Scientific research and development project registers
Table of contents
Why and on what basis we process personal data
We process personal data for scientific studies and development projects.
With regard to scientific studies, the legal basis for the processing of personal data is public interest (Article 6, Section 1(e) of the GDPR, Section 4, Subsection 1, Paragraph 3 of the Data Protection Act, Section 6, Subsection 1, Paragraph 7 of the Data Protection Act, Section 2 of the Act on the Operation and Financing of the Institute of Occupational Health (159/1978)) or consent (Article 6, Section 1(a) of the GDPR, Article 9, Section 2(a) of the GDPR).
With regard to development projects, the legal basis for processing personal data is usually consent (Article 6, Section 1(a) of the GDPR, Article 9, Section 2(a) of the GDPR).
What personal data we process
The personal data processed for scientific studies varies with each study. Typical data to be processed includes, for example, name and contact information, responses to various surveys and interviews and information collected from registers. We will inform you about the study with a brief or through our website. Store the study information you are provided with as you may need it to exercise your rights.
The personal data processed for development projects varies with each project. Typical data to be collected includes, for example, name and contact information and participation in a development project such as workshop activities and the information processed there. We will inform you about the development project with a brief or through our website.
How we obtain your personal data
In some studies, the data is collected directly from you, if you consent to participate in the study. Some studies are carried out using register data, in which case the data is collected by the Finnish Institute of Occupational Health or another organization using methods compliant with the law.
With regard to development projects, the data is usually collected directly from you. In most cases, development projects are carried out in co-operation with various workplaces, in which case contacts and provision of information can also be made together with the employer.
For what purposes we disclose personal data
We use IT service providers that provide us with technical solutions for data processing. Personal data is processed in IT services suitable and secure for each type of data. The Finnish Institute of Occupational Health has an agreement with each IT service provider, and the terms and conditions for the processing of personal data have been defined.
We use service providers who convert recorded material such as interviews into text (transcription).
We may disclose personal data to other parties conducting scientific research in accordance with the law.
We may disclose personal data to authorities as required by and in the ways permitted by law.
Do we transfer personal data outside the EU/EEA area
As a rule, we do not transfer personal data outside the EU/EEA area.
If study data is subject to a request related to scientific research that would transfer data outside the EU/EEA area, we will ensure that personal data is transferred in compliance with the GDPR.
How long we store personal data
The National Archives of Finland has mandated the scientific study materials of the Finnish Institute of Occupational Health along with the related personal data to be stored permanently. Further use of the data for research purposes is possible as permitted by law.
With regard to development projects, the retention period is determined by the duration of the project and it is assessed separately for each project.
Do we conduct automated decision-making or profiling?
We do not conduct automated decision-making based on the data of scientific study and development project registers.
What the provision of information signifies
Participation in scientific studies is always entirely voluntary, meaning you have no obligation to agree to participate and provide your personal data if you are asked to participate in a study. In studies based on register data, the processing of personal data is carried out with methods that are in compliance with the law. Research results are always published in a way that does not compromise the privacy of any research subjects.
Participation in development projects on behalf of the Finnish Institute of Occupational Health is also voluntary and may take place in co-operation with workplaces.
You have several rights in regard to your personal data, which vary according to the situation. You can submit a request to the Finnish Institute of Occupational Health regarding your personal data either as a free-form request or using a form provided by the Finnish Institute of Occupational Health . Submit the request to the Data Protection Officer of the Finnish Institute of Occupational Health. You will receive a response to your request. The Finnish Institute of Occupational Health may refuse to execute a personal data request or restrict the exercise of the data subject's rights in situations permitted by law.
With regard to scientific research, the General Data Protection Regulation and Data Protection Act allow limiting certain rights when a person participates in a scientific study. Any limitations will be made as permitted by law.
Contact details of the controller and the Data Protection Officer
Finnish Institute of Occupational Health, P.O. Box 40, FI-00032 Finnish Institute of Occupational Health, switchboard +358 (0)30 474 1
The Data Protection Officer can be reached by calling +358 (0)30 474 2429 or sending email to tsv(at)ttl.fi
In the case of confidential matters, you may also send the Finnish Institute of Occupational Health a secure email message. You must have a valid email address and telephone number in order to communicate securely with the Finnish Institute of Occupational Health.