The Construction Establishment of Finnish Defence Administration processes personal data in the manner required by the General Data Protection Regulation

The EU’s new General Data Protection Regulation entered into force on 25 May 2018

 

The mission of the Construction Establishment of Finnish Defence Administration is to produce or procure the construction and real estate maintenance services necessary for the duties of the Finnish Defence Forces’ in both peacetime and in exceptional circumstances. A decree can be enacted on the right of the Construction Establishment of Finnish Defence Administration to produce the above-mentioned services to other government agencies and establishments, as well as municipalities, for a special reason.

The Construction Establishment will process personal data in different contexts when performing this task.  
The Construction Establishment undertakes to comply with the applicable legislation in force concerning the processing of personal data and data protection, and also to bring its processing of personal data and data protection into compliance with the EU's General Data Protection Regulation (EU 2016/679). 


Processing of personal data


The personal data used by the Construction Establishment of Finnish Defence Administration may be disclosed only within the requirements and limits of the legislation in force. The data will not be transferred outside the EU or the EEA or to international organisations.
Manual data is handled by trained personnel in locked spaces matching the data protection levels. All personnel of the Construction Establishment of Finnish Defence Administration have been subjected to at least a basic security clearance by the Finnish Defence Forces. The staff signs a Non-Disclosure Agreement.
Data that is digitally processed is protected against unauthorised viewing, editing and deletion. The protection is based on access rights management, technical protection of databases and servers, the physical security of premises, access control, secure data traffic, and data backups.
 
Access and processing rights to the data are granted on the basis of work tasks. Access to the systems is based on personal user credentials. The data centres and data are physically located in Finland. Administrative controls are used to oversee that the operations are proper. 
Persons are entitled to obtain confirmation from the controller that personal data concerning him or her are or are not being processed, and if such personal data are processed, the right to access personal data.
The person shall be entitled to require the controller to rectify, without undue delay, inaccurate and incorrect personal data relating to him or her. The requirements for rectification are addressed to the Registry of the Finnish Defence Administration, kirjaamo (at) phrakl.fi. 

Should you have any questions or inquiries concerning this matter, please contact the data protection officer of the Construction Establishment of Finnish Defence Administration:
at the e-mail address kirjaamo (at) phrakl.fi  

OR
by mail to: 
Puolustushallinnon rakennuslaitos
tietosuojavastaava 
PL1, 48401 Hamina