Privacy policy: Geological Survey of Finland’s distribution lists in the ePressi.com press release distribution service

Updated 22.10.2025

Data controller

Geological Survey of Finland
P.O. Box 96, 02151 Espoo, Finland
Tel. +358 29 503 0000, gtk(at)gtk.fi

Controller’s contact person for register matters

Kati Kiviniemi
P.O. Box 96, 02151 Espoo, Finland
tel. +358 29 503 0000, kati.kiviniemi(at)gtk.fi

Contact details of the data protection officer

tietosuojavastaava(at)gtk.fi
tel. +358 29 503 0000

Purpose of and legal grounds for processing personal data

Geological Survey of Finland (GTK) uses its distribution lists (email address book) created in the ePressi press release distribution service to distribute its press releases to the media by email. Additionally, anyone has the opportunity of order press releases to their email address using an electronic subscription form.

Legal basis

  • Journalists in Liana Technologies Oy’s distribution list: distribution list agreement between the data subject (the press release subscriber) and Liana Technologies Oy
  • otherwise, the consent of the person concerned. Giving consent is not mandatory. The majority of GTK’s press releases are also published as news at https://www.gtk.fi/en/current/ without providing an email address.

    Data content

    Data content of the register and categories of personal data

    The person’s email address. Additionally, for those who have concluded an ePressi agreement, the data content may also include the name of the person and/or the name of the media or partner that the data subject represents. No other personal data are requested.

    Regular sources of data

    The data are obtained from the data subject (the subscriber), and for those who have concluded an ePressi contract, the data are obtained from the ePressi system maintained by Liana Technologies Oy.

    Storage period for personal data

    The data will be stored on the distribution list until the data subject themselves unsubscribes from the press releases using the link at the bottom of the newsletter they have received by email or otherwise inform GTK of unsubscribing.

    Is the provision of personal data a statutory or contractual requirement or a condition for concluding a contract

    No statutory obligation. An email address is required to send the press release to which the user has subscribed.

    Data processing

    Recipients or categories of recipients of personal data (to whom data may be disclosed)

    Processors of press releases sent via the service (staff handling GTK’s communications duties) and Liana Technologies Oy as a system supplier.

    Processing of personal data on behalf of the controller

    Liana Technologies Oy as a system supplier.
    The distribution lists are in electronic format. Access to the data is protected by personal access rights. This access right is terminated when the person steps away from the tasks to which they have been granted access to the data in the register.

    Transfer of personal data to third countries outside the EU/EEA

    The data will not be transferred to countries outside the European Union or the European Economic Area.

    Automated decision-making and profiling

    No automated decision-making and profiling.

    Rights of the data subject

    Exercise of rights

    The data subject may exercise their rights by submitting a request to the controller (Geological Survey of Finland) to the address stated in the “Controller” section above. To speed up the processing of the request, please indicate the register to which the request relates.

    Right to file a complaint with the supervisory authority

    If the data subject considers the processing of their personal data to be incompatible with the law, they may lodge a complaint with a supervisory authority in the Member State of their habitual residence, place of work or place of the processing of personal data in breach of the law. In Finland, the matter can be referred to the Office of the Data Protection Ombudsman: Contact details of the Office of the Data Protection Ombudsman | Office of the Data Protection Ombudsman

    Postal address: P.O. Box 800, FI-00531 Helsinki
    Email: tietosuoja(at)om.fi
    Switchboard: +358 29 566 6700

    Right to access personal data

    The data subject has the right to obtain confirmation from the controller as to whether personal data concerning them is processed, and if such personal data are processed, the right to access the personal data.

    Right to rectification

    The data subject has the right to demand that the controller rectify without undue delay any inaccurate or incorrect personal data concerning them.

    Right to restriction of processing

    The data subject has the right to demand that the controller restricts the processing of their personal data if:

    • the data subject disputes the accuracy of their personal data;
    • the processing is unlawful, but the data subject opposes the erasure of their personal data and requests the restriction of its use instead;
    • the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of a legal claim;
    • the data subject has objected to the processing of their personal data, pending verification of whether the legitimate grounds of the controller override those of the data subject.

    Right to object

    In situations where the processing of personal data is based on public interest or the legitimate interests pursued by the controller or by a third party, the data subject has the right to object to the processing of their personal data.

    If the data subject exercises their right to object, the controller shall cease the processing of the personal data, unless the controller demonstrates compelling legitimate grounds for the processing that override the rights and freedoms of the data subject or if the processing is necessary to establish, exercise or defend a legal claim.

    If personal data are processed for direct marketing purposes, the data subject has the right to object to the processing without any specific grounds.

    In situations where data are processed for statistical or research purposes, the data subject may object to the processing of data on grounds relating to their particular situation, in which case the controller shall cease the processing, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

    Right to erasure

    In situations where the processing of personal data is based on a legal basis other than compliance with a legal obligation of the controller or the performance of a task carried out for reasons of public interest, the data subject has the right to request the erasure of their personal data. The requested data will be erased unless the controller has a legal basis for refusing to erase the data, such as a legal obligation to store the data.

    Right to withdraw consent

    To the extent that personal data are processed on the basis of the data subject’s consent, the data subject has the right to withdraw their consent at any time by informing the controller (see contact details on the front page of this policy). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.