Data protection rights related to the processing of personal data

The person whose data is processed has rights under the General Data Protection Regulation. These rights are described in more detail on this page and on the website of the Data Protection Ombudsman. 

In order to exercise the rights provided by the General Data Protection Regulation, the data subject should contact the Ministry’s Registry. To help us find your data, please state in your request the matter in which you have contacted the Ministry. We will ask you for more information, if necessary. Please note that for ensuring the confidentiality of your data, the Ministry of Transport and Communications must verify your identity.

To contact the Registry, email to [email protected]. You may also make a request in person by visiting the Government Registry at the Prime Minister’s Office at Ritarikatu 2 B, 00710 Helsinki.

Data protection rights of data subjects

Data subjects have the right to access their personal data. You may have access to data concerning you that the Ministry processes as the controller, unless the Ministry has legal grounds for refusing to enforce the right.

The data subject has the right to demand from the data controller, without undue delay, the rectification of any inaccurate or erroneous personal data concerning them.

The data subject has the right to request that the controller restrict the processing of the data subject’s data if one of the grounds listed in Article 18 of the Regulation applies, for instance if the data subject contests the accuracy of the personal data. 

The data subject has, on grounds relating to their particular situation, the right to object at any time to the processing of personal data concerning the data subject when the processing is based on the performance of a task carried out in the public interest. In such cases, the controller may no longer process personal data unless the controller can demonstrate that there is a very important and justified reason for the processing.

The data subject has the right to demand that the controller erase the personal data on the data subject without undue delay if the processing has been based on the data subject’s consent or if some of the other grounds referred to in Article 17 of the General Data Protection Regulations apply.

The data subject has the right to receive the personal data concerning them, which they have provided to the controller, in a structured, commonly used and machine-readable format and has the right to transmit that data to another controller if the processing is based on consent and the processing is carried out by automated means. The data subject also has the right to have their data transmitted directly from one controller to another provided that this is technically feasible.

The data subject has the right to withdraw consent to the processing of their personal data at any time by notifying the controller of this if the processing is based on consent.

The data subject always has the right to lodge a complaint concerning the processing of their personal data with a supervisory authority, the Data Protection Ombudsman. For more information, see the website of the Data Protection Ombudsman. 

For more information on the rights of the data subject and the processing of personal data by the services of the Ministry of Transport and Communications, please check the website of the Ministry of Transport and Communications or contact the Data Protection Officer of the Ministry of Transport and Communications at [email protected].