Information about data processing

  • How long will personal data be processed

    Unlimited The personal data will be retained for as long as the ecosystem is active.

    When contacting the data subjects, they will be informed about options on how to be removed from the register, (e.g. subjects can ask to be removed from the registry via email communication). The registry will be updated periodically by the Data controller. After this the personal data is either erased or anonymized of such personal data.

    Principles of protection of the register
    The data is protected by technical and organizational measures from unauthorized processing and unauthorized access by third parties. Only persons who need access to the personal data for the purpose carrying out tasks related to processing described in this document have access to the personal data, under confidentiality obligations.

  • What type of personal data will be collected and used

    The categories of the personal data are first name, last name, organisation, e-mail and topics of interest.

    The survey participants represent Build4Clima interest groups, such as representatives of potential and current customers, collaborators and partners of Build4Clima.

    Sources of personal data 
    The personal data is collected from the data subject (participants) through questionnaire.

  • What special categories of personal data will be collected and used

    Special categories of personal data will not be collected and used.

    Purpose of processing personal data
    The Build4Clima project objectives require the building up of views and opinions from stakeholders for the purpose of communication and evaluation about the project and the establishment of an ‘ecosystem’ and roadmap related to project themes, developed from such opinions captured in a questionnaire.

    The personal data will be used as a stakeholder registry and used for organizing events and communication during the period of operation of the Build4Clima ecosystem. The data will be used to collect, to plan and organise activities of the ecosystem.

    For details of the ecosystem, please see: www.build4clima.com.

  • Legal basis for processing your personal data

    The data is being processed on the basis of legitimate interest of the Controller. The legitimate interest is the right to conduct relevant and justified research and innovation activity and there to related communication and marketing to relevant interest groups.

    It is not possible to analysis the data without the personal data being linked to the views and opinions captured.

  • Who will have access to your personal data

    VTT is the Data Controller. The Questback License and MS-Teams space is controlled by VTT, and Tampere University will be given access to the data. VTT and Tampere University will both be analysing the data. VTT is responsible destruction of the data.

    Only Project members will have access to the Data.

    Data is stored on Questback Ltd.’s server (on EU/EEC Servers). Data can be handled securely in joint workspace of VTT and Tampere University in Microsoft Teams. It will be anonymised prior to further processing. Anonymised data can be moved to computers, servers and other ICT equipment of VTT and Tampere University that are used in Build4Clima project.

  • Transfer of data to non-EU/EEC country or international organisation, and safeguards (if applicable)

    The personal data is not transferred outside European Union or EEA.

    Transfer or disclosure of data to external parties 
    No data will be disclosed or transferred to external parties.

  • Statutory or contractual requirement

    No.

  • Automated decision making

    No automated decision making is made with the personal data.

  • Your individual rights

    The data subject can exercise these rights by contacting the Controller, preferably in writing and by email using an address that is known to the Controller. The data subjects have the following rights, which may be exempted from in accordance with GDPR and applicable legislation:

    Right of access
    The data subjects have the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her is being processed and access to his or her personal data and information concerning the processing of his or her personal data.

    Right to object
    The data subjects may object to the processing of personal data, especially in cases processing is carried out on the basis of legitimate interest of the Controller.

    Right to rectification
    The data subjects have the right to obtain from the Controller rectification of inaccurate personal data concerning him or her. The data subjects have the right to have incomplete personal data completed.

    Right to erasure
    The data subjects have the right to obtain from the Controller the erasure of personal data concerning him or her if there is no other legal ground for processing.

    Right to restriction of processing
    The data subjects have the right to obtain from the Controller restriction of processing in cases set forth in GDPR.

  • Your right to withdraw consent

    -

  • Supervisory authority

    The data subjects have a right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data breaches the data subject’s rights pursuant to GDPR.

  • Our data protection officer

    VTT: 
    VTT shall act as a principal contact point for data subjects’ requests. And will be designated the Data Controller regarding the roles and responsiblities. 

    Data protection officer (DPO) at VTT:
    Name: Seppo Viinikainen
    Address: VTT Technical Research Centre of Finland Ltd., Koivurannantie 1, 40400 Jyväskylä, Finland
    E-mail: dataprotection@vtt.fi (DPO, data security manager and legal counsel), or Seppo.Viinikainen@vtt.fi (DPO)

    Contact person concerning the processing at VTT:
    Project Owner (Principle Investigator)
    Pekka Tuominen

    Project Manager
    Name: Alina Ruonala-Lindgren
    Address: VTT Technical Research Centre of Finland Ltd., Tietotie 4E, 02150 Espoo, Finland
    E-mail: alina.ruonala-lindgren@vtt.fi

    Tampere University:
    Tampere University will be designated a Data Controller regarding the roles and responsiblities.

    Data protection officer (DPO) at Tampere University:
    Data protection officer, Tampereen yliopisto, 33014 Tampereen yliopisto
    E-mail: dpo@tuni.fi

    Contact person concerning the processing at Tampere University:
    Project Owner (Principle Investigator)
    Fernando Nieto Fernandez

    Project Manager
    Name: Simon Kay-Jones 
    Address: Rakennustalo, Korkeakoulunkatu 5, 33700 Tampere, Finland
    E-mail: simon.kay-jones@tuni.fi

    Personnel data processors:
    VTT key personnel:
    • Tomi Erho 
    • Vesa Kunnari
    • Jussi Rönty
    • Tiina Vainio-Kaila

    Tampere University key personnel:
    • Rosana Rubio
    • Johanna Lahti
    • Markku Karjalainen
    • Sofie Pelsmakers