Rights of the data subject

Data request form (PDF) (in Finnish)

Request to inspect register data (PDF) (in Finnish)

You can use Request to inspect register data form to request that the Municipality allows you to inspect your own personal data or that of your dependent or someone you are serving as guardian for, in accordance with Article 15 of the GDPR. 

Request for rectification of register data (PDF) (in Finnish)

You can use Request for rectification of register data form to request that the Municipality of Posio rectify, supplement and/or restrict the use of your personal data or that of your dependent or someone you are serving as guardian for, in accordance with Articles 16 and 18 of the GDPR. 

You can submit requests concerning the rights of the data subject to the Registry of Posio Municipal Office or the Social Security Office Registry. When submitting such requests, please be prepared to verify your identity and any authorisation you may have. 

The controller shall provide the data without undue delay within one month of receipt of the request. If necessary, this period may need to be extended by up to two months, taking into account the complexity and volume of the requests. The controller shall inform the data subject of any such extension and the reasons for the delay within one month of receipt of the request. If the controller does not take action on the basis of the data subject’s request, the controller shall inform the data subject without undue delay, within one month of receipt of the request, of the reasons for it not having taken action and of the option to lodge a complaint with a supervisory authority and to exercise other legal remedies. 

The data subject has the right to obtain confirmation from the controller as to whether personal data about them are being processed. The controller shall provide a copy of the personal data processed upon request. Where the data subject requests more than one copy, the controller may charge a reasonable fee based on administrative costs. 

Data provided under Articles 13 and 14 of the GDPR and all data and measures under Articles 15–22 are free of charge. 

If the data subject’s requests are manifestly unfounded and unreasonable, in particular if they are repeated, the controller may either 
a) charge a reasonable fee taking into account the administrative costs of providing the data or communication or of carrying out the requested action, or 
b) refuse to carry out the requested action. 
In such cases, the controller must demonstrate that the request is manifestly unfounded or unreasonable.