Privacy policy

The privacy policy of the Finnish Forest Foundation

Created on 19 September 2019

The Finnish Forest Foundation is committed to ensuring the confidentiality and protection of the personal data in its possession. This privacy policy applies to the personal data that we collect in our personal data register (hereafter “Register”) about private individuals who apply for grants, contact persons of organisa-tions that apply for grants and the elected officials of the Finnish Forest Foundation. This privacy policy describes what personal data we collect and how we process it. Our contact person, Erno Järvinen (erno.jarvinen@metsasaatio.fi), can give you more information on how we process personal data.

We may occasionally update this privacy policy – for example, as a result of changes in the relevant legislation. We will use all reasonable means to let you know about potential changes and their effects well in advance. We recommend that you check this privacy policy every time you are notified of any changes to it.

Controller

Finnish Forest Foundation
Salomonkatu 17 A
00100 Helsinki, Finland
Business ID: 1517191-0

Whose personal data do we collect?

In the Register, we process the personal data of the following parties:

  • Individuals who are applying for a grant
  • Contact persons of organisations applying for a grant
  • Members and deputy members of the Finnish Forest Foundation’s board and delegation
  • Auditors and deputy auditors of the Finnish Forest Foundation

What kinds of personal data do we collect?

  • In the Register, we process the following kinds of personal data concerning the data subjects:
  • First and last name
  • Personal identity code (only for private individuals applying for a grant or in other instances of processing where it is required by law)
  • Telephone number, address and email address
  • Bank account number
  • The organisation you represent and your position in the organisation
  • IP address

What sources are used to collect personal data?

We collect personal data from the data subject themselves (e.g. the contact information written on the grant application form or other information provided by the data subject) or from public registers (e.g. for event marketing).

The purpose and legal basis for processing your personal data

For grant applications, the legal basis for processing your personal data is our legitimate interests that are based on the purposes stated below.

We must process the personal data of private individuals and representatives of organisations that are applying for grants in order to be able to receive and process applications and report on awarded grants.

The processing of private individuals’ personal identity codes is required by law. The Finnish Forest Foundation has a legal obligation to relay information concerning the awarding of grants to pension insurance companies (e.g. the Farmers' So-cial Insurance Institution Mela) and the Finnish Tax Administration.

For the Finnish Forest Foundation’s elected officials, the legal basis for processing personal data consists of the Finnish Forest Foundation’s legitimate interests and the obligations imposed by the Foundations Act. The processing of elected offi-cials’ personal data is legitimate when it is performed for the purpose of carrying out the foundation’s operations and complying with the obligations imposed by the Foundations Act.

The personal data collected on the basis of the legitimate interests of the Finnish Forest Foundation include IP addresses. The processing of IP addresses is essential for maintaining the website of the Finnish Forest Foundation. IP addresses are not processed more extensively than what is required by the technical maintenance of the website.

Personal data collected on the basis of the Finnish Forest Foundation’s legitimate interests is used for marketing, website maintenance and sharing information via the foundation’s communication channels. Personal data collected based on con-sent is used for processes related newsletter subscription and delivery.

The processing of your personal data will not affect you in any other way. We will not process your personal data for purposes other than those stated in this privacy policy.

Regular disclosures of personal data and transfers to third parties

We can transfer your personal data to our partners and subcontractors. If you wish, we can send you a list of the subcontractors we use to process your personal data.

For grant payments, the Finnish Forest Foundation’s subcontractor is Balance-Team Oy (0981020-2), an accounting firm to whom the Finnish Forest Foundation transfers the personal data that is required for making payments.

Our partners and subcontractors can process your personal data only for the purpose of carrying out tasks for us. We will always ensure that our partners will not process the transferred personal data for any other purpose.

We may also be required to share your personal data with the authorities in accordance with the relevant legislation (e.g. the Foundations Act or any other act that applies to the Finnish Forest Foundation). Information about those who received a personal grant worth more than EUR 1,000 is disclosed to pension insurance companies (e.g. Farmers' Social Insurance Institution Mela) and the Finnish Tax Administration as required by law.

Transfer of your personal data outside the EU or the EEA

We will not transfer your personal data outside the EU or the EEA.

Principles of storing personal data

For grant applications that resulted in the awarding of a grant, personal data is stored in the Register for 10 years from the reception of the report on grant use.

The grant applications that did not result in the awarding of a grant will be stored in the Register for three years from the processing of the application.

Please note that your personal data may need to be stored for longer than what was stated above if the relevant legislation or our contractual obligations with third parties require the data to be stored for a longer period of time.

The rights of the data subject

In accordance with the applicable data protection legislation, you have the right, at any time, to:

  • be informed about the processing of your personal data,
  • access your personal data and check the personal data concerning yourself that we have processed,
  • request the rectification or completion of inaccurate or incomplete personal data,
  • request the erasure of your personal data,
  • object to the processing of personal data concerning yourself based on your particular circumstances if the processing is carried out on the basis of our legitimate interests,
  • receive your personal data in machine-readable format and transfer the data to another controller, provided that the data in question has been submitted by you and that we are processing the data based on an agreement and the processing is automated; and
  • request the restriction of the processing of your personal data.

You must submit your request to exercise the rights stated above to us as instructed in the “Contact us” section of this privacy policy. We may ask you to specify your request in writing and verify your identity before we process the request. We may also refuse to grant your request based on a legal obligation.

In addition, you also always have the right to lodge a complaint with the Finnish supervisory authority, or the supervisory authority of the EU member state where you work or live, if you feel that we have not complied with the applicable data protection legislation when processing your personal data.

Principles of register protection

We respect the confidentiality of your personal data. The manual data is kept in a locked space that can only be accessed by appointed persons. Digital personal data is protected and stored in our information system. Only the persons who re-quire the data in order to perform their duties are allowed to access the system. These persons use individual usernames and passwords to access the system.

Information about cookies and similar technologies

“Cookies” are commonly used small text files that your web browser stores on your computer or other device when you visit a website. The browser sends information about your visit back to the website when you visit it again. All modern websites use cookies to offer you a more personalised browsing experience.

Each cookie has been separately set on each of your devices, and cookies can only be read by the server that set the cookie. Because cookies are tied to the browser and cannot be shared between different browsers or devices (unless separately enabled by a particular browser, extension or other application), your cookie management settings will only apply to the browser in question. Cookies cannot run software and they cannot be used to spread viruses or other harmful codes or to harm your device or files. Individual users cannot be identified purely based on the use of cookies or similar technologies.

Contact us

All requests related to the exercise of the rights stated above as well as questions about this privacy policy and other matters should be directed to Erno Järvinen, our contact person for matters related to the register, by email [erno.jarvinen@metsasaatio.fi].

You can also talk to us in person at our office or send a letter to the following address:
Finnish Forest Foundation
Salomonkatu 17 A
00100 Helsinki, Finland