PRIVACY POLICY FOR VIRTUAL FINLAND TESTBED

Last updated April 22nd, 2022

Controller of the data
Ministry for Foreign Affairs

P.O.Box 176
FI-00023 Government
Finland

The processor of the data and contact details
IOXIO Oy
Fredrikinkatu 34 A 17
00100 Helsinki
Finland
[email protected]

The Ministry for Foreign Affairs respects the privacy of individuals and processes your data confidentially according to the applicable European privacy laws. This policy is kept up to date and you can always find the latest version linked to this webpage. On this page, you can find specific privacy notices relating to the Virtual Finland testbed Website (testbed.fi) and the Services available to use and test out the existing capabilities of the Virtual Finland testbed.

This privacy policy describes how we use and process the information we collect about you when you visit testbed.fi or submit information through Virtual Finland Services. You may familiarize yourself with your privacy rights at the end of this Privacy policy in the section of Your Privacy Rights Explained.

What personal information do we collect?
We collect personal information that you submit through testbed.fi Website or related Virtual Finland Services. The personally identifiable information may include:

- First name and last name
- Email address
- Phone number
- Organisation name
- Usage and cookie Data

How do we use your personal information?
We process your personal information:
To provide and maintain the Virtual Finland Services for you, including monitoring the usage of the Virtual Finland Services.
To manage your account: to manage your registration as a user of the Virtual Finland Services. The Personal Data you provide can give you access to different functionalities of the Virtual Finland Services that are available to you as a registered user.

To contact you: To contact you by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products, or contracted services, including the security updates, when necessary or reasonable for their implementation. To provide you with news and general information about other services and events which we offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.

To manage your requests: To attend and manage your
requests to us. For organizational or business transfers: We may use your information to evaluate or conduct a restructuring, reorganization, or other transfer in which Personal Data held by the Virtual Finland Service users is among the assets transferred.

For other purposes: We may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improving our Service, products, services, marketing, and your experience.

Usage Data

We use Plausible to monitor the visitors on our websites which is privacy-friendly. Read more about the tracking policies of Plausible from https://plausible.io/data-policy. We use Cidaas as an authentication and login provider. Familiarize yourself with the privacy policy of Cidaas from their website https://www.cidaas.com/privacy-policy/. How do we use cookies? We use cookies only for the necessary functions of our websites to be able to provide Services for you. We don’t use cookies to track your Internet usage after leaving our site or for any other unnecessary purposes than just for providing Virtual Finland Services for you.

We use the cookies and local storage in the following manner:

The Virtual Finland Developer portal and Login portal use the access_token and id_token received in the authentication token from the authentication provider. Furthermore, Login Portal uses the oauth_redirect_url to relay the user to the correct end-user application.

Location of the Data storage
All Personal Data of Virtual Finland testbed users is stored in the area of the European Union. Will your information be disclosed to third parties?
We may share your personal information with 3rd parties in the following situations:

With Service Providers: We may share your personal information with other Service Providers to provide and maintain the Virtual Finland Services for you.

For organizational or business transfers: We may share or transfer your personal information in connection with, or during negotiations of, any restructuring, acquisition, or other administrative transfer of all or a portion of Virtual Finland Service operations to another organization or business.
With affiliates:

We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include other Ministries, governmental agencies (new or existing) partners, or other businesses.

With other users: when you share personal information or otherwise interact in the public areas of Virtual Finland Services with other users, such information may be viewed by other users.

With your consent: We may disclose your personal information for other purposes with your consent.

How should I react to the 3rd party services linked on the Virtual Finland Website and Services?

Virtual Finland Services may contain links to other websites that are not controlled by the Ministry of Foreign Affairs. If you click on a third-party link, you will be directed to that third-party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

How can you contact us?

You have the right to access the personal information we store about you, request it to be corrected and if you wish, request the removal of the information. You also have the right to prohibit the use of your information for direct marketing. Please see ‘Your privacy rights explained’ for more information. Requests related to the above can be sent by e-mail to the address [email protected]. If you have any questions or concerns related to this privacy policy or the use of cookies, please email the address given on the webpage.

YOUR PRIVACY RIGHTS EXPLAINED
The right to access your information: This means that you have the right to know what information we process about you.

The right to rectify inaccurate information: This means that you have the right to rectify the information about you that you deem to be inaccurate.

The right to erase your information: This means that you have the right to have your information erased from our systems.

The right to object and the right to withdraw your consent: This means that you have the right to object to the processing of your personal information and withdraw your consent.

You have the right to prohibit the use of your information for direct marketing.

The right to have your personal information transmitted: This means that you have the right to have the information you have provided to the Ministry for Foreign Affairs in a structured and machine-readable format and, if it is technically possible, also the right to have the information transmitted straight to another system.

The right to demand the restriction of processing: This means that you have the right to demand that the Ministry for Foreign Affairs only stores your information but doesn’t use it in another way. You have this right if you contest the accuracy of your personal information and processing will be restricted until the accuracy of the personal information is verified. You have this right also if you need the information after the Ministry for Foreign Affairs’ retention periods end, or for the establishment, exercise, or defense of legal claims.

The right to complain to the supervisory authority: We always wish that you would contact us if you have any questions or concerns regarding the processing of your personal information. However, if you are concerned that the processing of your information may be breaching privacy laws or your rights under privacy legislation have not been respected, you have also the right to complain to the national data protection authority.