The Finnish Confederation of Professionals (STTK) is an advocacy and negotiation organisation representing its 13 member unions. STTK carries out social advocacy work in Finland and internationally. To carry out its mission, STTK collects personal data in registers, which are described in more detail below. We only collect data that is relevant to our mission.
Data controller and contact person
STTK ry
Postal address: P.O. Box 421, 00101 Helsinki
Business ID: 0202306-2
sttk@sttk.fi
Contact for matters related to registers:
Chief Information Officer Kirsi Suominen, tel. +358 456 343 480
firstname.lastname@sttk.fi
Processing and storage of data
STTK processes personal data lawfully, securely and confidentially. We never disclose the data to third parties.
STTK takes care of the protection of personal data by selecting up-to-date instructions and applications related to data protection and information security. All data in our registers is located on servers located in EU/EEA countries.
Access to the registers is restricted to specific persons to the extent required by their work duties. The persons have received guidance and training on the processing of personal data.
Rights of data subjects
Every data subject has the right to be informed about how their data will be processed. They have the right to:
- check the data
- request the correction of data
- request the deletion of data and be forgotten
- restrict and object to the processing of data
- transfer the data from one register to another
- not be subjected to automated decision making
All requests related to the exercise of rights may be submitted to the data controller.
Purpose and basis of processing personal data
STTK sends electronic newsletters, one of which is published under the STTK name, and the other under the Työelämään name.
Newsletters under the STTK name are published 6–10 times a year. They are targeted according to the topic of the newsletter to 1) suitable target groups and 2) to persons subscribed to STTK’s newsletter.
Työelämään newsletters are published 2–3 times a year. They are sent to those subscribed to the Työelämään newsletter.
Data to be stored in the newsletter register
Email address
Where the data is collected, and how it is processed
A person can subscribe to the newsletter using the form on the corresponding website (sttk.fi and työelämään.fi). The email address provided by the person will only be used to send the newsletter. The subscriptions are saved in the Creamailer newsletter service.
STTK also sends targeted newsletters under the STTK name. The target groups for these newsletters are selected from STTK’s stakeholder register and email lists. (links to those policies).
Retention of personal data
The data of persons who subscribed to the newsletter is stored in the Finnish Creamailer newsletter service. The service is on servers located in Finland.
Personal data will only be stored for as long as is necessary to send the newsletter. A person can unsubscribe at any time by clicking the ‘Unsubscribe’ link at the end of the newsletter.
Purpose and basis of processing personal data
STTK mails guides and brochures under the Työelämään name to people who order them. The data of the person making the order is required for the mailing.
Data to be recorded for people ordering material
- Organisation
- Name
- Shipping address
- Email address
- Phone number
Where the data is collected, and how it is processed
Material can be ordered using the form on the Työelämään website. The data provided by the person will only be used to send the material.
Retention of personal data
The website is built on the WordPress publishing platform located on the server of Avoin.Systems in the EU/EEA area. The data provided on the form is stored on the server and sent by email to the person who mails the materials.
Personal data is stored on the server and in the email only until the material is sent, and the data is then deleted.
Purpose and basis of processing personal data
STTK’s website has a contact form that can be used to send a message to STTK. The data will only be used to respond to the contact.
Data to be recorded
Email address
Where the data is collected, and how it is processed
Both websites are built on the WordPress publishing platform, located on the server of Avoin.Systems in Helsinki. The data on the form is stored on the server and sent by email to the person who is responsible for responding to the contact.
Retention of personal data
Personal data is stored on the server and in the email only until the contact has been responded to.
Cookies
The website uses cookies, which can be read about in more detail here:
Purpose and basis of processing personal data
STTK’s email distribution lists can be divided into three groups:
1) Lists of persons working in member unions and in positions of trust with member unions. The lists are used for convening working groups, internal exchange of information and communication.
2) Lists with members of regional committees and local committees.
3) Lists of editors-in-chief and journalists of the media. The list is used to send media invitations and bulletins.
Data to be recorded
Slightly different data is collected for the different groups:
1) Name, email address and the trade union where the person works.
2) Name, email address, regional/local committee of which the person is a member.
3) Name, email address and the media outlet where the person works.
Where the data is collected, and how it is processed
Email distribution lists are located in the Microsoft 365 environment (SaaS) in the EU/EEA. The data is collected from different sources depending on the group:
1) Contact information is obtained from the member unions or from the person themselves.
2) Contact information is collected from the persons when they take up a position of trust.
3) Data of editors-in-chief and journalists is collected from the media.
Retention of personal data
Personal data is kept on lists until:
- the person requests the deletion or modification of the data themselves
- the trade union where the person works requests the removal of the person
- the person’s place of employment or work role changes
- the person is no longer in a position of trust
Purpose and basis of processing personal data
Personal data is collected for the recruitment process. The data is used for recruitment-related measures, as well as mutual communication with the applicant.
Sometimes, STTK also receives open job applications containing data provided to STTK by the sender.
Data to be recorded
Name, contact information, education data, work history and other data voluntarily provided by the person, such as date of birth.
Where the data is collected, and how it is processed
The data is collected from the person involved in the recruitment process themselves in connection with their application and CV. The applicant sends the data to the email address of STTK’s Recruitment Manager, which is located in the Microsoft 365 environment (SaaS) in the EU/EEA.
The data is processed by the people involved in the recruitment process. At the end of the recruitment process, candidates may be subjected to an aptitude test. Applicants are required to consent to the disclosure of contact information to the company carrying out the aptitude test (e.g. Momentous).
The decision on recruiting a person is made by STTK’s Board of Directors. For the purpose of decision making, the name, education and current job of the candidate are presented to the Board.
Retention of personal data
The candidate sends the data to the HR Manager and/or the Recruitment Manager by email. Candidates’ data is summarised to include their name, age (if disclosed), education, current job and salary request. The summary is stored in the OneDrive of the manager receiving the application, located in the Microsoft 365 environment (SaaS) in the EU/EEA.
The summary is removed from OneDrive, and the applications are removed from the email two years after the selection decision has been made. If the data is printed on paper, it will be disposed of as confidential paper waste.
Open applications are kept in the email for the time agreed with the applicant.
Purpose and basis of processing personal data
STTK’s stakeholder register contains personal data that is used for communication and public relations purposes (e.g. invitations and newsletters on specific subjects).
Data to be recorded
The name, organisation and email address of the person are stored in the stakeholder register. Organisations (e.g. libraries of universities of applied sciences) are also entered in the register. The data of organisations may also include a postal address if this data is needed for mailing material.
Where the data is collected, and how it is processed
The stakeholder register stores data on persons with whom STTK has cooperated and/or who, due to their job or position of trust, are important for STTK’s communications and public relations. The data is stored in the Vetoboxi service (SaaS), which is located on a server in Finland.
Retention of personal data
The stakeholder register data is actively updated, and obsolete data is deleted.