Processing personal data
The EU's General Data Protection Regulation dictates the tasks and obligations of both controllers and processors of personal data. The City of Vantaa, too, handles personal data in compliance with the regulation.
Both the public and the private sector apply the EU's General Data Protection Regulation — valid as of May 25, 2018 — to processing of personal data. The aim of the regulation is to improve personal data protection, to meet the data protection issues related to digitization and globalization, as well as to standardize data protection regulation in all of the EU countries.
Clear information documents
The EU's General Data Protection Regulation does not require compilation of a register or privacy statement of the previous kind. According to the regulation, the registered person must be informed about processing of their personal data in an easy-to-understand and compact format. The previous register and privacy statements are replaced with information documents.
Familiarize yourself with the City of Vantaa’s information documents.
This page lists Vantaa's information documents per departments.
The right to check your own data
The registered person has the right to check how their personal data are processed by the City of Vantaa. If your data have been collected, you can request a copy of your data.
You can submit a personal data inspection request through the online transacting service. Filling out the form requires strong identification using your personal bank identifiers or mobile certificate.
You can also submit an inspection request by personally visiting Vantaa-info. Inspection request forms are available at Vantaa-info and online at: vantaa.fi. Bring your passport, driver’s license, or photo-ID to verify your identity.
You can also mail the form to: Kirjaamo, PL 1100, 01030 Vantaan kaupunki. In this case, we will verify your identity by another reliable means.
Data request forms
Right to rectify data
The registered person has the right to request the rectification of faulty personal data. Incorrectly recorded personal data will be rectified upon a written request.
You can submit a personal data rectification request through the online service. Filling out the forms requires strong identification using your personal bank identifiers or mobile certificate.
You can also submit a rectification request by personally visiting Vantaa-Info. Rectification request forms are available at Vantaa-Info and online at vantaa.fi. Bring your passport, driver’s license, or photo-ID to verify your identity.
You can also mail the form to: Kirjaamo, P.O. Box 1100, 01030 Vantaan kaupunki. In this case, we will verify your identity by another reliable means.
Rectification request forms by department
Right to remove data, restrict or object to the processing of data
Under certain conditions, the registered person has the right to request the removal of their data. You have the right to revoke your consent if your personal data is being processed on the basis of your consent. In this case, you can request the data controller to remove your personal data from the systems. You can request the removal of your personal data in writing. The right to removal does not, however, apply to the city's statutory registers.
During the time a personal data rectification or removal request is handled, processing of data can be restricted. Based on a personal special situation, you also have the right to object to the processing of your personal data at any time. This does not, however, apply to the city's statutory registers.
The right to transfer data from one system to another
This right is applied when personal data are handled with the registered person’s consent, based on an agreement, and in case of automatic processing. The transfer right applies to such data in the city's registers that have been collected for the purpose of performing voluntary tasks. The transfer right does not apply to such data that have been collected for performing tasks related to the common good, or to public authorities.
The right to be informed about a security breach
If the data, regardless of encryption, end up in the wrong hands, the city will take immediate action to amend the situation.
The City of Vantaa will inform of data seepage immediately or, at the latest, within 72 hours from the time the breach was noticed if the data seepage in question may cause significant disadvantage to your rights. If the security breach applies to many people and the matter does not require that you take any immediate measures, the security breach can also be informed in a general announcement. As regards breaches in handling of personal data, it is always possible to submit the matter to the data protection ombudsman.
The city’s data protection officer monitors adherence to the data protection regulation in handling personal data.
Read more about data protection related to personal data on the data protection ombudsman’s website.
Familiarize yourself with Vantaa's data balance sheet
Vantaa publishes an annual data balance sheet that everybody—decisionmakers and all interested parties—are entitled to read. The data balance sheet gives an overall review of the state of handling personal data at the City of Vantaa. Furthermore, the report lists threats and development measures related to handling of personal data.
