GDPR Rights for Finnish Users

Last updated: January 1, 2025

1. Your Rights Under GDPR

As a Finnish resident and user of spinnordfi, you have specific rights under the General Data Protection Regulation (GDPR) and Finnish data protection laws. This page explains your rights and how to exercise them.

2. Right to Information (Articles 13-14)

You have the right to be informed about:

  • What personal data we collect about you
  • How we use your personal data
  • Who we share your data with
  • How long we keep your data
  • Your rights regarding your personal data
  • How to contact us or the supervisory authority

This information is provided in our Privacy Policy.

3. Right of Access (Article 15)

You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and access to that personal data.

What you can request:

  • Confirmation that your data is being processed
  • Access to your personal data
  • Information about the purposes of processing
  • Categories of personal data involved
  • Recipients of your data
  • Retention period for your data
  • Information about automated decision-making (if applicable)

How to request: Send an email to privacy@spinnordfi.com with the subject "Data Access Request"

Response time: Within 30 days (may be extended by 2 months for complex requests)

Cost: Free (unless requests are excessive or unfounded)

4. Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete personal data completed.

When to use this right:

  • Your personal data is inaccurate
  • Your personal data is incomplete
  • You want to update your information

How to request: Contact us at privacy@spinnordfi.com with details of the corrections needed

5. Right to Erasure ("Right to be Forgotten") (Article 17)

You have the right to have your personal data erased without undue delay in certain circumstances.

When this right applies:

  • The personal data is no longer necessary for the original purpose
  • You withdraw consent and there's no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The personal data has been unlawfully processed
  • Erasure is required for compliance with legal obligations

Exceptions (when we may not erase your data):

  • Freedom of expression and information
  • Compliance with legal obligations
  • Public health interests
  • Establishment, exercise, or defense of legal claims

How to request: Email privacy@spinnordfi.com with the subject "Data Erasure Request"

6. Right to Restrict Processing (Article 18)

You have the right to restrict the processing of your personal data in certain circumstances.

When this right applies:

  • You contest the accuracy of the data
  • Processing is unlawful but you don't want erasure
  • We no longer need the data but you need it for legal claims
  • You've objected to processing pending verification of our legitimate grounds

What restriction means: We can store your data but not use it for other purposes without your consent

7. Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

When this right applies:

  • Processing is based on consent or contract
  • Processing is carried out by automated means

What you can request:

  • Your data in a portable format (JSON, CSV, XML)
  • Direct transmission to another controller (where technically feasible)

How to request: Contact privacy@spinnordfi.com with the subject "Data Portability Request"

8. Right to Object (Article 21)

You have the right to object to processing of your personal data in certain circumstances.

Types of objection:

8.1 General Right to Object

You can object to processing based on legitimate interests or public interest/official authority.

Our response: We must stop processing unless we can show compelling legitimate grounds that override your interests, rights, and freedoms, or for legal claims.

8.2 Direct Marketing

You have an absolute right to object to processing for direct marketing purposes.

Our response: We must stop processing your data for direct marketing immediately.

8.3 Scientific/Historical Research

You can object to processing for scientific or historical research unless necessary for public interest tasks.

9. Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significant effects.

spinnordfi's position: We currently do not use automated decision-making or profiling that would have legal or significant effects on you.

10. Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time.

Important notes:

  • Withdrawal doesn't affect the lawfulness of processing before withdrawal
  • We'll inform you before collecting consent if withdrawal is possible
  • It should be as easy to withdraw consent as it was to give it

11. How to Exercise Your Rights

11.1 Contact Information

Primary Contact:
Email: privacy@spinnordfi.com
Phone: +358 12 345 6789
Address: Helsinki, Finland

Data Protection Officer:
Email: dpo@spinnordfi.com

11.2 What to Include in Your Request

  • Your full name and contact information
  • Clear description of the right you want to exercise
  • Specific information about your request
  • Proof of identity (copy of ID or passport)
  • Any relevant reference numbers or account details

11.3 Verification Process

To protect your privacy, we must verify your identity before processing rights requests. We may ask for:

  • Government-issued photo ID
  • Additional information to confirm your identity
  • Proof of address if processing location-specific data

11.4 Response Timeframes

  • Standard response: Within 30 days
  • Complex requests: Up to 90 days (we'll notify you of delays)
  • Urgent requests: We'll prioritize based on circumstances

12. Fees and Costs

Most rights requests are processed free of charge. However, we may charge a reasonable fee if:

  • Requests are clearly unfounded or excessive
  • You request multiple copies of the same information
  • Requests require disproportionate effort

If a fee applies, we'll inform you before processing your request.

13. Right to Lodge a Complaint

If you're not satisfied with how we handle your personal data or rights requests, you have the right to lodge a complaint with the supervisory authority.

Finnish Data Protection Authority

Office of the Data Protection Ombudsman
Address: PL 800, 00531 Helsinki, Finland
Phone: +358 29 566 6700
Email: tietosuoja@om.fi
Website: tietosuoja.fi/en

When to Contact the Authority

  • We don't respond to your request within the required timeframe
  • You're not satisfied with our response
  • You believe we're processing your data unlawfully
  • You want to file a general complaint about our data practices

14. Special Considerations for Finnish Users

14.1 Language Rights

You have the right to communicate with us in Finnish or Swedish as well as English. If you prefer to exercise your rights in Finnish, please indicate this in your request.

14.2 Finnish Data Protection Act

In addition to GDPR, the Finnish Data Protection Act (1050/2018) may provide additional protections. These rights complement your GDPR rights.

14.3 Cross-Border Processing

As a Finnish resident, your data may be processed in other EU countries. Your GDPR rights apply regardless of where in the EU your data is processed.

15. Updates to This Information

We may update this information to reflect changes in law or our practices. Significant changes will be communicated to you via:

  • Email notification (if you've provided your email)
  • Notice on our website
  • Updates to the "last updated" date

16. Additional Resources

Educational Resources

Templates and Forms

We can provide template forms for exercising your rights. Contact us at privacy@spinnordfi.com to request forms in Finnish or English.

17. Contact Us

For any questions about your GDPR rights or to exercise these rights, contact us:

General Inquiries:
Email: privacy@spinnordfi.com
Phone: +358 12 345 6789

Urgent Privacy Matters:
Email: dpo@spinnordfi.com

We're committed to protecting your privacy and will respond to all rights requests promptly and thoroughly.