Digitraffic
magnifying glass

Privacy policy

Privacy policy

EU General Data Protection Regulation (EU) 2016/679

1. Introduction

Protecting your privacy and the transparency of the processing of your personal data is important to the Fintraffic Group. The purpose of this privacy statement is to inform you of the processing of your personal data in the Digitraffic service.

2. Controller

Traffic Management Company Fintraffic Ltd (hereinafter “Fintraffic”)
Palkkatilanportti 1, 00240 Helsinki
Finland
+358 29 450 7000

Controller’s representative
Mika Ahvenainen
digitraffic@fintraffic.fi

The Group’s Data Protection Officer can be reached by email at privacy@fintraffic.fi and by telephone +358 29 450 7000.

3. Categories of data subjects and personal data to be processed

Fintraffic processes the log data of Digitraffic service users, including the IP address, username (Digitraffic User) and information on interface calls made from the IP address.

The information is obtained from HTTP requests sent to the interface service.

Fintraffic also processes (fixed images) sent through the camera system of Fintraffic Road Ltd in the Digitraffic service. The images may contain the following personal data:

  • registration plate number;
  • identifying characteristics, such as the colour and brand of the vehicle, in the case of vehicles that deviate in quality or are very individual in character; and
  • possibly the face of the driver or passengers in the vehicle.

Read the (privacy statement) for the Fintraffic Road Ltd camera system.

Digitraffic is a distribution channel for open traffic data, through which different transport operators can freely access traffic data produced by Fintraffic, such as weather and condition data as well as disruption and exceptional situation data.

Your personal data is processed to monitor the use of the Digitraffic service and to investigate disruptions. The processing of your data is based on section 146 of the Act on Transport Services (320/2017). The legal basis for processing is therefore Article 6(1)(c) of the GDPR, i.e. compliance with the controller’s legal obligation.

5. Disclosure of data and data recipients

Your personal data will only be disclosed to the administrator of the Digitraffic service, who will act on behalf of Fintraffic and under the obligation of professional secrecy, and who may use your data only for monitoring the Digitraffic service and for investigating disruptions.

Fintraffic uses instructions and written data processing agreements to ensure that the recipient complies with the regulations related to the processing of personal data.

6. Transfer of personal data outside EU or EEA countries

Your personal data will not be transferred outside the EU or EEA.

7. Data storage

Fixed images transmitted through the Fintraffic Road Ltd camera system are stored for 24 hours.

The retention period for log data depends on where these are stored. The log data is thus stored for at least seven (7) hours and in certain situations for the time being.

When the legal basis for processing no longer exists or your personal data is no longer needed for the original purpose, your data will be destroyed appropriately.

8. Protection of personal data

Fintraffic has use of appropriate technical and organisational personal data protection measures. Fintraffic thus ensures that your personal data is not accidentally or unlawfully destroyed, lost or changed. The measures ensure that the information is not disclosed without authorisation and cannot be accessed by anyone who does not have the right to process the information: Fintraffic ensures that the service provider complies with data protection legislation and protects personal data with the necessary information security measures.

Only persons whose tasks include maintaining the Digitraffic service and the provision of information are granted access rights to the system.

9. Data subject’s rights

You have the right to

  1. receive information on the processing of your data and to access your data;
  2. require the rectification of your data;
  3. require the erasure of your data; and
  4. require that the processing of your data to be restricted to its storage only.

10. Referral to the Data Protection Ombudsman

If you feel that your personal data has been processed in a manner that does not comply with data protection legislation, you have the right to lodge a complaint with the supervisory authority. The Office of the Data Protection Ombudsman acts as the competent supervisory authority in Finland:

Street address: Lintulahdenkuja 4, 00530 Helsinki
Postal address: P.O. Box 800, 00531 Helsinki
Switchboard: +358 29 566 6700
Registry: +358 29 566 6768
Email address (registry): tietosuoja(at)om.fi

bug_reportDid you find an error? Help us improve this page.