Processing of personal data in the municipality of Tuusula

The Data Protection Officer monitors compliance with the Data Protection Regulation in the processing of personal data. The Data Protection Officer is a specialist in legislation and practices conce ing the processing of personal data, who supports data subjects, the organisation’s staff and management in matters related to the processing of personal data.

You can contact the data protection officer of the municipality of Tuusula by email at tietoturva@tuusula.fi and by telephone on 09 87 181 (switchboard).

The performance of municipal duties is based on law, and the performance of statutory duties usually requires the processing of personal data. The basis for the processing of personal data in the municipality of Tuusula is therefore, as a rule, the fulfilment of statutory obligations.

The retention period for municipal documents is determined either by legislation, the regulations of the National Archives of Finland, or the retention period recommendations of the Association of Finnish Local and Regional Authorities. The first two criteria are binding, and the National Archives of Finland determines, for example, which documents can be stored vertically. The retention periods, archiving, disposal and confidentiality of documents in the municipality of Tuusula are specified in more detail in the municipality’s archiving plan. We dispose of documents in accordance with data protection requirements once the retention period specified in the archiving plan has expired.

A data subject is a person to whom the processing of personal data relates. The municipality’s data subjects include municipal employees, elected officials and customers, such as residents who use social and health services, education and leisure services, and technical services.  

In order to fulfil its statutory obligations, the municipality processes various types of personal data. Personal data refers to all information related to an identified or identifiable natural person, such as name, personal identification number, address, telephone number and email address. In addition, we process so-called special (sensitive) personal data, which refers to information related to, for example, health, financial status, political beliefs or ethnic background. Special data is confidential and may only be processed in situations specifically defined in the Data Protection Regulation, including with the consent of the data subject and for the fulfilment of the controller’s legal obligations.    

The disclosure of personal data is described in the privacy statements. As a general rule, we only disclose data outside the municipality with the consent of the data subject or on the basis of statutory grounds for mutual cooperation between authorities.

As a rule, we do not transfer data outside the EU or EEA.

IT equipment is located in secure and monitored premises. Access rights to information systems and files are based on personal access rights, and we monitor their use. We grant access rights on a task-specific basis. Each user accepts a confidentiality agreement regarding the use of data and information systems. In addition, archives and work units have access control and door locks. We store documents in monitored facilities and locked cabinets.