Data protection statements

Regulation (EU) 2016/679 of the European Parliament and of the Council 

• Issue date 16 May 2018 
• Updated on 27 August 2019 – Modified in accordance with the new service package 
• Updated on 12 December 2019 – Added to section 5. "Analytics and feedback system" and supplemented to sections 7 and 11-13
• Updated 27 November 2020 – Changes to cookies after autumn updates in section 15
• Updated 19 November 2021 – Added information about EURES profile to section 5
• Updated 28 April 2022 - Automatic deletion after a year added to section 10.
• Updated 14 November 2022 – Added information about chatbot to section 5
• Updated 23 January 2023 – Added information about job alerts to section 5
• Updated 17 April 2023 – Added updated information about the feedback system to section 5.1
• Updated 22 June 2023 – Added "country of residence" to section 5
• Updated 11 October 2023 – Completed section 4 to match legislation, updated sections 7 and 8, and combined sections 8 and 9, so the ordinal numbers of the titles of later sections have been reduced by one
• Updated 1 January 2025 - The terms in sections 5, 6, and 9 have been modified due to the reform of TE services.

1. Controller 

KEHA-keskus 
P.O. Box 1000, FI-50101 Mikkeli, Finland 
+358 295 020 000, kirjaamo.keha@ely-keskus.fi 

2. Contact person for matters concerning the register 

Data Protection Officer:
tietosuoja.keha@ely-keskus.fi

Contacts on matters concerning the register:
P.O. Box 1000, FI-50101 Mikkeli, Finland 
tyomarkkinatori.keha@ely-keskus.fi

3. Name of the register 

Job Market Finland (the Service) 

4. Purpose of personal data processing 

The register data in the information system is used to promote employment and the functioning of the labour market and for statistics. With regard to job seeker profiles, the processing of personal data is based on the controller's statutory obligation. With regard to other data, the processing is based on a statutory obligation or public interest: the processing is necessary and proportionate for the performance of a public interest task by an authority. In addition, data may be processed for archiving, research and statistical purposes in accordance with the public interest and compatible with the aforestated purposes.

5. Register’s data content 

This privacy policy statement applies only to the functions and data of the 'My Job Path' section of the Job Market Finland online service. You can find more information about the processing of personal data related to the services of public employment and business services, i.e., the functions of the 'E-services' section of Job Market Finland, in the privacy policy statement for the E-services.

With regard to private customers, the data recorded in the Service register is based on the data retrieved from the Population Information System and the data provided by the customer. 

With regard to employer customers, the data is based on the Business Information System and partly on the data provided by the employer or the employer's representative. 

The following information concerning identified private customers will be stored: 

• personal identification data: personal identity code, name, email address, phone number 
• data concerning education, work experience and expertise 
• transaction data time stamps 
• country of residence

The following information concerning identified employer customers or their representatives will be stored: 

• personal identification data: personal identity code, name, email address, phone number 
• the information recorded in the job posting by the employer customer 
• basic information concerning the organisation and the customisable marketing data  

In both cases, the following is stored for the duration of the log in session: 

• authorisation data 

In addition, the following information is stored concerning users who publish their profile on the EURES portal:

• gender
• country of residence
• working languages
• citizenship

The job postings, including the information content, are transferred from the customer information system of the Employment and Economic Development Office to the Service.   

The Service user is responsible for the correctness of data they have supplied themselves. 

5.1 Analytics and feedback system

The Job Market Finland service uses the Matomo analytics tool to collect statistical data. Examples of such data include:

• the number of visitors on the services website
• terminal devices which have been used to access the service
• web addresses from which visitors to the services originate
• individual pages that visitors have viewed.

The data collected by the analytics tool never includes the person's name, social security number, or other similar identifying data. The IP address collected by Matomo is also encrypted so that the user cannot be identified. In addition, Job Market Finland does not use this data to attempt to identify individual website visitors. If the user has configured "Do Not Track" in the web browser, the analytics tool will not collect or monitor browsing data. 

In addition, the service may save contact details given by the user – usually email address – if the user leaves feedback. Feedback is used to improve the service, and non-mandatory contact information can be given if the user wishes to receive a response for their feedback. Feedback and contact data are removed from the feedback system every 12 months.

5.2 Chatbot

The chat history of the chatbot operating on the Job Market stores the keywords and phrases entered by the customer. No personal data is stored in conversations, the app anonymizes conversations automatically. Discussions will be kept in the system for 180 days.

5.3 Job alerts

The Job Alert functionality allows the user to subscribe to email notifications of new open jobs matching their chosen search criteria. The use of the functionality does not require logging in. For Job Alerts, the following user data is collected:

• the user's email address,
• information about confirming the subscription and accepting the terms of use, and
• job search information.

A Job Alert is valid for a maximum of 3 months at a time, after which email addresses are deleted from the service's database. The user can also cancel the subscription during its validity, and in such cases the above-mentioned stored data is deleted.

6. Regular sources of information 

With regard to private customers, the data recorded in the Service register is based on the data retrieved from the Population Information System and the data provided by the customer.

With regard to employer customers, the data is based on the Business Information System and partly on the data provided by the employer or the employer's representative.

As data sources, the register uses the data resources and services connected to the Service: 

• suomi.fi identification (Population Information System, requires the data subject’s consent) 
• suomi.fi e-Authorizations (Business Information System) 
• customer data system of the Employment and Economic Development Office  
• data provided by the User 

7. Regular disclosures of data 

Personal data or other information in the service will not be disclosed to an authority or other body without the consent of the user or a party authorised by the user or without the right to obtain information as defined in legislation.

However, the data recorded in the service can be utilised without the separate consent of the Service user in scientific studies, statistics or other official investigations. The KEHA-Centre grants a separate authorisation for the disclosure of data for these purposes. In the aforementioned contexts, the processing and publication of data is always carried out in such a way that individual users cannot be identified or individualised from statistics or research results.

8. Transferring data outside of the EU or the EEA 

The data is stored in the EU/EEA area on a cloud server that is protected by physical and software protection by, for example, encrypting the databases and data communication. We restrict access to systems and databases containing personal data to the appointed persons who have an essential work-related need and the right to process the personal data in question.

The Service uses secure connections, and the users are identified (using strong identification).

9. Data storage period  

The data will be stored for a year from the time the user last logged in or until the user deletes the account or requests the controller to delete the account. This retention period does not apply to the retention periods of personal data followed in the public employment and business services, i.e., in the 'E-services' section of Job Market Finland, which you can read more about in the privacy policy statement for the E-services.

10. Right to review 

The registered person has the right to check the data stored in the personal data file. You can check the data under “My information” in the “My own pages” section (the Account Manager tab). Preferably, you should inspect the data yourself. It is also possible to submit an inspection request by e-mail to: tyomarkkinatori.keha(at)ely-keskus.fi.

11. Right to demand rectification of data 

Data subjects shall be entitled to demand for rectification of erroneous data in the register. If you do not succeed in correcting the data on your own, a request for rectification should be sent by e-mail to: tyomarkkinatori.keha(at)ely-keskus.fi.

12. Right to erasure 

Data subjects shall be entitled to erase their personal data in the register or to demand for personal data in the register to be deleted. Primarily, the data subjects delete the information themselves under "My Data" in the "My Pages" section ("Manage My Account” window). This removes the data from the service immediately upon deletion. Users may also forward a request to delete data by e-mail to: tyomarkkinatori.keha(at)ely-keskus.fi. In this case, the data will be erased within 30 days of the request. No separate verification of the erasure will be provided.  

13. Other rights related to the processing of personal data 

Personal data are neither used nor disclosed for the purpose of direct advertising, distance marketing or other directing marketing, market and opinion research, registers of individuals, or genealogies. 

14. Cookies 

Cookies are used in the Service. A cookie is a small text file, sent to the user's computer and stored in the computer, that enables the service to identify frequent visitors to a website, facilitate the login process of visitors to a website, and enable the preparation of combined data on visitors. Cookies do not cause any damage to users’ computers or files. When cookies are used, customised information and services can be provided to the users of the Service depending on their needs. 

If you do not want to allow cookies, you may block cookies from the banner appearing at the bottom of the site or from your Internet browser settings. Some cookies are necessary for the functioning of the service and for this reason, the use of the service requires accepting them. However, the user can block the use of cookies related to analytics.

Read more about the use of cookies in Job Market Finland:

15. Log data 

Log files are compiled on the use of the Service that contain event rows related to data security and the operation of the service. Data stored in the log file does not contain information saved by the user; the only stored user data are the user ID and IP address. Data in the log file are only used for investigating any disruptions in the Service and possible data security threats and violations. Access to the log data is only permitted to persons who participate in the resolving of the above-mentioned issues. 

16. Notifications and complaints concerning the processing of personal data 

If necessary, a user can lodge a complaint or appeal with the Data Protection Ombudsman concerning the processing of their personal data.

1. Controller and contact details in matters concerning the register

The KEHA Centre and the employment officials act as joint controllers of the national data repository of employment services. Provisions on the division of responsibilities between joint controllers are laid down in section 123 of the Act on the organisation of employment services (380/2023). The KEHA Centre is responsible for the controller’s obligations related to data protection by design and by default, processing security and informing the data subjects. Employment officials are responsible for the controller’s obligations other than those laid down for the KEHA Centre; each official is responsible for its own customers.

KEHA Centre (Development and administration centre for the ELY Centres)
P.O. Box 1000, 50101 Mikkeli
+358 295 020 000, kirjaamo.keha@ely-keskus.fi

Data Protection Officer of the KEHA Centre:
tietosuoja.keha@ely-keskus.fi

You can find contact information to your local employment authority on the regional pages.

2. Purpose of personal data processing

Data from customers and employment service providers may be used for the following purposes:

• the organisation and provision of services and tasks referred to in the Act on the organisation of employment services (380/2023);
• for tasks laid down for employment officials or the development and administrative centre in the Act on the Promotion of Immigrant Integration, the Unemployment Security Act, the Act on Rehabilitative Work Activities, and the Act on Vocational Education and Training; in addition, for tasks laid down for the development and administrative centre related to international recruitment services and the provision of guidance and advice on employment services and unemployment security as referred to in the Act on Centres for Economic Development, Transport and the Environment (897/2009); (5 December 2024/728)
• supervision, development, monitoring, evaluation, statistics, foresight and guidance of the tasks referred to in 1 and 2.

3. Grounds for personal data processing

The grounds for the processing of personal data are the controller’s statutory obligation. The controllers process data to perform their statutory duties.

4. Personal data to be processed

The following data referred to in the Act on the organisation of employment services (380/2023) may be processed on individual customers:

• personal identity code;
• name and contact information;
• information related to the customer relationship with the employment services and service use with the employment official or the development and administration centre, and any special arrangements required by the service use;
• information on education, employment history, professional skills and other information used in employment services;
• information on service needs, plans and implementation of plans;
• information on job and training offers and introductions to employers;
• information on public employment services, services promoting employment as referred to in the Unemployment Security Act, other services supporting job seeking and employment, and expert assessments;
• information and assessments on health, work ability and functional capacity that have an impact on a person's employment and are necessary to provide services to the customer;
• reports, labour policy statements and other statements and notifications related to unemployment security; the information mentioned and the information necessary for issuing a labour policy statement and other statements may also be processed when a natural person is not a personal customer;
• information on benefits related to public employment services.

The following information may be processed on an employer applying for or receiving employment services:

• identification data;
• information related to the customer relationship with the employment services and service use with the employment official or the development and administration centre;
• information related to activities and service needs;
• information on jobs and related recruitments, including international recruitment;
• decisions on pay subsidy, employment subsidy for those aged 55 or over, and support referred to in section 111 and the related monitoring and payment data;
• work trial agreements;
• information other than that referred to in sections 1–6 necessary for the planning, organisation, implementation and monitoring of the public employment service.

The following information may be processed on employment service providers:

• identification data of the service provider;
• information related to service use with the employment official or the development and administration centre;
• procurement contracts concluded with the service provider and related payment data,
• data concerning the service acquired;
• application, selection, and monitoring data on the service;
• information other than that referred to in sections 1–5 necessary for the planning, organisation, implementation and monitoring of the employment service.
• information on labour market training referred to in the Act on Vocational Education and Training and its organiser as well as application, admission and monitoring information related to education and training.

Data subjects do not have the right to restrict the processing of the data referred to in the subsection 1 as laid down in Article 18 of the GDPR.

According to the Act on the Openness of Government Activities, the information concerning personal customers of the Labour Administration and their services is confidential.

5. Storage period of personal data

The Development and Administration Centre shall delete all information concerning the customer or service provider from the national data repository four years after the termination of the customer or contractual relationship. At that time, the customer’s data will also be removed from the Job Market Finland’s E-Services. However, the data does not need to be deleted if it is necessary for carrying out a task based on regulations, or due to a pending matter.

Provisions on archiving data are laid down in the Archives Act (831/1994).

6. Regular data sources

Personal data are stored in personal data files only when there is a justified reason for doing so. Personal data is obtained to the register from the data subjects themselves and also collected during customer transactions at Job Market Finland’s E-services, on the telephone and in connection with visits.

Notwithstanding confidentiality, the employment official has the right to obtain the data necessary for the implementation of employment services free of charge from another employment official, another municipal authority, state authority, wellbeing services county, Kela, unemployment fund, the Finnish Centre for Pensions, the Employment Fund, provider of employment services, another service provider of a service promoting employment as organised by an employment official and agreed in the employment or similar plan, or organiser of a work trial.

Information on recruitment decisions related to vacancies and concerning individuals is obtained from employers.

When the source of personal data recorded in the register is not the registered person him/herself, an entry is made to the register identifying the source of the information and the party having entered it.

7. Recipients of personal data

Information disclosed to authorities

Notwithstanding secrecy provisions, the Development and Administration Centre has the right, free of charge, to obtain information that is necessary for the Centre to carry out tasks related to the implementation, monitoring and evaluation of employment services laid down in legislation from other government authorities, employment officials, other municipal authorities, the limited liability company called Business Finland, Kela, and the Unemployment Fund.

Notwithstanding secrecy provisions, the Ministry of Economic Affairs and Employment has the right to obtain, free of charge, information that is necessary for the implementation, monitoring, evaluation and steering of the employment services laid down for the Ministry in legislation from the Development and Administrative Centre, other state authorities, employment officials, and other municipal authorities. The Development and Administration Centre is also obliged to disclose to the Ministry of Economic Affairs and Employment the data stored in the data repository for the purpose of compiling employment service statistics.

Notwithstanding confidentiality provisions, the Regional State Administrative Agency has the right, free of charge, to obtain the information necessary for carrying out supervision as referred to in section 25 of the Act on the organisation of employment services (380/2023) from the employment official and the Development and Administrative Centre.

Notwithstanding confidentiality provisions, a member of the admission group for labour market training has the right to receive information on the application and appendices of the person applying for the training.

The employment officials, Development and Administration Centre, Kela, unemployment funds, and foreign organisations that are authorised to process individuals’ job seeking and unemployment security data have the mutual right to exchange information related to job seeking and unemployment security that have an impact on individuals’ right to receive an unemployment benefit.  (Unemployment Security Act 1290/2002, Act on the Application of European Union Legislation Concerning the Coordination of Social Security Systems, 352/2010).

Customer information is disclosed to other authorities if the disclosure of the information is provided by law or if the customer gives their consent to such disclosure. The content of the information to be disclosed is determined based on the scope of jurisdiction of the requesting authority. Authorities that have the right to request information about the customer include the Employment and Economic Development Centre, the Local Government Pensions Institution, the Finnish Immigration Service, the police, social welfare authorities and judgment execution authorities.

Data disclosed to the employment service provider

Notwithstanding confidentiality provisions, the employment service provider and the service provider offering services promoting employment organised by the employment authority as agreed in the employment plan or a plan replacing it have the right to obtain, free of charge, information on a personal customer that is necessary for the provision and implementation of the service from the employment official and the development and administrative centre. The disclosure of the customer’s health information to the service provider is only possible if the customer gives their individual written consent to the disclosure.

Information disclosed to the employer

The employment official may disclose information necessary for recruitment on the job seeker to the employer only with the written consent of the job seeker. Information about consent or refusal of consent is recorded in the customer details. Provisions on the information required for hiring are laid down in Section 118 of the Act on the organisation of employment services (380/2023).

Information on the job seeker’s health may only be disclosed to the employer if the job seeker gives their specific written consent to it and if the information is necessary to meet the special health requirements of the job or the field in question or to promote the employment of a job seeker whose disability or illness makes it difficult to find employment.

Notwithstanding confidentiality provisions, an employer has the right to obtain, free of charge, information from the employment official on whether the person specified by the employer is a registered job seeker with the employment and economic development office, in order to fulfil the obligation concerning the re-employment of a dismissed employee, official, or public servant as laid down in Acts on employment and public-service employment relationships.

Disclosure of information for research purposes

Decisions on granting permission to disclose confidential information in the national data repository of employment services for the purposes of statistics, scientific research or planning or investigation by authorities as referred to in section 28 of the Act on the Openness of Government Activities are made by the KEHA Centre. The content of the information to be submitted is determined in the research plan attached to the research permit application.

8. Transferring data outside of the EU or the EEA

Data are not transferred outside the EU or ETA area.

9. Principles of register protection

Only persons who have the right to process the data required for processing the matter can access the data in the service. Only specific and specified controller’s employees or third-party employees authorised by the controller in advance may access information contained in the service register. Personal data is also protected by access control, use control and guidelines for the processing of personal data. Customer information is confidential and the personnel handling it have a duty of confidentiality.

Provisions on access rights to the customer data system as well as granting and removing those rights are laid down in legislation (Sections 124–126 of the Act on the Organisation of Employment Services 380/2023).

10. Data subject’s rights

You have the right to know whether personal data concerning you are being processed and the right to receive a copy of your personal data (Article 15 of the GDPR). If a personal customer wishes to check what information has been stored in the customer information system concerning them, the customer must request information from the employment official in charge of the customer relationship.

You have the right to request the rectification of incorrect data concerning you (Article 16 of the GDPR). If you wish to rectify data on you, submit a request to the employment official who processes the request and decides on the matter, taking into account the laws and decrees related to the matter.

You do not have the right to restrict the processing of the data referred to in subsection 1 as laid down in Article 18 of the GDPR (Section 114 of the Act on the organisation of employment services 380/2023). If you wish to withdraw your consent for the disclosure of data, this must be requested from the party to whom consent was given. Decisions based on automated decision-making, such as profiling, are not made in the processing of personal data.

For more information on the processing of your personal data, contact the employment official of which you are a customer.

You have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data violates applicable data protection legislation. In Finland, the Data Protection Ombudsman acts as the supervisory authority.

1. Controller and contact details in matters concerning the register

The Development and Administration Centre, employment officials, wellbeing services counties and Kela act as joint controllers of information of the cross-sectoral joint service (Section 11 of the Act on multi-sectoral joint services promoting employment 381/2023). Employment officials, wellbeing service counties and Kela are responsible for the controller’s obligations set out in the GDPR regarding any information they have saved in customer data that have not been separately assigned to the KEHA Centre.

KEHA Centre P.O. Box 1000, 50101 Mikkeli +358 295 020 000, kirjaamo.keha@ely-keskus.fi

Data Protection Officer: tietosuoja.keha@ely-keskus.fi

2. Purpose of personal data processing

Data on unemployed persons and the intended use of the data

The employment official, the wellbeing services county and Kela may process data on an unemployed person in order to carry out their tasks laid down in legislation related to the cross-sectoral support cooperation model and the supervision, development, monitoring, evaluation, statistics, foresight and guidance related to these tasks.

Customer information material and system for the multidisciplinary cooperation model

The KEHA Centre develops and maintains a multidisciplinary cooperation model for customer data and a customer information system for implementing the model.

The employment official, the wellbeing services county and Kela shall store information referred to in section 11 of the Act on multi-sectoral joint services promoting employment 381/2023 in the customer data set of the cooperation model for multi-sectoral support. The data of an unemployed person may be stored in the dataset after the customer relationship in the multi-sectoral joint service model has started.

3. Grounds for personal data processing

The processing of personal data is based on the controller’s statutory obligation (Act on multi-sectoral joint services promoting employment 381/2023).

4. Personal data to be processed

The following information may be processed on the unemployed person:

- name, personal identity code and contact details;

- data related to customer relationships with the cross-sectoral joint model and using services, and any data related to special arrangements in relation to this;

- data concerning education, work experience and expertise;

- information on a social situation which affects employment and is necessary for the provision of services;

- information and assessments on health, work ability and functional capacity that have an impact on employment and are necessary to provide services to the customer;

- information on service needs that affect employment;

- information on the multi-sectoral employment plan and its implementation, monitoring and review.

According to the Act on the Openness of Government Activities, the information concerning personal customers of the Labour Administration and their services is confidential.

5. Storage period of personal data

The Development and Administration Centre shall delete all information on the unemployed person four years after the end of the customer relationship with the cross-sectoral joint services. However, the data does not need to be deleted if it is necessary for carrying out a task based on regulations, or due to a pending matter.

In accordance with the Archives Act (831/1994), some of the customer data have been designated by the National Archive for permanent storage. The data designated for permanent storage is transferred to the National Archive after being removed from the customer data system.

6. Regular data sources Regardless of the consent of the unemployed person, the employment official, the wellbeing services county and Kela have the right, notwithstanding confidentiality and other restrictions on the information, to access the information on the unemployed person under Section 11, subsection 2 of the Act on multi-sectoral joint services promoting employment in order to organise multi-sectoral joint support for the unemployed. (Act on multi-sectoral joint services promoting employment, 381/2023). If necessary, data and documents may be collected and obtained with the customer’s specific consent from the following sources, when necessary:

- the customer and reports provided by the customer

- private persons appointed by the customer

- employer

- organisers of rehabilitative work activities

- providers of services promoting employment

- rehabilitation institution

- pension institution

- health care professionals

- substance abuse services

- A-Clinic

- customer cooperation group in rehabilitation services

- employment register of the Finnish Centre for Pensions

- educational institutions, school services and other parties providing education

- prison facilities

- outsourced service providers

7. Recipients of personal data

Regardless of the consent of the unemployed person, the employment official, the wellbeing services county and Kela have the right, notwithstanding confidentiality and other restrictions on the information, to access the information on the unemployed person under Section 11, subsection 2 of the Act on multi-sectoral joint services promoting employment in order to organise multi-sectoral joint support for the unemployed.

8. Transferring data outside of the EU or the EEA

Data are not transferred outside the EU or ETA area.

9. Principles of register protection

Only persons who have the right to process the data required for processing the matter can access the data in the service. Only specific and specified controller’s employees or third-party employees authorised by the controller in advance may access information contained in the service register. Personal data is also protected by access control, use control and guidelines for the processing of personal data.

The use of the customer information system requires personal access rights. The Development and Administration Centre may grant access rights to a person employed by the employment authority, wellbeing services county or Kela who is carrying out tasks referred to in this Act.

10. Data subject’s rights

You have the right to know whether personal data concerning you are being processed and the right to receive a copy of your personal data (Article 15 of the GDPR). If a personal customer wishes to check what information has been stored in the customer information system concerning them, the customer must request information from the controller in charge.

You have the right to request the rectification of incorrect data concerning you (Article 16 of the GDPR). If you wish to rectify data on you, submit a request to the controller in charge who processes the request and decides on the matter, taking into account the laws and decrees related to the storage of the data.

You do not have the right to restrict the processing of the data referred to in subsection 1 as laid down in Article 18 of the GDPR (Section 12 of the Act on multi-sectoral joint services promoting employment 381/2023).

If you wish to withdraw your consent for the disclosure of data, this must be requested from the party to whom consent was given. Decisions based on automated decision-making, such as profiling, are not made in the processing of personal data.

For more information on the processing of your personal data, contact the employment official of which you are a customer.

You have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data violates applicable data protection legislation. In Finland, the Data Protection Ombudsman acts as the supervisory authority.

The purpose of this privacy statement is to provide information on the processing of personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679. The statement will be updated if necessary.

1. Register controller and the controller's contact details

Development and Administration Centre of the Centres for Economic Development, Transport and the Environment (KEHA Centre)

Guidance and advice to customers P.O. Box 1000, 50101 Mikkeli Visiting address: Jääkärinkatu 14, 50100 Mikkeli Tel. +358 295 020 000, kirjaamo.keha@ely-keskus.fi

2. Data protection officer

Data Protection Officer: tietosuoja.keha@ely-keskus.fi

3. Names of the registers

Guidance and advice to customers division at the KEHA Centre (Personal customer and official services, Enterprise Finland helpline, Talousapu helpline, Work In Finland employer advisory services for international recruitment) customer service systems’

• telephone calls
• chat conversations 
• e-mails
• electronic contact requests.

4. Purpose of personal data processing

Article 6 of the EU General Data Protection Regulation (EU) 2016/679.

Information is needed for the performance of statutory tasks, for the implementation of services and for communication, as regulated by the following laws:

• Act on the organisation of employment services, 380/2023
• Unemployment Security Act, 1290/2002
• Act on the Promotion of Integration, 681/2023
• Act on Rehabilitative Work Activities, 189/2001
• Act on multi-sectoral joint services promoting employment, 381/2023
• EU Regulation on a digital gateway, EU 2018/1724
• EU Directive on preventive restructuring frameworks and discharge of debt, EU 2019/1023
• Directive on restructuring and insolvency, EU 2017/1132

The information is used to verify the service event in case of a complaint and for the development of operations and the training of customer service personnel in order to improve the quality of the service.

5. Register’s data content and personal data groups

Data stored in the register includes data reported by the customer and the data generated in a customer service situation, such as:

personal identification data:

• name and personal identity code
• address and phone number, e-mail address, IP address
• employment and work history information and unemployment security information
• personal information that has been created in a counselling or guidance situation, brought up by the customer or the official

business information:

• name and business ID
• address and phone number, e-mail address, IP address
• topics of the enquiries
• business operations-related information created in a counselling or guidance situation, brought up by the customer or the official.

6. Data retention period

Call recordings are stored for six (6) months. For quality development projects and complaints, individual recordings may be stored for a longer period, but no longer than 12 months. Data from identifying at the suomi.fi service which was given while queuing is not stored in the system. Suomi.fi identification is displayed to the expert only for the duration of the conversation.

Chats do not contain identifying information on customers. The conversation threads are kept for six (6) months. During the conversation, the customer can choose to have the chat history be sent to them by e-mail.

Emails and electronic contact requests are stored for six (6) months. The conversation is saved in the customer's e-mail. 

The data collected in electronic service requests in the Business Finland guidance and advice service (customer’s situation citizen/company/other, customer’s country of location, topic of the enquiry) and customer satisfaction surveys will be stored in the European Commission’s data repository for a maximum of three years, after which it will be automatically removed.

7. Regular data sources

Information provided by the customer and generated during the conversation as well as the national systems of employment services, the Trade Register, the Register of Foundations and the Register of Associations, and the joint customer information system of the administrative sector of the Ministry for Economic Affairs and Employment and the Ministry for Foreign Affairs. Customer identification

information is obtained from the Digital and Population Data Services Agency through the suomi.fi identification service.

8. Regular disclosure of information

No regular disclosure.

The Guidance and advice to customers service by the KEHA Centre discloses customer information to other authorities only when disclosure is regulated by law.

9. Regular disclosure of personal data or transfer of data outside the EU or the EEA

The data shall not be disclosed or transferred outside of the EU or the EEA.

10. Principles of register protection

Article 32 of the EU General Data Protection Regulation (EU) 2016/679.

The information security and protection of personal data in the Customer and Advisory Services area of responsibility of the KEHA Centre is systematically taken into account in all data use and processing. The Guidance and advice to customers Division of the KEHA Centre processes personal data securely and in accordance with legislation.

All processors of personal data in the Guidance and advice to customers division of the KEHA Centre sign a confidentiality commitment. Register data is only used by persons who need this data in their work tasks according to their access rights. The service provider of the storage system has a duty of professional secrecy.

11. Inspection right and requesting data

Article 15 of the EU General Data Protection Regulation (EU) 2016/679.

The data subject has the right to inspect the data in the register concerning him or her.

The inspection request must always be made in writing and must be signed. The inspection request must specify the time of the communications that the request concerns as well as the contact details used for the communications. Address the inspection request to the Guidance and advice to customers division of the KEHA Centre and send it by post or e-mail to the registry of the KEHA Centre (contact details in section 1). The sender of the email must encrypt the email in order to ensure privacy. Read more about inspecting your data (tietosuoja.fi)

The recording of the call can be listened to in a separately agreed manner. The customer must be prepared to prove their identity.

12. Right to rectify data and erase data

Articles 16 and 17 of the EU General Data Protection Regulation (EU) 2016/679.

The data subject has the right to demand the correction and erasure of incorrect personal data in the register.

A request for rectification must always be made in writing and must be signed. The written request must specify which personal data file the rectification request applies to. Address the request to the Guidance and advice to customers division of the KEHA Centre and send it by post or e-mail to the

registry of the KEHA Centre (contact details in section 1). The sender of the email must encrypt the email in order to ensure privacy. Read more about making a request for rectification (tietosuoja.fi)

The right to erase data does not apply to the personal data that employment officials need for the performance of a statutory task. 

For any refusal to correct/erase data, a written report is sent to the customer indicating the reasons for the refusal.

13. Complaint or appeal concerning the processing of personal data

Article 77 of the EU General Data Protection Regulation (EU) 2016/679.

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if he or she considers that the processing of personal data infringes the EU Data Protection Regulation.

-

Regulation (EU) 2016/679 of the European Parliament and of the Council
Data Protection Act 1050/2018
Issue date 13 June 2018
Updated 3 December 2020 – minor additions and changes to paragraphs 3 to 6, 9 and 12

1. Data Controller

KEHA-keskus
P.O. Box 1000, FI-50101 Mikkeli, Finland
+358 295 020 000, kirjaamo.keha(at)ely-keskus.fi

2. Contact person for matters concerning the register 

Data Protection Officer:
tietosuoja.keha@ely-keskus.fi

Contacts on matters concerning the register:
P.O. Box 1000, FI-50101 Mikkeli, Finland 
tyomarkkinatori.keha@ely-keskus.fi

3. Register name

Contact information register for Job Market Finland stakeholder cooperation

Contact information register for Job Market Finland stakeholder work

4. Purpose of personal data processing

The register is a contact information register for the joint development of and communications concerning Job Market Finland as a whole implemented by the KEHA Centre. The register is used to maintain and update contact information on persons who are involved in joint development and who are sent communications about matters related to Job Market Finland.

5. Data content of the register

The register contains no more than the following information about each person

• name
• title
• email address
• telephone number
• name of the organisation represented by the person
• classification information of the organisation represented by the person (e.g. public administration or personnel company)
• role in joint development
• activities related to the person

6. Regular data sources

Register entries are based on the consent of the data subject. Consent is given using a Webropol online form that a person fills in when they sign up or are invited to cooperate.

7. Regular disclosure of information

Information may be disclosed to persons who work in a contractual relationship with the KEHA Centre in companies providing services and work in development tasks carried out by the companies in question.

Such tasks may include user-testing services under development where participants are invited by email. Tasks can also be carried out in virtual work environments.

Information is not disclosed to other parties.

8. Transferring data outside of the EU or the EEA

Data is not disclosed outside the European Union or the European Economic Area.

9. Data storage period

Due to the continuous nature of joint development and communication, data will be stored until further notice.

10. Data protection principles of the register

The register data is stored in an electronic information system. The data can only be accessed by appointed KEHA Centre employees working in the digital TE project or by the employees of companies providing services in the digital TE project.

The main user of the information system invites employees as register users with a personal login link sent from the information system. After registration, users log in to the information system with their user name and password.

11. Right of inspection

A person in the register has the right to request information on what data concerning them has been stored and how the data has been used.

The signed request must be addressed to the controller in writing to:

KEHA Centre
Registry office
P.O. Box 1000
50101 Mikkeli

The request can also be sent by email to kirjaamo.keha(at)ely-keskus.fi.

12. Right to demand rectification and erasure of data

The controller will correct, delete or supplement information in the register that is incorrect, unnecessary, incomplete or outdated in terms of the purpose of the processing, either on its own initiative or at the request of the data subject. Upon request, the controller will also delete the data of a data subject in its entirety.

The signed request must be addressed to the controller in writing to:

KEHA Centre
Registry office
P.O. Box 1000
50101 Mikkeli

13. Other rights related to the processing of personal data

Personal data are neither used nor disclosed for the purpose of direct advertising, distance marketing or other direct marketing, market and opinion research, registers of individuals, or genealogies.

The data subject does not have any other rights related to the processing of personal data.

This content is available only in Finnish - we apologise.

Privacy statement 16 August 2022

The purpose of this privacy statement is to provide information on the processing of personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679. The statement will be updated if necessary.

1. Register Controller and the Controller’s Contact Details

Uusimaa Employment and Economic Development Office
PO Box 1003, 00521 Helsinki
Street address: Antinkatu 1, 00100 Helsinki

More information:
Harry Berg, Laura Pajari-Xiang and Roosa Tuominen
Tel. +358 295 016 770, tyonantajaneuvonta@workinfinland.fi

2. Data Protection Officers

Data Protection Officers’ contact information:
tietosuoja.keha@ely-keskus.fi

3. Names of the Registers

Work in Finland international recruitment service customer service systems’

• telephone calls
• e-mails

4. Purpose of Personal Data Processing

Article 6 of the EU General Data Protection Regulation (EU) 2016/679
Information is needed for the performance of statutory tasks, for the implementation of services and for communication, as regulated by the following laws:

• Act on Public Employment and Business Services, 916/2012
• EU Regulation on a Digital Gateway, EU 2018/1724

The information is used to verify the service event in case of a complaint and for the development of operations and the training of customer service personnel in order to improve the quality of the service.

Processing, such as technical maintenance, may be outsourced in accordance with and within the limits set by law. E-mails of Work in Finland international recruitment advice service are processed via organizational e-mail owned by Business Finland. The role of Business Finland is to be the technical owner of organizational e-mail. Business Finland does not have read access to organizational e-mail.

5. Register’s Data Content and Personal Data Groups

Data stored in the register includes data reported by the customer and the data generated in a customer service situation, such as:

Personal identification data:

• Name
• Telephone number
• E-mail address
• Personal information created in a counselling or guidance situation, brought up by the customer or the official.

Business information:

• Name
• Business ID
• Address
• Telephone number
• E-mail address
• Topics of the enquiries
• Business operations related information created in a counselling or guidance situation, brought up by the customer or the official.

6. Data Retention Period

Call recordings are stored for six months. For quality development projects and complaints, individual recordings can be stored for a longer period, but no longer than 12 months. E-mails are stored for six months. The conversation is saved in the customer's e-mail.

7. Regular Sources of Information

Information provided by the customer and generated during conversations, the TE Services' customer data system, the joint customer data system for the administration of the Ministry of Economic Affairs and Employment and the Ministry for Foreign Affairs, the Trade Register, the Register of Foundations, and the Register of Associations.

8. Regular Disclosure of Information

No regular disclosure.

Work in Finland international recruitment advice service discloses customer information to other authorities only when disclosure is regulated by law.

9. Regular Disclosure of Personal Data or Transfer of Data Outside the EU or the EEA

The data shall not be disclosed or transferred outside of the EU or the EEA.

Personal data is stored on servers located in the EU. If any personal data are processed through our subcontractor from outside the European Economic Area, we will ensure that the transfer of personal data is lawful and that there is an adequate level of data protection.  

10. Principles of Register Protection

Article 32 of the EU General Data Protection Regulation (EU) 2016/679

At Work in Finland international recruitment advice service, information security and personal data protection are systematically taken into account in the use and processing of all data. Work in Finland international recruitment advice service processes personal data in a secure manner and in accordance with legislation.

All processors of Work in Finland international recruitment advice service’s personal data sign a confidentiality commitment. Register data is only used by persons who need this data in their work tasks according to their access rights. The service provider of the storage system has a duty of professional secrecy.

11. Inspection Right and Requesting Data

Article 15 of the EU General Data Protection Regulation (EU) 2016/679

The data subject has the right to inspect the data in the register concerning them.

The inspection request must always be made in writing and must be signed. The inspection request must specify the time of the communications that the request concerns as well as the contact details used for the communications. The inspection request must be addressed to the Work in Finland international recruitment advice service and sent by post or e-mail to the Uusimaa Employment and Economic Development Office (contact details in section 1). The sender of the email must encrypt the email in order to ensure privacy.

Read more about inspecting your data (tietosuoja.fi)

Listening to a call recording takes place at the Uusimaa Employment and Economic Development Office, as agreed separately. The customer must be prepared to prove their identity.

12. Right to Rectify Data and Erase Data

Articles 16 and 17 of the EU General Data Protection Regulation (EU) 2016/679

The data subject has the right to demand the correction and erasure of incorrect personal data in the register.

A request for rectification must always be made in writing and must be signed. The written request must specify which personal data file the rectification request applies to. The request must be addressed to the Work in Finland international recruitment advice service and sent by post or e-mail to the Uusimaa Employment and Economic Development Office (contact details in section 1). The sender of the email must encrypt the email in order to ensure privacy.

Read more about making a request for rectification (tietosuoja.fi)

The right to erase data does not apply to the personal data required by Work in Finland international recruitment advice service for the performance of a statutory task.

For any refusal to correct/erase data, a written report is sent to the customer indicating the reasons for the refusal.

13. Complaint or Appeal Concerning the Processing of Personal Data

Article 77 of the EU General Data Protection Regulation (EU) 2016/679

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if he or she considers that the processing of personal data infringes the EU Data Protection Regulation.