Processing of personal data in the member and stakeholder data filing system of the Confederation of Finnish Industries (EK)

Information pursuant to Article 14 of the EU General Data Protection Regulation (2016/679) on processing personal data

1. Name of the filing system

The name of the filing system is the Member and stakeholder data filing system of the Confederation of Finnish Industries

2. Controller and contact person for the filing system

The controller is the Confederation of Finnish Industries (hereinafter EK) (address Eteläranta 10, FI-00130, phone +358 9 420 20, email ek@ek.fi). EK and each of its member associations process the personal data of their contact persons as joint controllers. EK’s member associations are listed on the EK website at: https://ek.fi/en/about-us/member-associations-2/. The filing system’s contact person is Marika Punkka, Adviser (marika.punkka@ek.fi, tel. +358 44 536 4042).

3. Purpose and grounds for the processing of personal data

The personal data in the filing system shall be used for:

• managing EK’s membership matters
• communication with stakeholders necessary for EK’s operation and
• implementation of statistics and surveys produced by EK.

The processing of personal data in the filing system is based on Article 6, paragraph 1f on legitimate interests pursued by the controller in the EU General Data Protection Regulation (2016/679). The legitimate interest comprises carrying out the aforementioned duties. The data subjects are persons with a relevant connection with EK, either as a contact person of a member association or as a stakeholder representative.

4. Categories of data subjects and data included in the filing system

The filing system includes information on member associations and their contact persons as well as information on stakeholder persons necessary for the operation of EK. Personal data deemed necessary for the purposes specified in section 4 are processed in the filing system. Such data include, especially:

• forename and surname
• title, degree and role (area of responsibility in the organisation)
• contact information (email address, phone number and address)

5. Regular sources of information

The information on the contact persons of EK’s member associations is mainly obtained from the data subjects themselves or from the member associations, which report those persons as their contacts. In addition, the websites of the member associations and their stakeholders and authorities and the companies providing services concerning company and personal data are used as data sources and for updating the data.

6. Regular disclosure of data

EK discloses the data it maintains in the stakeholder person filing system to the EK member associations which use the filing system. The member associations may use the data for communication with the stakeholders necessary for their operation. The data of EK’s stakeholder persons, member associations and contact persons of the member associations can, as necessary, also be distributed within the EK Group, including EK-Tieto Oy and its associate company Työsuhdejuristit Oy.

7. Transferring data outside the EU or EEA

The personal data contained in the filing system shall not be transferred outside the EU or EEA.

8. Storage of the data

The personal data contained in the filing system shall be inspected at regular intervals, and as a rule on an annual basis. Unnecessary data shall be erased and faulty information rectified.

9. Right of inspection

The data subject has the right to receive information on what kind of information about him or her is processed in the filing system. The data subject may make a request to inspect the information concerning him or her to the contact person mentioned in section 2 of the statement.

10. Right to demand rectification and right to request erasure or restriction of processing the data

The data subject may make a request to the contact person specified in section 2 to have his or her personal data rectified or completed. The data subject has, in situations specified in the EU General Data Protection Regulation, the right to request erasure or restriction of processing the data concerning him or her.

11. Right to object to processing of personal data

The data subject has, pursuant to the EU General Data Protection Regulation, the right to object to the rocessing of personal data on grounds relating to his or her particular situation.

12. Right to lodge a complaint with the Data Protection Supervisor

The data subject has, pursuant to the EU General Data Protection Regulation and the Data Protection Act, the right to lodge a complaint with the Data Protection Supervisor on processing the personal data described in the statement.