Privacy notice for Data catalogue

EU General Data Protection Regulation
Art. 12 to 14
Date: 1.4.2025

The organization responsible for the processing of personal data is the University of Helsinki.

Contact information: 
University of Helsinki
P.O. Box 3
00014 Helsingin yliopisto

Contact: datasupport@helsinki.fi

You can contact the Data Protection Officer by email: tietosuoja@helsinki.fi

The University of Helsinki needs to process your personal data for the following purposes: 

Data catalogue collects personal data on dataset producers and users. The purpose of processing personal data is to enable the functionality of Data catalogue. 

Personal data is needed for dataset descriptions, facilitating reuse, and statistical purposes. Feedback is collected from users of the service for the purpose of developing the service. The person providing feedback can provide an email address if they wish. The personal data of dataset producers is required to ensure citation of the dataset. 

The legal basis for processing is “the processing is necessary for the performance of a tasks carried out in the public interest or in the exercise of official authority”. Particularly: archiving.

We process the following data:

First names, last names, ORCIDs, organisations, and the role of dataset contributors in the dataset.

  • The email address of the contact person for the dataset.
  • The email address of the person providing the feedback (optional).

The user of Data catalogue enters the personal data of the dataset.

The personal data from Data catalogue is freely available under the CC0 license and can be transferred to other systems, such as CSC's Metax, Etsin, or the Science and Research portal.

The personal data submitted in Data catalogue is intended to be stored permanently or for at least 15 years.

The contact person's information from the data catalog is freely available under the CC0 license and can be transferred to other systems, such as CSC's Metax, Etsin or Science and Research portals or abroad.

The contact details in matters concerning the rights of the participant, is the contact point mentioned in the section 1 of this notice.

Right to withdraw your consent

When the processing is based on your consent, you have the right to withdraw your consent any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before the withdrawal. 

Right to access

You have the right to know whether we process your personal data and what data we process about you. You have also the right to request for the access to that data.

Right to rectification

You have the right to request for rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed.

Right to erasure and right to be forgotten

You have the right to request for the erasure of your data from our systems. The data will be erased in the following cases:

  1. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
  2. You withdraw your consent on which the processing was based and there is no other legal ground for the processing
  3. You object for the processing and there are no overriding legitimate grounds for the processing
  4. The personal data have been unlawfully processed
  5. The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject

You do not have the right to erasure, if the processing is necessary:

  1. For compliance with a legal obligation which requires processing by law 
  2. For the performance of a task carried out in the public interest or in the exercise of official authority
  3. For archiving purposes in the public interest, scientific of historical research purposes or statistical purposes if the erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing
  4. For the establishment, exercise or defense of legal claims
Right to restriction of processing

You have the right to request for the restriction of processing. This means that we store the data but do not process it in any other way. 

You have this right when: 

  1. The accuracy of the personal data is contested by you. Then the processing will be restricted until the accuracy of the data is verified. 
  2. The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
  3. We no longer need the data for the purposes of the processing, but you need the data for the establishment, exercise, or defense of legal claims.
  4. You have objected to processing that is based on legitimate interest. Then the processing will be restricted for the time it is verified whether the legitimate ground for the controller override those of the data subject. 
Right to object

You have the right to object for the processing of your personal data. Then we shall no longer process the data unless we demonstrate compelling legitimate grounds for the processing which overrides the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. University can also continue to process your personal data if it is necessary for the performance of a task carried out in the public interest. 

Right to lodge a complaint with a supervisory authority

You can always contact us if you have any questions or concerns about the processing of your personal data. However, you have also the right to lodge a complaint with the Data Protection Ombudsman’s Office if you think your personal data has been processed in violation of applicable data protection laws. 

Contact details:

Office of the Data Protection Ombudsman
Visiting address: Ratapihantie 9, 6. krs, 00520 Helsinki
Postal address: BOX 800, 00521 Helsinki
Switchboard: 029 56 66700
E-mail: tietosuoja@om.fi