Information on the processing of personal data in events organized by STUK


1. Data controller

The Radiation and Nuclear Safety Authority

2. Contact information

The Radiation and Nuclear Safety Authority

Laippatie 4, FI-00880 Helsinki, Finland

P.O. Box 14, FI-00811 Helsinki, Finland

Switchboard +358 9 759 881

Fax +358 9 759 88 500


Data protection officer

+358 9 759 88340

3. Purposes of the processing of data

The purpose of processing personal data is to manage customer relationships in training, networking and other events organized by the Radiation and Nuclear Safety Authority (STUK), and to make event-related reservations in order to provide services. Personal data is processed in connection with invoicing, contacts, transactions and feedback inquiries.

The personal data can be used for compiling a summary containing the names of the persons and organizations that attend the event. The summary can be distributed to the participants together with the event programme and other material. If such a summary is to be distributed, the participants will be asked for their consent when they sign up for the event.

4. Legal basis of processing

The agreement on the participation in the event.

For invoicing-related accounting information, the legal basis of processing is the State’s budget legislation.

The processing of personal data is based on consent or another separately specified basis if it is related to activities other than the organization of an event or invoicing.

5. Personal data and personal data categories processed

Information relevant to the organization of events and customer relationship management, such as name, professional title, organization, email, telephone number, invoicing address, and other invoicing information.

The participant’s date of birth and gender may be asked by request of a third party, e.g. a travel agency. For catering and accommodation arrangements, the participants may also be asked about their special diets and accommodation preferences.

6. Where does personal data originate from?

The personal data is obtained from customers when they sign up for an event.

7. Groups of personal data recipients

Registrations may be collected and processed in an information system delivered by a service provider.

Personal data may be disclosed to STUK’s contractual partners if necessary for event arrangements.

8. Will data be transferred outside the EU/EEA or to international organizations or will they have access to the data?

Personal data will not be transferred outside the EU/EEA, nor to any international organizations.

9. Scheduled erasure of data groups

Personal data is kept at least for the duration of the customer relationship and as long as it is necessary for the purposes described in this document. If the event is supplementary training radiation-using professionals, name and organization information is kept for five years. Otherwise the goal is to erase personal data as soon after the event as possible.

Invoicing-related information is kept according to the State’s budget legislation.

10. Implementation of data subjects’ rights

10.1 Right to access personal data

The data subject has the right to receive confirmation from the data controller that the data on themselves is or is not processed, and if it is, the data subject has the right to access the personal data and the right to receive information on the processing of such data.

10.2 Right to rectification of data

The data subject has the right to demand that the data controller rectifies without undue delay any inaccurate and erroneous personal data about the data subject.

10.3 Right to erasure of data

A person also has the right to have the data about themselves be erased if

10.4 Right to restriction of processing

The data subject has the right to have the processing of their personal data restricted if the data subject contests the accuracy of the data or if the processing of the data violates law.

10.5 Right to objection

Data subjects have the right to object to the use of their personal data in direct marketing.

On grounds concerning their personal situation, the data subjects also have the right to object to the processing necessary for performing a task serving the public interest, or for exercising public authority falling on the data controller, or if the processing is necessary for securing the legitimate interests of the data controller or third parties.

10.6 Right to data portability

Data subjects have the right to have their personal data transferred to another controller if the processing is based on consent or agreement and the processing is performed automatically.

Data can be transferred directly from one controller to another, where technically feasible.

10.7 How do I submit a request regarding my personal data to STUK?

You can submit a request regarding your personal data with the form available at You can submit the form either by email or post.

We will respond to you as soon as possible and within a month at the latest.

11. Is submitting personal data mandatory?

Registration for events is not possible without personal data being provided.

12. Cancellation of consentIf the processing is based on consent, the data subject has the right to cancel their consent at any time. The cancellation of consent does not affect the lawfulness of processing based on consent before its cancellation.

13. Information on profiling or automatic decision making


14. Legal remedies

If a data subject considers that the processing of their personal data is in breach of law, the data subject may bring the matter to the Data Protection Ombudsman.

15. Further information

For further information on the processing of personal data and data protection, contact the event organizer and STUK’s data protection officer.