Privacy policy: Mental health support measures and methods, providing support for various sectors (Mental Health Toolkit) project

Privacy policy of the Mental Health Toolkit project (2023–2025).

Description of the register 

The project is a fixed-term (16 January 2023 – 30 March 2025) project “Mental health support measures and methods, providing support for various sectors”, funded by the Finland’s Sustainable Growth Programme (investment P3, C1, I3): Mental Health Toolkit (Mental health as part of work ability management). The Finnish Institute of Occupational Health receives the funding for the project via the Ministry of Social Affairs and Health. The quantitative objective of the project is to reach 600 Finnish workplaces and occupational health care units and offer them support in using the Mental Health Toolkit.

Why and on what basis do we process personal data? 

The basis for processing personal data is collecting data on the participants of the activities carried out with funding from the project, as defined by the terms of funding and the agreement between the Finnish Institute of Occupational Health and the Ministry of Social Affairs and Health. The processing is based on the act on the management, oversight and auditing of the European Union Recovery and Resilience Facility (537/2022), meaning the basis constitutes a statutory requirement. The data will be saved to enable the European Union to possibly verify/audit the project.

What personal data do we process? 

We process the following personal data: 
Name of the person 
Work telephone number of the person 
Name of the workplace 
Name of the work unit

How do we obtain your personal data? 

The personal data is obtained from the data subjects in connection with their registration and/or participation. The data is collected by using the KTJ system at the disposal of the Finnish Institute of Occupational Health.

For which purposes do we disclose personal information? 

The data on the number of participants and their employers are disclosed to a personal data register of the oversight commission of the Ministry of Social Affairs and Health’s Sustainable Growth Programme P3 Mental health and work ability investment.

We use the services of IT service providers that provide us with technical solutions for data processing. Personal data is processed in IT services suitable and secure for each type of data. The Finnish Institute of Occupational Health has an agreement with each IT service provider, and the terms and conditions for the processing of personal data have been defined.  

Do we transfer personal data outside the EU/EEA area? 

We will not transfer data outside the EU/EEA area in this context.  

For how long do we store personal data? 

The data will be stored until the end of the year 2032, after which they will be erased.

Do we conduct automated decision-making or profiling? 

We will not conduct automated decision-making or profiling.

What does the provision of information signify? 

The data is collected in order to verify participation in the measures. The provision of information is based on the act on the management, oversight and auditing of the European Union Recovery and Resilience Facility (537/2022).

Your rights 

You have several rights in regard to your personal data, which vary according to the situation. You can submit a request to the Finnish Institute of Occupational Health regarding your personal data either as a free-form request in writing or by using a form provided by the Finnish Institute of Occupational Health. Submit the request to the Data Protection Officer of the Finnish Institute of Occupational Health.  

Right to access and inspect data 

You have the right to access and inspect your personal data. As a rule, the right of inspection is personal. The data can only be provided to the person in question or to their legal representative.

Right to rectification 

You have the right to rectify your personal data.

Right to erasure (“right to be forgotten”) 

You do not have the right to have the data erased.

Right to transmit data to another data controller 

You do not have the right to transfer the data to another controller.

Right to restrict the processing of data 

You have the right to request a restriction on the processing of personal data in situations defined in the data protection regulation.

Right not to be subject to decisions made solely based on automated processing 

The Finnish Institute of Occupational Health does not carry out automated decision-making based on the register.

Right to be informed of a data breach 

You have the right to be informed of a data breach if the breach poses a high risk to privacy protection. We will process any personal data breaches as soon as they are discovered and, if necessary, notify the supervisory authority and data subjects in accordance with the Data Protection Regulation.

Requests for documents concerning personal data in accordance with the Act on the Openness of Government Activities  

You can also make requests for documents in accordance with the Act on the Openness of Government Activities (621/1999) regarding confidential matters, if the document concerns you or if you are a party to the matter.

Contact details of the controller and the Data Protection Officer 

Finnish Institute of Occupational Health, P.O. Box 40, FI-00032 Finnish Institute of Occupational Health, switchboard +358 (0)30 474 1 
Finnish Institute of Occupational Health 
The Data Protection Officer's phone number is +358 (0)30 474 2429 and email is tsv(at)ttl.fi  
In the case of confidential matters, you may also send the Finnish Institute of Occupational Health a secure email message. You must have a valid email address and telephone number in order to communicate securely with the Finnish Institute of Occupational Health. 
Send a secure email message to the Finnish Institute of Occupational Health 

Contact information of the regulatory authority 

The Office of the Data Protection Ombudsman is the data protection authority in Finland, which provides information on personal data processing and receives complaints. 
Office of the Data Protection Ombudsman
Contact information of the Office of the Data Protection Ombudsman