Privacy policy: Mental health support measures and methods, providing support for various sectors (Mental Health Toolkit) project

Privacy policy of the Mental Health Toolkit project (2023–2026).

Description of the register 

The project is a fixed-term (16 January 2023 – 30 April 2026) project funded by the Sustainable Growth Programme for Finland (investment P3, C1, I3), titled Mental health support measures and methods, providing support for various sectors: Mental Health Toolkit (Mental health as part of work ability management). The Finnish Institute of Occupational Health receives funding for the project via the Ministry of Social Affairs and Health. The quantitative objective of the project is to reach 1000 Finnish workplaces and occupational health care units and offer them support in using the Mental Health Toolkit. The Finnish Institute of Occupational Health processes project participant data on behalf of the Ministry of Social Affairs and Health.

Why and on what basis we process personal data to verify participation: 

The basis for processing personal data is collecting data on the participants of the activities carried out with funding from the project, as defined by the terms of funding and the agreement between the Finnish Institute of Occupational Health and the Ministry of Social Affairs and Health. The processing is based on the act on the governance, oversight and auditing of the European Union Recovery and Resilience Facility (537/2022), meaning the basis constitutes a statutory requirement. The data will be saved to enable the European Union to possibly verify/audit the project.

What personal data we process to verify participation:

We process the following personal data: 

Name of the person
Work telephone number of the person
Job title of the person
Name of the workplace
Name of the work unit
Email address
Work unit address

Where we obtain the personal data

The personal data is obtained directly from the person in connection with their registration and/or participation. The data is collected with a training and event information system used by the Finnish Institute of Occupational Health. More information on the system is available on the website of the Finnish Institute of Occupational Health: Training and event register | Finnish Institute of Occupational Health.

For which purposes we disclose personal information

The data on the number of participants and their employers is disclosed to a personal data register for the oversight of the Ministry of Social Affairs and Health’s Sustainable Growth Programme P3 Mental health and work ability investment.

We use IT service providers that offer technical solutions for data processing. Personal data is processed in IT services suitable and secure for each type of data. The Finnish Institute of Occupational Health has an agreement with each IT service provider, and the terms and conditions for the processing of personal data have been defined.

Do we transfer personal data outside the EU/EEA 

We will not transfer data outside the EU/EEA area in this context.

How long we retain the personal data

The data related to verifying participation will be retained until the end of 2032, after which it will be erased.

Whether we conduct automated decision-making or profiling 

We will not conduct automated decision-making or profiling.

What it means to give us data 

Data is collected to verify participation in the project measures. The provision of data is based on the act on the governance, oversight and auditing of the European Union Recovery and Resilience Facility (537/2022).

Your rights  

You have several rights in regard to your personal data, which vary according to the situation. You can submit a request to the Finnish Institute of Occupational Health regarding your personal data either by using a form provided by the Finnish Institute of Occupational Health or as a free-form written request. Submit the request to the Data Protection Officer of the Finnish Institute of Occupational Health.

Right to access and inspect data 

You have the right to access your data and inspect your personal data.

As a rule, the right of inspection is personal. The data can only be provided to the person in question or to their legal representative.

Right to rectification

You have the right to rectify your personal data.

Right to erasure (“right to be forgotten”) 

You do not have the right to have the data erased.

Right to transmit data to another controller

You do not have the right to transfer the data to another controller.

Right to restrict the processing of data 

You have the right to request a restriction on the processing of personal data in situations defined in the data protection regulation. 

Right not to be subject to automated decision-making

The Finnish Institute of Occupational Health does not carry out automated decision-making based on the register.

Right to be informed of a data breach 

You have the right to be informed of a data breach if the breach poses a high risk to privacy protection. We will process any personal data breaches as soon as they are discovered and, if necessary, notify the supervisory authority and data subjects in accordance with the Data Protection Regulation.

Contact details of the data processor and the Data Protection Officer related to the verification of participant data

Finnish Institute of Occupational Health, P.O. Box 40, FI-00032 Finnish Institute of Occupational Health, switchboard +358 (0)30 474 1.

Contact the Data Protection Officer by phone at +358 (0)30 474 2429 or by email at tsv(at)ttl.fi.

To handle a confidential matter, you can send a secure email to the Finnish Institute of Occupational Health. You must have a valid email address and telephone number to communicate securely with the Finnish Institute of Occupational Health.

Secure email to the Finnish Institute of Occupational Health: Securedmail.eu - secure message.

Contact details of the controller and the Data Protection Officer related to the verification of participant data

Finnish Institute of Occupational Health, P.O. Box 33, FI-00023 Finnish Institute of Occupational Health, switchboard +358 (0)295 16001.

Contact the Data Protection Officer by phone at +358 (0)295 16001 (switchboard) or by email at tietosuojavastaava.stm(at)gov.fi.

For more information on the data protection practices of the Ministry of Social Affairs and Health, visit stm.fi/en/data-protection.

Contact information of the regulatory authority

The Office of the Data Protection Ombudsman is the data protection authority in Finland, which provides information on personal data processing and receives complaints.
Office of the Data Protection Ombudsman
Contact information of the Office of the Data Protection Ombudsman