Rights of the data subject and data subject access requests

This page explains the rights of the data subject and describes their rights in relation to different legal bases of processing. There is a link on the page to a form through which you can make a data subject access request concerning your personal data.

Please note that the processing of personal data only concerns registered individuals (users logged in to the system). The processing of personal data does not apply to individuals who use the Service Manual without logging in.

Data subjects have various rights related to their personal data under the EU General Data Protection Regulation (GDPR). The legal basis for personal data processing determines the rights related to personal data.

In the Service Manual, data processing is based on Article 6(1)(c )of the GDPR for municipal and central government employees and Article 6(1)(e) of the GDPR for service provider organisations. Data subjects have rights, such as the right to be informed about the processing of their personal data, the right to request rectification of their personal data, and the right to restrict processing of their personal data. The controller must respond to requests without undue delay.

Article 6(1)(c ) of the EU General Data Protection Regulation: processing is necessary for compliance with a legal obligation to which the controller is subject

Article 6(1)(c ) of the GDPR is applied to the processing of municipal and central government employees’ personal data.

Rights when processing is based on the controller's legal obligations:

• right to be informed about the processing of personal data, unless expressly exempted by law
• right to see what personal data is stored about the data subject
• right to rectify personal data
• right to restrict processing of personal data
• notification obligation regarding rectification of personal data or restriction of processing
• right to not be subject to automated decision-making without a legal basis.
• This can be facilitated through legislation that establishes appropriate measures to protect data subjects’ rights, freedoms and legitimate interests. 

Article 6(1)(e) of the EU General Data Protection Regulation: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

Article 6(1)(e) of the GDPR is applied to the processing of the personal data of service provider organisations. 

Rights when processing is based on a task carried out in the public interest or the exercise of official authority: 

• right to be informed about the processing of personal data, unless expressly exempted by law
• right to see what personal data is stored about the data subject
• right to rectify personal data
• right to restrict processing of personal data
• notification obligation regarding rectification of personal data or restriction of processing
• right to object to personal data processing
• right to not be subject to automated decision-making without a legal basis.
• This can be facilitated through legislation that establishes appropriate measures to protect data subjects’ rights, freedoms and legitimate interests. 

Data subjects have the right to verify what personal data concerning them is processed by the controller and for what purpose. In the Service Manual, the processing of personal data is based on the GDPR. 

Data subject access requests pertain to the user register of the Service Manual. When you make a request to access, rectify or erase your personal data, we will provide you with a copy of the personal data to which the request pertains. 

The controller must respond to the data subject access request within one month. If there are multiple requests or they are complex, the controller may inform the data subject that they need additional processing time, in which case the deadline is extended to three months from the date of the original request. 

Read more about the processing of personal data: Data privacy in the Service Manual web service | Employment services’ Service Manual 

Read the register description: Register description | Employment services’ Service Manual