Online service for government grant information (haeavustuksia.fi)

Data protection policy for Haeavustuksia.fi online service.

Name of the register

Personal data processed in the online services of the state aid activities of the Arts Promotion Centre Finland (Taike).

Controller and contact information

Name: Arts Promotion Centre Finland (Taike)
Address: Hakaniemenranta 6, FI-00531 Helsinki
Postal address: P.O. Box 1001, FI-00531 Helsinki
Switchboard: +358 295 330 900
E-mail: [email protected]
Website: www.taike.fi

The State Treasury acts as the joint registrar in accordance with Section 32 c § 1 of the Act on Discretionary Government Grants (688/2001).

Contact information for data protection officer 

[email protected] 

Purpose of processing personal data 

Responding to customer feedback (e-mail): Contact information provided by the customer is only used to respond to feedback. The State Treasury responds to service-related questions and technical issues.

Supporting authorities related to state aid activities: The State Treasury uses the contact information of state aid authorities to manage customer relationships.

Supplying state aid services: Information provided by the customer is used in the processing of discretionary government grants (e.g. requesting additional information, evaluating and comparing applications, and making decisions). The information is primarily used by the state aid authority that opened the call for applications. At the State Treasury, the processing of personal data is related to resolving technical issues and technical development.

User's IP address: Technical log data is collected about the use of the site and related programming interfaces, which are used to verify the operation of the site and to investigate possible technical issues.

Taike processes personal data in order to perform its statutory duties as regulated by the Act on the Arts Promotion Centre Finland (657/2012).

Legal basis of processing personal data

The processing of personal data is based on the Act on Discretionary Government Grants (688/2001). For the State Treasury, the processing of personal data is based on both the Act on Discretionary Government Grants and the duties regulated in Section 2 § 7-10 of the State Treasury Act (305/1991).

The processing of personal data is based on the performance of a task carried out in the public interest and the exercise of official authority by Taike in accordance with Article 6 (1) (c, e) of the General Data Protection Regulation (EU 2016/679)

Registered groups and data subject groups in the customer register

Customers submitting feedback: Data provided by the customer submitting feedback, usually e-mail address and name, possibly also phone number. This data enables the State Treasury to respond to the feedback. The State Treasury acts as the controller and processor of the data.

State aid authorities: Contact information of persons working in different roles among state aid authorities. The State Treasury acts as the controller and processor of the data.

Entities applying for state aid: The following personal data about entities applying for state aid is retained or used:

  • Name, personal ID and contact information of the contact person, as well as person’s role within the community applying for state aid
  • Authorisation of contact person to act on behalf of different communities
  • Data collected from application forms drawn up in connection with various calls for applications for state aid and from related attachments

IP address of the user: The user’s IP address is stored in the technical log data. The State Treasury acts as the controller of the data.

Sources of personal data when the data has not been obtained from the data subject

Customers submitting feedback:

State aid authorities: Data is obtained from the common data reserves of the state administration.

Entities applying for state aid: Data is partly obtained from the Finnish Business Information System (YTJ) and Suomi.fi (identification and authorisations).

IP address of the user: Technical logs are stored on the system’s log server, where they can be used for troubleshooting.

Processors and recipients of personal data

  • Solita Oy, system maintenance
  • Government ICT Centre (Valtori), service platform
  • Digital and Population Data Services Agency (DVV), Suomi.fi Messages service
  • The Finnish Government Shared Services Centre for Finance and HR (Palkeet)

The data is always available to state aid authorities in relation to the relevant call for applications. Personal data that is separately stipulated to be published in the state aid information service is published on the Tutkiavustuksia.fi website.

Transfer of data outside the EU or EEA countries or to international organisations

Personal data is not transferred outside the EU or EEA countries or to international organisations.

Retention periods for personal data

Customer feedback: Data is retained only as long as necessary to process the customer’s case. Unnecessary contact information is erased every 6 months. The State Treasury erases the data.

Data about state aid authorities: Data is stored in the customer relationship management system (CRM system), where the State Treasury retains the data as long as the service is in operation.

Data about entities applying for state aid: Data is stored in the state aid database, where it is stored according to the retention period specified by the state aid authority (Act on Discretionary Government Grants, § 32 e).

User’s IP address: Data is stored for 90 days.

Rights of the data subject

The data subject has the right to receive information from the controller on whether his or her personal data is being processed.

The data subject has the right to request:

  • personal data about themselves
  • the controller to rectify inaccurate and incorrect personal data 
  • limit the processing of their personal data

If the data subject believes that their personal data is being processed unlawfully, the data subject has the right to submit a complaint to the Office of the Data Protection Ombudsman.

Automated decision-making and profiling

Personal data is not used for automated decision-making or profiling that could have an impact on the rights or freedoms of the data subjects.

Protection of personal data

The Arts Promotion Centre Finland, as the data controller, has implemented the necessary technical and organisational measures and also requires them from the processors of personal data.