Kuulutus 2024/1060

Privacy Policy

1. Name of Register

Photography consent and publication form

2. Controller

City of Kuopio

Business ID 0171450-7

Postal address: Kirjaamo, PL 228, 70101 Kuopio

Telephone switchboard: 017 182 111

Email: kirjaamo(at)kuopio.fi

https://www.kuopio.fi/en/frontpage/

https://www.kuopio.fi/en/city-of-kuopio/services-and-advice/processing-of-personal-data/

3. Controller Representative

Client Manager Petri Kervola

Telephone: 044 718 2062

4. Register Contact Persons

Photographer Vicente Serra

Telephone: 044 718 1644

Soile Nevalainen, Marketing and Communications Designer

Telephone: 044 718 2159

5. Data Protection Officer

Data Protection Officer, Telephone: 044 718 2854 Contact email: tietosuojavastaava(at)kuopio.fi

This email address is intended for general counselling, and is not suitable for processing personal matters for data protection reasons.

6. Purpose of Data Processing

Implementation of marketing and communications by the City of Kuopio. In addition, possible non-profit uses through co-operation organisations.

7. Legal Basis for Data Processing

Consent, EU 679/2016, Article 6.1 Section a

Contract, EU 679/2016, Article 6.1 Section b

8. Personal Data Confidentiality

-

9. Groups of Data Subjects

Information about persons identifiable from the photographs, those who have given their consent.

10. Processed Personal Data

Data processed

of those photographed:

-  First name

-  Last name

-  Photograph

11. Source of Personal Data

Personal data is obtained from the photographed persons themselves through the requested photography and publication permit, and from the parents of underaged children.

12. Personal Data Processing Systems and Paper Archives

The information is processed in the photography and publication permits as well as in the case management system.

Data protection:

The City of Kuopio ensures that its electronic systems have a sufficient level of data protection and privacy. The systems can only be used by persons who have personal authorisation to do so. The City stores data on paper in protected and supervised facilities with access control and locked doors.

13. Automatic Decision-Making and Profiling

Personal data is not used for automatic decision-making or profiling.

14. Regular Transfer of Personal Data, Recipient Groups

Photographs are processed in the image banks administered by the City of Kuopio and located in an open information network. Photographs are published in various publications, brochures and websites of the City of Kuopio and in social media channels administered by the City.

Co-operative partners:

The City of Kuopio has a number of co-operative partners who may process personal data of the City. These are, for instance, ICT service providers and invoicing service providers. The City of Kuopio ensures the principles of the processing of personal data with co-operative partners through agreements and guidance.

15. Transfer of Personal Data Outside the EU/ETA, Third-Party Countries or International Organisations

The City of Kuopio stores personal data concerning the photographs only for as long as and in the scope that is necessary. The City stores and destroys electronic data and data on paper securely and taking data security into account, in accordance with the Archive Act (831/1994) and the Act on Information Management in Public Administration (906/2019).

16. Storage of Personal Data

Storage period

Fast news stream photographs: own need + validity of consent.

Historical, important and significant photographs: 50 years + validity of consent.

Photographs subject to agreement can be stored for the period of validity of consent plus 50 years.

Storing and destruction of personal data:

The City of Kuopio stores personal data only for as long as and in the scope that is necessary. The City stores and destroys electronic data and data on paper securely and taking data security into account, in accordance with the Archive Act (831/1994) and the Act on Information Management in Public Administration (906/2019).

17. Individual’s rights

An individual has a number of rights, which may vary according to the situation. Further information can be obtained from the Data Protection Officer and the website of the Office of the Data Protection Ombudsman.

-         An individual has the right to know if personal data concerning the individual is processed, or not processed.

-         An individual has the right to know about the processing of their personal data.

-         An individual has the right to have access to the data, i.e. inspect their personal data and receive a copy of it.

-         An individual has the right to correct inaccurate or false personal data.

-         An individual has the right to have their data removed and to “be forgotten”. This right does not apply to cases where, for instance, the processing is done due to a legal obligation.

-         An individual has the right to request the controller to restrict the processing of the data.

-         An individual has the right to have their data transferred to another controller via a copy or directly, if technologically possible.

-         An individual has the right to oppose the processing of the data. This also applies to profiling, which means the automatic processing of characteristics related to an individual.

-         An individual has the right not to be the object of a decision which is solely based on automatic data processing, and which has a significant impact on the individual. This also applies to profiling, which means the automatic processing of characteristics related to an individual.

-         An individual has the right to retract their consent, if the processing of personal data is based on consent.

-         An individual has the right to know about a personal data security breach, if the breach causes a high risk to the protection of the individual’s privacy.

-         An individual has the right to file a complaint to the supervisory authority, if the individual believes that the Data Protection Regulation is being violated.

-         An individual has the right to access personal data processing information, or log information, in the fields of health care and social welfare.

18. Exercising of Rights

Information on the processing of personal data can be obtained from the privacy policies of the City of Kuopio. In addition, the City personnel and the Data Protection Officer can provide information on the processing of personal data. You should contact the City if you notice any deficiencies in the processing of personal data.

An individual can make a personal data request to the City electronically or by paper form. The electronic service and a printable form can be found on the website of the City. You can also request a paper form from the City personnel or the Data Protection Officer.

Personal data requests to the City of Kuopio:

https://www.kuopio.fi/en/city-of-kuopio/services-and-advice/processing-of-personal-data/

Data requests are usually free of charge. The City may charge a fee if the data request is unreasonable, recurrent or the individual requests several copies of the data.

The City usually responds to a data request within a month, or will notify of a delay. The City may decline a data request, if there is a statutory and justified reason for it. The refusal may be based on the Data Protection Regulation (EU 679/2016), the Data Protection Act (1050/2018), the Act on the Openness of Government Activities (621/1999) or special legislation in different areas.

The Office of the Data Protection Ombudsman is a supervisory authority responsible for supervising the processing of personal data in Finland. An individual has the right to file a notification and a complaint to the Office of the Data Protection Ombudsman in matters related to the processing of personal data. A notification and complaint can be filed for example in instances where an individual does not accept the refusal of a request for personal data or notices a deficiency in the processing of personal data. An individual may also have other statutory means of appeal and legal remedies.

Contact information on supervisory authority:

Office of the Data Protection Ombudsman

Postal address: PL 800, 00531 Helsinki

Telephone switchboard: 029 566 6700

https://tietosuoja.fi/en/home

https://tietosuoja.fi/en/contact-information