The EU General Data Protection Regulation guarantees the data subject several rights that allow the data subject to order the processing of his or her personal data in a number of situations. The data subject may exercise the following rights in relation to Kårkulla insofar as Kårkulla acts as the controller of the data subject’s personal data in question. The scope and exercise of the rights depend on the basis on which the personal data are processed in accordance with data protection laws.
- Right of access to personal data
You have the right to receive a copy of your personal information that Kårkulla processes.
- Right to rectification of data
If there are any gaps or errors in your information, we must correct them immediately.
- Right to erasure of data and to ”be forgotten”
In certain situations, you have the right to demand that Kårkulla deletes the data concerning you. The right is also known as the right to be forgotten.
You have the right to have the data erased if the processing was based on consent, the data has been processed unlawfully or the data is no longer needed for the purposes for which it was collected.
This right does not exist if the processing is necessary for the performance of a statutory obligation, the performance of a task carried out in the public interest, the exercise of official authority or the establishment, presentation or defense of a legal claim.
- Right to restrict the processing of personal data
In certain situations, you have the right to restrict the active processing of data. For example, if you dispute the accuracy of your personal information, you have the right to demand that the processing of the data will be restricted during the period during which Kårkulla verifies the accuracy of the information.
- Right to object to the processing of personal data
You have the right to object to the processing of your personal data if the processing is based on tasks in the public interest, the exercise of official authority or legitimate interests, and you have a reason to object to the processing based on your specific personal situation. You also always have the right to object to the use of your information for direct marketing.
- Right to data portability
You have the right to receive the personal information you have provided to Kårkulla in a machine-readable form from us and transfer it to another organization if the processing is based on consent or agreement and the processing is automatic.
- Right to appeal
You have the right to complain to the supervisory authority if you believe that your personal data is being processed in breach of data protection laws or that Kårkulla is otherwise acting in breach of its data protection obligations. The competent supervisory authority in Finland is the Office of the Data Protection Ombudsman.
Exercise of the rights
If you wish to exercise any of your privacy rights, you can contact informationsskydd@karkulla.fi. In your message, please tell us at least what right you want to exercise and what personal information your request relates to.
Please note that we need to identify you in order to exercise all your rights. Therefore, we may ask you to visit our office and prove your identity before processing the request. You will need an identity card, such as a driver’s license or ID card, to identify yourself.
In principle, the exercise of data protection rights is free of charge. However, if the data subject’s requests are manifestly unfounded or unreasonable or if the person makes them repeatedly, Kårkulla may either refuse to comply with the request or charge an administrative fee of € 30.