Processing of Personal Data in Vantaa's Social Media Competitions
In accordance with the EU General Data Protection Regulation, individuals must be informed if their personal data is recorded in a personal register. Personal data includes, among other things, name and address information. The data subject must also be informed about the purpose of processing personal data, to whom the data is regularly disclosed, and the rights of the data subject.
On this page, the information document has been updated on March 9, 2022.
This page explains how your data is processed if you have participated in a competition organized by the City of Vantaa on a social media channel. The City of Vantaa operates on social media channels in accordance with the user terms announced by them. This does not apply to the information you have publicly shared on social media platforms.
Why is my data processed in connection with the draw or competition? What information is collected about me in connection with the competition?
We only process the information provided by the individual themselves. The purpose of processing personal data is to register participation in the competition and deliver the prize to the winner5. The collected information includes first and last name, social media username, email address, and mailing address6.
Where does the city get the information? Is it necessary to provide it?
The personal data collected by the City of Vantaa is obtained from the participant in the competition. The information is provided by the participant themselves on the social media channel.
Does the city disclose my information to third parties?
Your information can only be disclosed with your consent or if another authority has the legal right to obtain the information. Your information will not be disclosed for marketing purposes, for example. The personal data required to claim the prize will be disclosed to the external prize provider only with your consent. The winner's name or social media username will be published on the social media channel after the competition ends.
Who can process my data? How is my data protected?
The information collected in connection with the competition is confidential, and the employees who process it are bound by confidentiality and non-disclosure obligations. Only employees who participate in organizing the competition or moderating the social media channel can process and receive your information. The information is protected technically to prevent unauthorized access.
Transfer of information outside the EU or EEA
The information you provide may be on servers outside the EU or EEA. Many social media channels have a broad and international operating environment.
How does the city act if my information falls into the wrong hands?
Despite the protection, your information may, in exceptional cases, end up in the wrong hands. In this situation, the city will immediately take action to correct the situation. You will also be notified immediately or within 72 hours of the incident if the leakage of your information may harm your rights. If the data breach affects a large number of people and does not require immediate action from you, a general notice may also be issued.
How long is my data stored?
RThe information collected in the register is stored only as long and to the extent necessary in relation to the original or compatible purposes for which the personal data was collected. The information provided for the competition is stored for the duration of the competition and the time required to deliver the prize. The personal data stored in the register will be deleted when there is no longer a legal basis for processing them. You can request more detailed information about the retention periods from the City of Vantaa's data protection officer.
Inspection, correction, and deletion of information
You can inspect your own information and receive copies of it free of charge once a year. The inspection request is made in person or with a personally signed or otherwise reliably verified document at Vantaa-info or the City of Vantaa registry. The inspection request is made on a separate form available at Vantaa-info. Your identity is checked when presenting the inspection request. The right to inspect the information is verified before the information is disclosed. The right to inspect is implemented without delay and no later than one month after the request is made. The customer is given the opportunity to review the information in the administrative unit or the information is provided in writing. If your right to inspect is denied, you will receive a written refusal certificate stating the reasons for the refusal. You can then refer the matter to the Data Protection Ombudsman for resolution.
Incorrect, unnecessary, incomplete, or outdated personal data must be corrected, deleted, or supplemented. The correction request must be made with a personally signed written request to the unit where the entry was made. The request must specify which information is required to be corrected and on what basis. The correction request is free of charge. The correction is implemented without delay. The correction of the error is notified to the person from whom the incorrect information was obtained or to whom the information was disclosed. If the correction request is denied, the responsible person of the register will provide a written certificate stating the reasons for the denial. The person concerned can refer the denial to the Data Protection Ombudsman for resolution.
The data subject has the right to have their personal data deleted without undue delay, provided that:
- The personal data is no longer needed for the purposes for which it was collected or otherwise processed.
- The data subject withdraws the consent on which the processing was based, and there is no other legal basis for the processing.
- The personal data has been processed unlawfully.
- The personal data must be deleted to comply with a legal obligation based on European Union law or national legislation.
If your information is incorrect, you can request the City of Vantaa to restrict the processing of your customer data until the accuracy of the information is verified. The data subject has the right to have the controller restrict the processing if:
- The data subject disputes the accuracy of the personal data.
- The processing is unlawful, and the data subject opposes the deletion of the personal data and requests instead the restriction of its use.
- The controller no longer needs the personal data for processing purposes, but the data subject needs it to prepare, present, or defend a legal claim.
There is no right to restrict processing for data whose processing is based on the controller's legal obligation.
Profiling
The information you provide is used only as long as it is necessary for registering participation in the competition and delivering the prize to the winner. You are not profiled.
Making a complaint
If you suspect that the processing of your data has violated the relevant legislation, you have the right to refer the matter to the Data Protection Ombudsman.
The up-to-date instructions and contact information of the Data Protection Ombudsman can be found on the tietosuoja.fi website.
Additional information about processing and contact persons
You can request a more detailed description of the processing of your data from Vantaa-info. You can request additional information about the processing and retention of data from the contact details mentioned below. Please note that email is not a secure means of processing personal data. Please do not send, for example, your social security number or sensitive information by email.
Contacts
viestinta@vantaa.fi
Data Protection Officer
phone: 040 071 3358
Controller
City of Vantaa, Business ID 0124610-9, Asematie 7, 01300 Vantaa
Registry
You can find the information documents of the City of Vantaa compiled on the Processing of Personal Data at the City of Vantaa page.