{"id":77213,"date":"2024-10-28T14:17:47","date_gmt":"2024-10-28T12:17:47","guid":{"rendered":"https:\/\/testi-e2c55b704894.senaatti.fi\/?page_id=77213"},"modified":"2024-10-28T14:17:47","modified_gmt":"2024-10-28T12:17:47","slug":"privacy-statement-of-senate-groups-e-sevice","status":"publish","type":"page","link":"https:\/\/testi-e2c55b704894.senaatti.fi\/en\/privacy-statement-of-senate-groups-e-sevice\/","title":{"rendered":"Privacy statement of Senate Group’s e-sevice"},"content":{"rendered":"

[vc_row][vc_column][senaatti_hero heading=”Privacy statement of Senate Group’s e-sevice”][\/vc_column][\/vc_row][vc_row][vc_column][vc_column_text remove_empty_space_above=”true”]<\/p>\n

1. Data controllers and contact information<\/h2>\n

Senate Properties and Defence Properties Finland<\/p>\n

Senate Properties: Lintulahdenkatu 5 A, P.O.Box 237, 00531 Helsinki, Finland
\nE-mail: kirjaamo(at)senaatti.fi<\/p>\n

Defence Properties Finland: Isoympyr\u00e4katu 10, P.O.Box 1, 49401 Hamina, Finland
\nE-mail: kirjaamo(at)puolustuskiinteistot.fi<\/p>\n

Tel: +358 294 830 000<\/p>\n

Data Protection Officer Petri Konttinen, firstname.lastname(at)senaatti.fi<\/p>\n

2. Purpose of the processing of personal data and
\nthe legal basis for the processing<\/h2>\n

Senate Group’s e-sevice on senaatti.fi is the portal to the digital services offered by Senate Properties and Defence Properties Finland to their stakeholders. Senate Properties and Defence Properties Finland act as joint controllers in accordance with Article 26 of the GDPR.<\/p>\n

Processing of data is necessary for the performance of tasks carried out in the public interest by the controllers (Article 6.1.e of the GDPR). Under Section 2.1 of the Act on Senate Properties and Defence Properties Finland (1018\/2020): \u201cThe purpose of the unincorporated state enterprises in the Senate Group is to operate in the real estate and facility services, providing real estate and facility services for the state; management of the facilities and administrative services; services related to the acquisition, management and transfer of premises; as well as other services closely connected to these, on the basis of service agreements, for customers referred to in Section 2 of the Act on Unincorporated State Enterprises. Furthermore, the responsibilities of the unincorporated state enterprises include management of the state\u2019s real estate assets under their control; maintenance and administration of said assets; and, if necessary, the transfer, acquisition, management and administration of the state\u2019s real estate assets and other related assets.\u201d<\/p>\n

3. Processed personal data and groups of data subjects<\/h2>\n

The e-sevice portal is used to log in to the Group\u2019s systems, to which stakeholders have been granted access using Senate Properties\u2019 IAM system. Information about data subjects\u2019 profiles is saved in the e-service portal.<\/p>\n

The data subjects are stakeholders of the Senate Group (e.g. customers and service providers). The data subject may also be an employee of Senate Group. The following personal details are registered in the system: name, email address, user role (customer or other stakeholder) and information about which service the person has access to.<\/p>\n

4. Regular data sources<\/h2>\n

The details are obtained from the persons themselves when they log in to the service. The details in the e-service portal come from the IAM system\u2019s user profile.<\/p>\n

5. Recipients or categories of recipients of the personal data<\/h2>\n

System administrators have access to the personal details. Senate\u2019s ICT service providers (system support services) have access to the data so that they can carry out technical maintenance tasks.<\/p>\n

6. Data transfers outside the EU or EEA<\/h2>\n

The data will not be transferred outside Finland, the EU or the EEA.<\/p>\n

7. Security of personal data<\/h2>\n

The data in the system is protected by a firewall and other technical measures. Data subjects log in to the service as identified users with their personal profiles.<\/p>\n

Personal data is visible to the system administrators. No personal data is transferred for the purposes of the service provider’s analytics service, but the service provider anonymises the data transferred.<\/p>\n

8. Data retention period and the principles for determining it<\/h2>\n

Personal data (user profile) will be deleted automatically when a data subject has not logged in to the service for 4 months.<\/p>\n

9. Rights of the data subjects<\/h2>\n

Data subjects may exercise their rights under the General Data Protection Regulation in the following matters:<\/p>\n