Personal Data

The collection, storage and processing of personal data are regulated by the Personal Data Act (1050/2018, as amended). The Data Protection Act specifies and supplements the EU’s General Data Protection Regulation (GDPR) and its national application. Among other things, the Act provides for the appointment, organisation and powers of the supervisory authority on data protection matters.

The Act on the Protection of Privacy in the Work Environment (759/2004, as amended) regulates the protection of privacy in employment relationships, whereas the Information Society Code (as amended 917/2014) regulates the processing of data in electronic communications.

Furthermore, the Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) applies in Finland.

The GDPR contains six bases that permit the processing of personal data: i) the consent of the data subject, ii) a contract, iii) the controller’s legal obligation, iv) the protection of vital interests, v) a task carried out in the public interest or the exercise of public authority, vi) and the legitimate interests of the controller or a third party.

Special categories of personal data, such as data concerning ethnic origin or health, is principally prohibited. However, such processing can be permitted if an exception to the ban on processing is provided for in the GDPR or national legislation.

Compliance with the provisions of the GDPR is required when processing personal data. Accountability means that the controller must be able to demonstrate its compliance with data protection legislation and is a key principle of the GDPR.

For further information please contact your current contact person or named specialist on this page. We are pleased to provide further information on the above issues.

Contact us

TOMASZ MADEJCZYK Legal Counsel

kancelaria@madejczyk.biz

Contact

Name *

Email *

Phone

Message

Administrator of my personal data is Madejczyk Law Firm, limited liability partnership, based in Bełchatów, further referred to as the Chambers. My personal data shall be processed by Chambers pursuant to Art. 6 Par. 1 b) of the general regulation on protection of personal data for the purposes of response to questions and continuation of electronic correspondence. My personal data may be entrusted by the Chambers to third parties rendering services for the Chmabers, e.g. in relation to operation of IT systems or provision of the software in the form of service (SaaS). My personal data may be transmitted beyond the boundaries of European Union, within the frameworks of the Company’s use of IT infrastructure (cloud computing, electronic mail). In case of processing, which includes transmission of data beyond the boundaries of European Union, such transfer shall be held using the Standard Contract Clauses or Privacy Shield regulations approved by the European Committee for the pursposes of assurance of a proper degree of statutory protection of personal data. In other cases my data may be conveyed to third countries in cases indicated in GDPR. I may obtain the copy of data conveyed to the third country on submitting such request. Conveyance of data to the third country may also take place on securing my consent. Accordingly, my data shall be conveyed to the third country based on Art. 49 Par. 1 a) and Art. 49 Par. 1 b) of GDPR. My personal data shall be processed by the Chambers throughout the period of exchange of messages in electronic correspondence and shall be removed till the end of calendar year, which shall follow the year, in which you contacted us the last time on the matter of its conclusion. I shall be entitled to access the content of my data, insist on setting it right, remove it or limit its processing, and also to raise objections against processing data processing, and to convey them too. I shall be entitled to file a complaint to the President of the Office for Protection of Personal Data or any other competent supervisory authority if I acknowledge that processing of my data infringes the rules. Provision of my personal data is voluntary, but required for correspondence.