SAK Influencer Register – Privacy Statement

To facilitate communication with policymakers, the Central Organisation of Finnish Trade Unions (SAK) collects personal data by individual consent in its Influencer Register.

SAK collects and processes personal data only to the extent that is necessary to discharge the purposes described in this privacy statement. Processing is based on the consent of the individual.

1 Data file controller

The Central Organisation of Finnish Trade Unions (SAK)
Business ID 0202092-9
Pitkänsillanranta 3, PO Box 157, FI-00531 Helsinki
Tel. +358 20 774 000
webmaster@sak.fi

2 Data file contact person

Eija Harjula, Head of Union Affairs, SAK
Tel. +358 20 774 000 (switchboard)
eija.harjula@sak.fi

3 Name of data file

SAK Influencer Register

4 Purpose and basis of processing personal data

SAK uses personal data to maintain contact with policymakers. Individuals who have enrolled in the Register may receive messages, inquiries or invitations to various events from SAK, concerning topics related to a fiduciary position or to its substance. The information may also be used for improving SAK communications and services, and for issuing content recommendations and personalising services.

For the above-mentioned purposes, SAK also processes information about political views and trade union membership that are considered special personal data according to Article 9 of the EU General Data Protection Regulation (2016/679). This information is processed if a person enrolls in SAK’s candidate gallery (eduskuntavaaligalleria.fi, aluevaaligalleria.fi and kuntavaaligalleria.fi) or submits this information to the SAK Influencer Register. The information concerns the person’s membership or position in the party or trade union and their candidacy in Finnish elections.

The Register collects personal data about persons elected as members or deputy members of a municipal council, members or deputy members of a county council or as Members of Parliament or who have been appointed to one of the following positions:

The Register also collects personal data about persons who serve in a fiduciary position in some other municipal, local or national executive organ that is relevant to the work of SAK.

5 Information in the Register

The details in the SAK Influencer Register are information that users have personally notified to SAK. The information was entered in the Register with the express consent of the user, and may be deleted from it at any time.

The details that may be processed in the Influencer Register include the following:

6 Regular data sources

Personal information is obtained from participants in person, based on individual consent.

Personal information in the register may also be supplemented with data gathered on the use of SAK online services, such as:

A user of online services may be identified through the digital ID code created for the services when the individual accesses or logs into the online service via targeted SAK communications such as a newsletter.

Information on the use of online services is collected using cookies. Further details of SAK cookie policies.

7 Regular releases of data

Personal data from the SAK Influencer Register will generally not be disclosed to third parties. SAK may nevertheless disclose personal data to third parties, for example for the purpose of conducting targeted communications, or any survey or research commissioned by SAK for its own use. Third party service providers of this kind always operate on behalf of SAK and under its supervision. SAK never sells or discloses personal information to third parties in a manner that enables them to use it independently.

8 Transfer of information outside of the European Union or European Economic Area

The information is located in a register secured in accordance with clause 10. For example, information may be transferred to a newsletter software server located in the USA when the newsletter is sent via MailChimp. SAK has concluded an agreement with MailChimp that requires this enterprise to comply with the EU General Data Protection Regulation when processing the information, and to refrain from disclosing it to third parties.

9 Personal data retention period

SAK retains personal data for as long as is necessary for discharging the purposes specified in clause 4. The information is securely destroyed when SAK no longer needs the personal data that it has collected.

10 Principles of data file protection

Security and the protection of personal data are fully integrated into all use and processing of information at SAK, which processes all personal data securely and in the manner required by law.

The information in the Register will only be used by SAK employees who need it for their working duties in accordance with their access rights. Users are also bound by a duty of confidentiality.

SAK contractually ensures that its partners and service providers process data in accordance with current legislation at all times.

11 Right of access to information

Article 15 of Regulation (EU) 2016/679 provides that a data subject is entitled to access personal data concerning him or her, meaning the right to inspect the said data.

A request may be submitted by telephone (+358 20 774 000) or e-mail (sak@sak.fi).

12 Right to rectify and delete information

Participants are entitled to inspect information concerning them in the register and to have it rectified and deleted as necessary. They are also entitled to restrict processing of their information. Requests may be submitted to SAK by telephone (+358 20 774 000) or e-mail (sak@sak.fi).

13 Right to lodge a complaint with a supervisory authority

Article 77 of Regulation (EU) 2016/679 provides that a data subject is entitled to lodge a complaint with the Data Protection Ombudsman if he or she considers that processing of personal data infringes the EU General Data Protection Regulation.

14 Amendments

SAK may amend this privacy statement from time to time. We shall clearly announce any significant changes to the Privacy Statement when so required by applicable law. Please refer to the Privacy Statement from time to time for current details of any changes.

This privacy statement was last updated on 12 December 2022.