Suomi.fi Open Data service's privacy statement

Public and private organisations and communities, foundations and entrepreneurs are allowed use the Suomi.fi Open Data service when offering their open data to the public.  

The data in the service can be browsed and downloaded without registration. You must register to publish new data in the service.

1. Controller and ontact persons

Digital and Population Data Services Agency 
Lintulahdenkuja 2, 00530 Helsinki, Finland
PO Box 123, 00531 Helsinki, Finland
Telephone (switchboard) +358 295 536 000
Email kirjaamo(at)dvv.fi

Contact person in register-related matters
Anssi Ahlberg, Chief Specialist
Lintulahdenkuja 2, 00530 Helsinki, Finland
Telephone (switchboard) +358 295 536 000
Email kirjaamo(at)dvv.fi

2. Data Protection Officer

Telephone (switchboard) +358 295 536 000
Email tietosuoja@dvv.fi

3. Purpose and legal basis for processing of personal data

The provision and development of the open data and interoperability service (the Open Data service) is laid down in the first section of the decree of Ministry of Finance on the provision of certain shared support services for the electronic services of the public administration (900/2023).

In addition, Article 9 of the Open Data Directive of the European Parliament and the of Council (EU/2019/1024) defines the obligation to provide a centralised contact point, which is the Open Data service in Finland.

Users registered in the Open Data service can publish open data.

Data is processed for the following purposes:

  • The data registered in the user register is used to provide the service to users.
  • You can give feedback on the service with a feedback form.
  • The data can also be used to communicate on the service.

An event log is kept on the actions taken by logged-in users. The data in the event log will be used, where necessary, for the retrospective investigation of data processing activities that have taken place in the service and actions taken by the user. Personal data are processed as part of the provision of the Digital and Population Data Services Agency’s statutory services, i.e., on the basis of Article 6(1)(c) of the EU General Data Protection Regulation, in order to comply with the controller’s statutory obligation.

4. Personal data retention period

The data in the user register is retained until it is requested to be deleted. Users can request the deletion of their data by contacting the Digital and Population Data Services Agency by email at kirjaamo(at)dvv.fi or by mail (contact information can be found in section 1 of this statement).

The data in the event log is retained for as long as it is deemed necessary.

5. Personal data to be processed

The following have been recorded in the user register:

  • username and password selected by the person
  • email address, which can also be used for information purposes
  • time zone selected by the person (optional)
  • photo (optional)
  • user role applied for by the person and granted to the person by the service in the service
  • user role applied for by the person and granted to the person by the service as a representative of an organisation

The service also has admin users.

The feedback form records the following:

  • name
  • email address
  • date and time the feedback was sent

Details of the event log for the logged-in user:

  • user ID
  • event data time stamps
  • actions taken by the user, such as logging in and out, publishing and modifying data, and other possible actions

6. Standard sources of data

The data in the user register can be obtained via the person’s own notification or when the person registers on the website for opening of data. Service administrators and admin users grant users the roles needed to open and maintain data.

For the feedback form, the data is obtained via the individual’s own notification.

The data in the event log is saved on events made by the service user or admin user in the Open Data service.

7. Disclosure of data

The username and email address selected by the user are displayed in the service in connection with any data published by the user. Data stored on the user in the user register and the event log may be disclosed to the organisation represented by the user and to the user themselves.

The feedback provided can be passed on to parties that have published the data in the service.

On request, data from the event log can be disclosed, for example, to investigate error conditions.

Disclosure of information is carried out on the basis of legislation. 

8. Transferring data outside the EU or the EEA

Personal data will not be used for automated decision-making.

9. Automated decision-making

The Digital and Population Data Services Agency does not use the personal data in the avoindata.fi service in automated decision-making.

10. Data subject’s rights

Right of access

You have the right to gain access to your personal data and check its content.

When you have logged in to the service, you can view some of the data stored about you:

  • user ID
  • email address
  • name
  • photo
  • some of the events, such as the publication dates and update information of the material you have published

You can view the information stored in the user register via your profile by logging in to the Open Data service at www.avoindata.fi.

If you cannot check your information via electronic services, you can send a request for an inspection to the Digital and Population Data Services Agency’s registry. Be prepared to provide proof of identity.

Right to rectification

You have the right to correct your personal data when you observe that it is inaccurate or incorrect. You can change some of your details by logging in to the service. If this is not possible, submit the written request to the registry’s contact person. In the request for revision, state the information to be corrected and its exact change or addition. Be prepared to provide proof of identity.

However, you do not have the right to demand that the data in the event log register be corrected due to their nature, as there is a justified requirement for event data, or log data, to remain unchanged.

Limitations to the rights of the data subject

Most of the services provided by the Digital and Population Data Services Agency are based on compliance with the controller's statutory obligation or on the performance of a duty of public interest or the exercise of public authority. In these cases, you cannot request that your personal data be deleted or transferred to another system, and, as a rule, you cannot oppose the processing of your personal data.

11. Right to lodge a complaint with the supervisory authority

If you feel that your personal data is being processed unlawfully, you can file a com-plaint with the Office of the Data Protection Ombudsman.

Office of the Data Protection Ombudsman
Street address Lintulahdenkuja 4, 00530 Helsinki, Finland
Postal address PO Box 800, 00531 Helsinki, Finland
Email tietosuoja(at)om.fi
Switchboard +358 29 566 6700
Registry +358 29 566 6768

For additional information on filing a complaint, see the Office of the Data Protection Ombudsman website at https://tietosuoja.fi/.

12. Other information

This description of file can be accessed in the Open Data service at www.avoindata.fi and at the registry of the Digital and Population Data Services Agency.

For more information on the data protection of the Digital and Population Data Ser-vices Agency, see the Digital and Population Data Services Agency’s website at https://dvv.fi/en/data-protection.