Data protection in the Energy Authority
The Energy Authority applies the principles and goals of the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act, as well as good data management practices and the Finnish Act on the Openness of Government Activities, to the processing of personal data. The Energy Authority mainly processes personal data when carrying out its statutory tasks and only to the extent necessary for its specific official tasks.
We do not need the consent of data subjects to process personal data collected on the basis of the fulfilment of statutory obligations. We also collect personal data to produce certain services, such as newsletters. In this case, we will request data subjects to give their consent to the processing of personal data. Data subjects can also withdraw their consent at any time.
The Energy Authority does not primarily disclose any personal data outside a specific group of people. The Energy Authority does not disclose any personal data for marketing purposes.
The Energy Authority’s online service systems
More detailed descriptions of the processing of personal data in the Energy Authority’s online service systems are available in the privacy policies on the Finnish website. The privacy policies indicate what personal data is retained in each service system, from what sources personal data is collected and for what purposes personal data is used.
Rights of data subjects
The Energy Authority ensures that the rights of data subjects are fulfilled. Each data subject has the right to access their data, check that it is correct and have any incorrect data rectified.
Request to access registered personal data
If you want to check what data about you has been saved in the Energy Authority's registers, fill in and send the attached online form. You can also send a request to access your personal data via email. Please note that your message must indicate the data included in the online form. Send your email to [email protected].
The Energy Authority will provide you with the requested data no later than one month after receiving your request. If your request is broad and complicated, the deadline may be extended by two months.
Registered personal data is mainly provided free of charge. If your request is apparently unjustified and unreasonable, particularly if you send requests repeatedly, the Energy Authority may collect the costs arising from the provision of data from you or refuse to provide the data requested.
Right to have data rectified and erased
You have the right to request us to rectify or supplement your possibly incorrect or incomplete personal data.
Furthermore, you have the right to request that your personal data be erased from the Energy Authority’s registers if the processing of personal data is based on grounds other than the fulfilment of statutory obligations. These registers include, for example, newsletter distribution lists. The right to have data erased does not apply to registers, in which the processing of personal data is based on the fulfilment of statutory obligations.
Please send your request to have your personal data rectified or erased via email to [email protected].
Right to file a complaint
If you have any questions about the processing of your personal data, primarily contact the Energy Authority’s data protection officer. The data protection officer is responsible, for example, for monitoring compliance with the GDPR in the Energy Authority.
If you consider that the processing of your personal data is in breach of the GDPR, you have the right to file a complaint with the supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (link: https://tietosuoja.fi/en/home).
Contact information
The Energy Authority’s data protection officer is legal adviser Vera Keitaanranta, tel. 0295 050 124, [email protected].