This privacy notice contains information to be disclosed with the data subject in accordance with Articles 13 and 14 of the General Data Protection Regulation of the European Parliament and Council. The notice contains information on how personal data is collected, used, disclosed and stored in the Finnish Environment Institute (Syke).
Syke has the right to make technical alterations to the privacy notice without notifying the data subject in advance.
Data controller and data protection officer
Finnish Environment Institute (Syke)
Latokartanonkaari 11
00790 Helsinki FINLAND
E-mail address: kirjaamo@syke.fi
Confidential e-mail address: https://securemail.ymparisto.fi
Tel. +358 295 251 000
Contact information:
Heli Karjalainen, service development director
heli.karjalainen@syke.fi
Data protection officer
tietosuojaSYKE@syke.fi
Legal basis for processing of personal data
We process your personal data to comply with the following legal obligation (Article 6(1) of the General Data Protection Regulation): Syke maintains the CITES permit application service for applying, processing, and issuing of permits and certificates required by CITES legislation according to the Council Regulation (EC) No. 338/97 and the Commission Regulation (EC) No. 865/2006.
Collected personal data and the purpose of processing it
The collected personal data are personal identification number, name and address information, as well as email address and phone number.
The personal data (name and address) is used in the permit applying, processing, and issuing process. The data become part of the final permit. Email address and phone number are used only for communication with the applicant during the permit application process.
When using Suomi.fi authentication, the system automatically retrieves the personal identification number of the logged-in private person, or the private person and the person authorized by her/him. These personal identification numbers are used to verify reading and editing rights related to applications and later for invoicing purposes. The personal identification numbers are appropriately encrypted at-rest and in-transit within the system.
Based on the collected personal data, no decisions are made automatically based on profiling.
No automatic decision making or profiling is made using the collected personal data.
Sources of personal data
The permit applicant or her/his representative provides the information when applying for a permit.
Recipients of personal data
Only Syke’s CITES permit authority can view personal data in the CITES permit application service.
Syke may deliver personal data to supervisory authorities upon request.
Protection of personal data
As the data controller, Syke has taken technical and organisational measures necessary to protect your personal data.
Storing of personal data
Personal data is restored indefinitely because the CITES legislation requires the preservation of CITES documents.
Your data protection rights related to using personal data
In this notice, we aim to provide an extensive explanation about processing of personal data in connection with the CITES permit application, processing and issuance process. If anything regarding our processing of personal data remained unclear, you may send in further questions to the contact person or Syke's data protection officer.
You have the following rights in accordance with the General Data Protection Regulation
You have the right to know how your data is used and for what purpose.
You have the right to receive a copy of your personal data used.
If any of your personal data used by us is inaccurate, you may request us to correct the inaccurate and faulty data. When we correct data based on your request, we are obliged, if possible, to inform all recipients to whom the personal data has been disclosed of the correction of the personal data.
You do not have the right to have your data deleted, as the processing is based on legal requirements. You do not either have the right to prevent the processing of your data or the right to have your data transferred to another system.
You do have the right to complain to the supervisory authority.
The supervisory authority is the Office of the Data Protection Ombudsman www.tietosuoja.fi/en.
Office of the Data Protection Ombudsman
Visiting address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: P.O. Box 800, 00531 Helsinki, Finland
E-mail: tietosuoja(at)om.fi
Switchboard: +358 (0)29 566 6700
Registry: +358 (0)29 566 6768