Lukkari: the website publishing system of the Evangelical Lutheran Church of Finland

 

Controller

Church Council, Church Communications
Eteläranta 8, P.O. Box 210, 00131 Helsinki, Finland
Tel. +358 (0)9 18021

kirkkohallitus@evl.fi

Contact person

Lari Lohikoski
Eteläranta 8, P.O. Box 210, 00131 Helsinki, Finland

Tel. +358 (0)50 346 9041
lari.lohikoski@evl.fi

Data protection officer

Data protection officer of the Central Church Fund of Finland

tietosuojavastaava.kkr@evl.fi

Name of the register

Lukkari: the website publishing system of the Evangelical Lutheran Church of Finland

Purpose of and legal basis for processing personal data

Lukkari is a website designed for the parishes and other organisational units of the Church. Its structure and functions are the same for all, but the visual identity of individual pages can be altered to reflect an individual parish’s identity, for example. Lukkari was used to set up the Church’s online service at Evl.fi as well, and this privacy policy also applies to it.

The site processes personal data in connection with electronic functions that make it easier to access services when ordering a civil status document, joining the Church, requesting an intercessory prayer, providing feedback and subscribing to a newsletter.

The legal basis for processing the data is the legitimate interest stated in Article 6.1.f of the EU’s General Data Protection Regulation, which is based on each data subject’s declaration and consent given in connection with ordering a civil status document, joining the Church, requesting an intercessory prayer, providing feedback or subscribing to a newsletter.

Categories of persons and data content in the register

The Church Council is responsible for the general and shared content of the site. Each parish is responsible for its own introduction, contact information, event details, etc.

The site processes the following data that results from a person requesting a civil status order, joining the Church, signing up for events, providing feedback, etc.

Each parish draws up its own forms, for example for people who wish to request an intercessory prayer, submit feedback or sign up for parish activities. The data such forms contain vary, but it is always clear from the form what data are processed by the site.

The data submitted by people are processed by the relevant parish.

Data sources

The site user provides the personal data required for the form or activity in question.

Data disclosures

Personal data submitted through the site are also provided to the relevant parish.

Data submitted through the site are not disclosed to third parties.

The maintenance of the site’s technical environment has been outsourced to an operational service and application provider whose operations meet the requirements of the EU’s General Data Protection Regulation.

Data are not disclosed outside the EU or EEA.

Storage period for personal data

The data submitted to the Lukkari publishing system through a form or request are removed from the Lukkari database six months after submission. The data submitted on a civil status document form are removed from the Lukkari database three months after submission. This data can also be erased by request.

The rights of data subjects

Data subjects have the following rights:

  • The right to request access to their personal data and the right to have that personal data corrected or deleted.
  • The right to request limited processing of their personal data and the right to exercise their rights to object and to portable data.
  • When processing of personal data is based on consent, the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • The right to lodge a complaint regarding the processing of personal data to the national supervisory authority if the data subject believes that the processing of his or her data violates the EU’s General Data Protection Regulation. Exercising this right does not restrict the judicial redress described in the Finnish Church Act (1054/1994).

Contact information for the national supervisory authority:

Data Protection Ombudsman

P.O. Box 800, Ratapihantie 9, 00521 Helsinki, Finland

Tel. +358 (0)29 566 6700

Other rights related to the processing of personal data

See Cookies (in Finnish)

Privacy Policy for evl.fi online service feedback

 

Controller

Church Council/Church Communications (business ID: 0118950-3)

Eteläranta 8, 00131 Helsinki, Finland

P.O. Box 210, 00131 Helsinki, Finland

Tel. +358 (0)9 18021

kirkkohallitus(at)evl.fi

Contact person

Eeva-Kaisa Heikura

Church Council/Church Communications

Eteläranta 8, 00131 Helsinki, Finland

Tel. +358 (0)40 688 1421

eeva-kaisa.heikura(at)evl.fi

Data protection officer

Data protection officer of the Central Church Fund of Finland

tietosuojavastaava.kkr@evl.fi

Name of the register

Evl.fi online service feedback

Purpose of and legal basis for processing personal data

People can use the feedback form to provide feedback or ask questions about the Church’s activities or the Evl.fi online service.

The data provided are used for processing feedback and developing products. Based on the feedback we receive, we are constantly developing the user interfaces and user experiences of our products and services.

The legal basis for processing data is the legitimate interest stated in Article 6.1.f of the EU’s General Data Protection Regulation, which is based on each data subject’s declaration and consent given in connection with providing feedback to the controller.

Categories of persons and data content in the register

The users of Evl.fi constitute the category of persons whose personal data are processed.

The following data from the feedback form are recorded on the register: the person’s name (not mandatory), email address (not mandatory) and feedback.

Data sources

The register's data is sourced directly from the users themselves through the feedback form.

Regular data disclosures

The data are not disclosed to third parties.

The maintenance of the feedback service’s technical environment has been outsourced to an operational service and application provider whose operations meet the requirements of the EU’s General Data Protection Regulation.

Data are not disclosed outside the EU or EEA.

Storage period for personal data

The data are stored until the relevant matter has been handled. All data are erased within 36 months of submission. Data are also erased upon request.

The rights of data subjects

Data subjects have the following rights:

  • The right to request access to their personal data and the right to have that personal data corrected or deleted.
  • The right to request limited processing of their personal data and to exercise their rights to object and to portable data.
  • Where processing of personal data is based on consent, the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • The right to lodge a complaint regarding the processing of personal data to the national supervisory authority if the data subject believes that the processing of his or her data violates the EU’s General Data Protection Regulation. Exercising this right does not restrict the judicial redress described in the Finnish Church Act (1054/1994).

Contact information for the national supervisory authority:

Data Protection Ombudsman

P.O. Box 800, Ratapihantie 9, 00521 Helsinki, Finland

Tel. +358 (0)29 566 6700

Other rights related to the processing of personal data

See Cookies (in Finnish)