Kuulutus 2024/41

Privacy notice of Subjective well-being survey - for residents of the North Savo region 2024

This privacy notice informs about the processing of personal data in accordance with Articles 12, 13 and 14 of the EU General Data Protection Regulation. References in the form of "you" in the privacy policy refer to the data subject.

1. Data Controller

Wellbeing services county of North Savo

kirjaamo@pshyvinvointialue.fi

PL 1711

70211 Kuopio

Y-ID: 3221316-6

The contact person concerning the processing of personal data:

Säde Rytkönen

HYTE (health and wellbeing) and participation manager

Wellbeing services county of North Savo

North Savo HYTE and participation unit KYS/Puijo hospital, building 6, 6. floor

Puijonlaaksontie 2

PL 1711, 70211 KUOPIO

sade.rytkonen@pshyvinvointialue.fi

p. 044 717 6370

Data protection officer’s contact information: tietosuoja@pshyvinvointialue.fi.

2. Name of the personal data register

Subjective well-being survey - for residents of the North Savo region

3. Purpose of processing data  

Personal data is processed for the following purposes:

The survey provides important information about the well-being experienced by the residents of the area. The information is used as part of the welfare report and plan of the Wellbeing services county of North Savo and the municipalities, as well as the annual report: https://www.hyvinvointikertomus.fi/

Information is processed by wellbeing services county, by municipality and by postcode area (by postcode area, if there are enough respondents, i.e. at least five (5) answers). In addition, an analysis is carried out by background variables.

4. Lawful basis for processing personal data

The processing of personal data is based on:

Article 6 paragraph 1e of the EU General Data Protection Regulation

(point 1 e: the processing is necessary for public authority belonging to the controller

to use)

Act on Organisation of Healthcare and Social Welfare Services 612/2021, §6 and §7

5. Personal data processed

Personal data is obtained from the data subject himself/herself: Yes

The provision of personal data is not a legal or contractual/contractual requirement. Answering the subjective well-being survey for residents of the North Savo region is completely voluntary.

In connection with the processing of personal data, the following categories of personal data are processed:

- General personal data: contact information, i.e. telephone number or e-mail address, is requested on a separate form if participating in a raffle. This information cannot be combined with other information you provide in the subjective well-being survey.

- Special categories of personal data: Language selection is made, i.e. in which language do you want to answer. In addition, we ask whether the person is discriminated against and on what grounds.

- Technical personal data: No

- Other types of personal data: gender, age, background information whether student, pensioner, unemployed, employed, entrepreneur, farmer or other. In addition, we ask; how the respondent lives, which municipality he lives in and zip code area, experience of everyday well-being, life situation, how satisfied he is with it and the well-being produced by the area of ​​residence and the experience of discrimination.

6. Regular sources of personal data

From the registered person, i.e. from the person who answered the survey.

7. Regular transfer or disclosure of personal data

- Personal data is processed and accessed by the persons responsible for implementing the survey.

- Wellbeing services county of North Savo, Strategy and development personnel

  - The coordinators of wellbeing promotion of the municipalities of North Savo or other persons in municipalities who procedures data as part of the municipality's welfare report and plan.

  - Diaconia University of Applied Sciences (Diak), researcher Sakari Kainulainen

  - Students, trainees and researchers, with whom a separate agreement is made on the processing and handing over of material

  - ICT service producers

8. Transfer and disclosure of data outside the EU or EEA

Personal data is transferred outside the EU or EEA to third countries or international organisations.

8.1. If data is transferred, indicate an appropriate basis for the transfer used and other supplementary safeguards

If data is transferred outside the EU or EEA, we use the following appropriate basis for the transfer:

Microsoft Office 365 service and Surveypal program is transferred personal data outside the EU or EEA. These services and the program comply with the EU's General Data Protection Regulation (GDPR), which regulates the transfer of personal data outside the EU.

9. Principles of register protection

We protect personal data by implementing technical and organisational safeguards, such as:

- Personal data is processed in the electronic survey, analysis and reporting applications used in the Wellbeing services county of North Savo. The service providers of the electronic survey programs used are committed to protecting the personal data maintained in the application in accordance with the current legislation on data protection and information security.

- Access to the survey information system is protected with a username and password, which only those who worked on the survey can use.

- Information is stored in electronic systems (paper forms are not used)

- The data protection and information security guidelines of the Wellbeing services county of North Savo are followed.

- The personnel of the Wellbeing services county of North Savo have completed a mandatory information security and data protection course, and are bound by confidentiality

- The material is processed, archived and published in such a way that it is not possible to identify the respondents

10. Profiling and automated decision-making

Personal data is not used for profiling or automated decision-making

11. Retention period of personal data

The data from the subjective well-being survey – for residents of the North Savo region will be stored until the end of 2035, after which the personal data will be completely anonymized.

The contact information (name, phone, address, e-mail address) of the participants in the lottery will be destroyed as soon as we reach the lucky winners. The raffle is conducted by the HYTE and participation manager, together with his employees in the Wellbeing services county of North Savo. Contact information is only used to run the draw and deliver the gift card to the winners.

12. Rights of the data subject

Data protection legislation grants you certain rights to ensure the protection of privacy, which is a fundamental right. If you wish to exercise your right, please contact Wellbeing Services county of North Savo (Pohjois-Savon hyvinvointialue), Kirjaamo, PL 1711, 70211 KUOPIO or kirjaamo@pshyvinvointialue.fi.

Not all of the rights of the data subject can be exercised in all situations, depending on factors such as the basis for the processing of personal data. If your rights can´t be exercised the data controller will implement the appropriate and necessary safeguards required by law.

12.1 The right to withdraw consent

Where processing is based on consent, you have a right to withdraw your consent at any time by contacting the data processing contact person of the data controller.

12.2. Right of access by the data subject

You have the right to obtain from the data controller confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data. The data controller must provide you a copy of the personal data undergoing processing. The right to obtain a copy shall not adversely affect the rights and freedoms of others.

12.3. Right to rectification

You have a right to obtain from the data controller without undue delay the rectification of inaccurate personal data concerning you. The data controller assesses whether the data you have requested to be rectified is incomplete, inaccurate or incorrect.

12.4. Right to erasure (‘right to be forgotten’)

You have a right to obtain from the data controller the erasure of personal data concerning you.

12.5. Right to restriction of processing

You may have the right to restrict the processing of personal data in cases provided for by law. The right to restriction may be considered, for example, if you consider that the personal data concerning you are incorrect, processed unlawfully or you have objected to the processing of your data. In this case, we may only process your personal data with your consent, for the establishment, exercise or defence of legal claims, for reasons of public interest or to protect the rights of another person.

12.6. Right to object

You have a right to object processing of personal data concerning you.

 12.7. Right to lodge a complaint with a supervisory authority

You can notify the Data Protection Ombudsman if you suspect that the data controller is processing personal data in violation of data protection regulations.

Office of the Data Protection Ombudsman

Postal address: P.O. Box 800, 00531 Helsinki, Finland

E-mail: tietosuoja(at)om.fi

Switchboard: +358 (0)29 566 6700