About customers’ rights

When you use the Port of Helsinki Ltd’s (hereinafter the Port of Helsinki) services as a customer or otherwise interact with us, we collect personal data from you only insofar it is necessary for handling the matter in question. All data is collected in different registers based on the purpose of use of the data. We have prepared privacy statements for each register, which you can view at the Port of Helsinki’s main office (Olympiaranta 3, Helsinki). We can also send the privacy statements to you upon request.

The privacy statements tell you who the register controller and the register’s contact person are. In addition to this, the privacy statements detail the purposes for which the data collected in each register is processed as well as other useful information that you have the right to know.

The processing of personal data at the Port of Helsinki is based on legislation, contract, the person’s consent and the legitimate interest of the Port of Helsinki. If data is collected based on consent, you have the right to withdraw your consent for personal data processing at any time.

You have the right to know what data is collected about you. You can request access to your data by visiting our main office or sending an information request to gdpr(at)portofhelsinki.fi. Please specify your connection to the Port of Helsinki in as much detail as possible in your information request and be prepared to prove your identity in connection with the request.

If you think that the data we have about you is incorrect, you have the right to request the rectification of the data. You can request the rectification of your data by visiting our main office or sending an rectification request to gdpr(at)portofhelsinki.fi.

Each register’s privacy statement states whether the data in the register is routinely disclosed to third parties. In addition to this type of routine disclosure, personal data may also be used for scientific or historical research purposes or for statistical purposes under specific conditions defined in legislation. In these cases data related to specific individuals is not disclosed to third parties.

Data protection at the Port of Helsinki is described in greater detail in our Data Protection Policy and Privacy Notice. You can find them both on our website at www.portofhelsinki.fi/en/Data-protection

For more information on the processing of personal data at the Port of Helsinki, please contact gdpr (at) portofhelsinki.fi.

 The Port of Helsinki follows good data processing procedures, national data security guidelines and good practices in the processing and archiving of personal data.

Rights in accordance with the EU’s General Data Protection Regulation

Right of access (Article 15)

A person whose personal data is collected in the Port of Helsinki’s services has the right to receive confirmation as to whether or not personal data concerning him or her are being processed. A user of the Port of Helsinki’s services may request a copy of his or her personal data. Instruction for submitting an information request are provided above.

The Port of Helsinki will deliver the data without undue delay and in any event within 30 days of receipt of the information request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. If the period is extended, the Port of Helsinki will inform the person who submitted the request of any such extension within one month of receipt of the request, together with the reasons for the delay.

If the Port of Helsinki does not deliver the data on request, it will inform the person who submitted the request without delay and at the latest within 30 days of receipt of the request of the reasons for this and on the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

You have the right to receive a copy of your data free of charge. However, if a person requests multiple copies of their data, the Port of Helsinki may charge a reasonable fee for them based on administrative costs.

Additionally, if a person’s information requests are manifestly unfounded or excessive, in particular because of their repetitive character, the Port of Helsinki may either:

  • charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested;
     or
  • refuse to act on the request.

The Port of Helsinki shall bear the burden of demonstrating the manifestly unfounded or excessive character of the request.

Right to rectification (Article 16)

A person whose personal data has been collected in the Port of Helsinki’s services has the right to obtain from the Port of Helsinki without undue delay the rectification of inaccurate personal data concerning him or her.

Such a person also has the right to have incomplete personal data completed, including by means of providing a supplementary statement. Whether or not the data is incomplete is determined by taking into account the purpose for which the data in the register is processed.

If the Port of Helsinki refuses a person’s rectification request, the Port of Helsinki must inform the person of this in writing. The notification must also state the reasons why the request was refused and inform the person of the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.

Right to erasure (Article 17)

A person whose personal data has been collected in the Port of Helsinki’s services has the right to obtain from the Port of Helsinki the erasure of personal data concerning him or her under certain conditions.

However, this right does not apply if it is prevented by other legislation.
Data is not erased from backup copies because this would compromise the integrity of the backup copies.

Right to restriction of processing (Article 18)

A person whose personal data has been collected in the Port of Helsinki’s services has the right to obtain from the Port of Helsinki restriction of processing if, for example, the person contests the accuracy of the personal data, in which case processing is restricted for a period enabling the Port of Helsinki to verify the accuracy of the personal data.

Right to data portability (Article 20)

If a person has provided personal data concerning him or her to a controller, the person has the right to transmit those data to another controller.

Right to object (Article 21)

A person has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The Port of Helsinki will no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing.

Right to lodge a complaint with a supervisory authority (Article 77)

Without prejudice to any other administrative or judicial remedy, a person whose personal data has been collected in the Port of Helsinki’s services has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the person considers that the processing of personal data relating to him or her infringes the EU’s General Data Protection Regulation.