Data security and processing of personal data in Turku Science Park Ltd
The rights of data subjects
If your data is included in registers containing personal data described in Turku Science Park Ltd’s privacy statement, you have the following rights:
1. Right to access the data
A data subject has the right receive a confirmation from the controller that personal data concerning him/her is processed or is not processed, and, if personal data is processed, the right to receive a copy of the personal data and the following information: a) purposes of the processing; b) the personal data groups in question; c) recipients or recipient groups, especially recipients in third countries or international organisations to which personal data has been or is intended to be disclosed ; d) where possible, the planned storage period of the personal data or, if it is not possible, the criteria for determining that period; e) the right of the data subject to request the controller to rectify or erase the personal data concerning himself/herself or restrict the processing of personal data or object to such processing; f) the right to file a complaint to a supervisory authority; g) if personal data is not collected from the data subject, all information available on the origin of the data; h) existence of automatic decision-making and profiling, and at least in these cases the relevant information on the logistics related to the processing of the data, and the relevance of the said processing and possible consequences to the data subject.
2. Right to rectify the data
A data subject has the right to demand that the controller rectify without undue delay any inaccurate and false personal data concerning the data subject. Considering the purposes for which the data is processed, the data subject has the right to have the incomplete personal data completed, e.g. by supplying an additional report.
3. Right of erasure
A data subject has the right to have the controller to erase the personal data concerning the data subject without undue delay, and the controller is obliged to erase the personal data without undue delay, with certain exceptions.
4. Right to restrict the processing of data
A data subject has the right to have the controller restrict the processing of data in one of the following cases: a) the data subject contests the correctness of the personal data; b) the processing is unlawful and the data subject objects to the erasure of the personal data and demands instead that their use be restricted; c) the controller no longer needs the personal data in question but the data subject needs it for the establishment, exercise or defence of legal claims; d) the data subject has objected to the processing of personal data by virtue of Article 21, point 1, while waiting whether the controller’s legitimate grounds will override the data subject’s grounds.
5. Right to data portability
A data subject has the right to receive the personal data concerning him/her, which he/she has supplied to the controller, in an organised, commonly used and machine-readable format, and the right to transfer the said data to another controller without being obstructed by the controller to which the personal data has been supplied, if:
a) the processing is based on a consent or agreement; and
b) the processing is performed automatically.
6. Right to object
A data subject has the right, on grounds related to his/her personal specific situation at any time, object to the processing of the personal data concerning him/her which is based on the exercise of public authority or legitimate interest or concerns direct marketing.
7. Right to complain
If you consider that the processing of personal data violates the valid legislation, you have the right to file a complaint with the supervisory authority, the Data Protection Ombudsman. Website of the Office of the Data Protection Ombudsman.
Request concerning the processing of personal data
You can send a request related to your personal data by e-mail to firstname.lastname@example.org.