Data Protection

You have the right to inspect the data concerning you and to obtain a copy of the data.  More information on the right of inspection is available on the website of the Office of the Data Protection Ombudsman.

As a rule, the right of inspection is personal. The data can only be provided to the person in question or to their legal representative.

You have the right to request the rectification of inaccurate, incorrect, or incomplete information. More information on the right to rectification is available on the website of the Office of the Data Protection Ombudsman.

In certain situations, you have the right to ask the controller to delete data about you. More information on the right to erasure is available on the website of the Office of the Data Protection Ombudsman.

In certain situations, you have the right to receive the data concerning you and to transfer it to another controller. More information on the right to transfer the data to another controller is available on the website of the Office of the Data Protection Ombudsman.

In certain situations, you are entitled to restrict the processing of your personal data, meaning you can request that the controller only process your data in certain situations. More information on the right to restriction is available on the website of the Office of the Data Protection Ombudsman.

In certain situations, you have the right to object to the processing of your personal data, meaning you can request that your data not be processed at all. More information on the right of objection is available on the website of the Office of the Data Protection Ombudsman.

You can also prohibit direct marketing.

You have the right to demand that a decision that significantly affects you is not based solely on automated processing, but that a person is involved in making decisions concerning you. More information on the right not to be subject to automatic decision-making is available on the website of the Office of the Data Protection Ombudsman.

You have the right to withdraw consent if the legal basis for processing personal data is consent. In this case, the processing of personal data is terminated.

The easiest way to withdraw consent from the Finnish Institute of Occupational Health is to inform the contact person defined in the consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

If you withdraw your consent regarding data we have an obligation to retain permanently, the withdrawal will be realized by transferring the data to the Finnish Institute of Occupational Health’s archive.

You have the right to be informed of a data breach if the breach poses a high risk to the protection of privacy. We will process any personal data breaches as soon as they are discovered and, if necessary, notify the supervisory authority and data subjects in accordance with the Data Protection Regulation.

You have the right to lodge a complaint regarding the processing of personal data with the data protection supervisory authority if you believe that there are issues with the processing or that your rights have been violated. In Finland, the Office of the Data Protection Ombudsman acts as the supervisory authority for data protection. The Office of the Data Protection Ombudsman website also provides information on matters related to the processing of personal data. 

You can also make requests for documents in accordance with the Act on the Openness of Government Activities (621/1999) regarding confidential matters, if the document concerns you or if you are a party to the matter.

With regard to health care, you have the right to receive log data concerning the processing of your client data. The health care log information indicates who has used information about you or to whom information about you has been disclosed, and the reason for the usage or disclosure. You can request log data either as a free-form request or using a form provided by the Finnish Institute of Occupational Health.

Log data can only be obtained for a maximum period of two years. You are not entitled to access log data that is more than two years old without a particular reason. In some cases, the right to receive log data may be waived. You may use the log data to determine and exercise your rights in relation to the processing of your client data. Log data may not be used or disclosed for any other purpose. If you believe that the data has been used or disclosed without sufficient justification, the Finnish Institute of Occupational Health will provide a statement on the reasons for the use or disclosure of the data upon request.