect which data concerning them has been stored in the register.
Right to require the rectification of data
The data subject shall have the right to rectify or supplement erroneous or deficient piece of information found in the register.
Right to object to the processing of personal data
The data subject shall have the right to object to the processing of their personal data, if they feel that the data controller has not complied with the applicable data protection regulation in its operations.
Right to object to direct marketing
The data subject may issue the Data Controller prohibitions pertaining to direct marketing.
Right to require erasure of data
The data subject has the right to request the deletion of the data if they feel that processing of their data is not necessary. The data controller will process the erasure request, after which we will either erase the data or provide a valid reason why the data cannot be erased.
It should be noted that the data controller may have a statutory or other right not to erase the information as requested by the data subject. The data controller is obliged to keep the accounting material in accordance with the period (10 years) specified in the Accounting Act (Chapter 2, Section 10). Therefore, any accounting materials cannot be deleted before the deadline.
Withdrawal of consent
If processing of the personal data concerning the data subject is only based on consent and not on, for example, customer relations or membership, the data subject may withdraw their consent.
The data subject shall have the right to lodge a complaint with the competent supervisory authority regarding the decisions of data controller. The data subject has the right to demand that we therefore limit the processing of the disputed data until the matter is resolved.
Right to lodge a complaint with the supervisory authority
The data subject shall have the right to lodge a complaint with the competent supervisory authority, if the data controller has not complied with the applicable data protection regulation in its operations.
The contact information of the supervisory authority are found at: https://tietosuoja.fi/en/contact-information.
6. Regular sources of information
Personal data is collected from the customers themselves, using the electronic forms available on the Kainuu.fi website.
7. Regular disclosures of information
As a rule, the data will not be disclosed outside the office of Regional Council of Kainuu, unless the nature of the feedback/ request received doesn’t require that. The data is never disclosed to commercial purposes.
8. Personal data retention period
As a rule, the data concerning a person will be erased from the register as soon as the feedback/ request received has been handled.
9. Data processors
The staff at our registry office and other office staff needed to process the feedback/ requests received via the online form have access to the personal information gathered.
It is possible that we partly outsource processing of the personal information to third parties. In these cases, it is made sure by a contract that the information is handled complying with the data protection regulations and otherwise with due care and respect.
10. Transfer of data outside of the EU or EEA
Personal data is not transferred outside of the European Union or the European Economic Area.
11. Automated decision-making and profiling
The information in the register is not utilized for decision-making entailing legal effects for the person and that is based on automated data processing, such as profiling.
12. Cookies and browser management
We collect information about your device on our website using cookies and other similar technologies, such as the browser’s local storage. A cookie is a small text file that a browser stores on a your device. Cookies often contain an anonymous, unique identifier that allows us to identify and count the browsers that visit our site.
We use the Google Analytics service on our page.