Privacy notice: Contact information register for the Espoo City Library’s Lentävät laatikot service

Date of publication: 14 March 2025

City of Espoo

Director of Library Services

P.O. Box 3605, 02070 CITY OF ESPOO

Tel. +358 9 81621 (switchboard)

Liisa Vänttinen, Customer Service Manager

P.O. Box 3605, 02070 CITY OF ESPOO

Tel. +358 9 81621 (switchboard)

Data Protection Officer of the City of Espoo

Address: P.O. Box 12, 02070 City of Espoo

Tel. +358 9 81621 (switchboard)

Email: tietosuoja@espoo.fi

The purpose of the register is to maintain up-to-date contact information of the day care centres participating in the Lentävät laatikot (‘flying book boxes’) service for communication purposes.

Article 6(1)(e) of the General Data Protection Regulation of the European Union: processing is necessary for the performance of a task carried out in the public interest.

The registered day care centre’s contact person’s name, email address and telephone number.

Personal data is collected directly from the data subjects when they register for the service.

Data will not be disclosed or transferred to parties outside the City of Espoo.

Data will not be transferred outside the EU or the EEA.

The data is deleted from the register when the day care centre notifies the library that it will no longer use the service. When the contact person changes, the previous contact person’s data is deleted.

Data processing is regulated by the General Data Protection Regulation (e.g. the principles of purpose limitation, necessity and accuracy). Personal data is processed in a manner that ensures appropriate security of the personal data, including protection (Article 5(1)(f) of the General Data Protection Regulation). Personal data is protected against unauthorised access and unlawful processing, such as loss, alteration or disclosure. Each employee can only process the data they need to conduct their work. Each employee who processes data is under an obligation of secrecy and confidentiality, which remains in force even after the employee’s employment relationship has ended.

Further instructions on submitting information requests referred to in the General Data Protection Regulation: Rights of the data subject

You have the right to obtain from the data controller a copy of the personal data that is subject to processing. The data controller must provide the data without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests.

If the data controller does not take action on the request of the data subject, the data controller must inform the data subject without delay, and at the latest within one month of receipt of the request, of the reasons for not taking action and of the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

Requests from the data subject and any resulting actions are free of charge. However, where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the data controller may either charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested, or refuse to act on the request.

You have the right to have inaccurate, incomplete, outdated or unnecessary personal data that we store either rectified or completed by us.

You have the right to have the data controller erase your personal data without undue delay under certain conditions. The data subject does not have the right to erasure if the processing of data is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller. In these cases, the data will only be erased after the statutory time limit.

If the data concerning you is inaccurate, you have the right to request that its processing be restricted until its accuracy has been verified.

You have the right to lodge a complaint with a supervisory authority if you feel that the processing of your personal data is in infringement of data protection legislation. You can lodge a complaint with the Office of the Data Protection Ombudsman: www.tietosuoja.fi(external link, opens in a new window)