Privacy notice: Received tenders
Privacy notice: Received tenders: joint informative document for data subjects (Articles 13 and 14 of the General Data Protection Regulation [2016/679]).
Purposes of processing personal data
For contacting and evaluation purposes related to tendering processes (for instance, competence evaluation based on CVs).
Legal basis for processing
The processing of personal data is based on the Finnish Act on Public Procurement and Concession Contracts.
Personal data content and retention periods of the register
|Data category name||Retention period|
|Private person’s name and contact details||10 years from the procurement decision|
|Contact details||10 years from the procurement decision|
|CV information||10 years from the procurement decision|
The register contains the following:
- contact persons of organisations submitting tenders
- CV information of the persons set out in tenders (when required in the invitation to tender).
Regular sources of data
Data is collected from tendering documents submitted by organisations.
Regular disclosures of data
Data disclosures in accordance with the Finnish Act on Public Procurement and Concession Contracts (Section 138) and Act on Openness of Government Activities (Section 11).
Principles of data protection of the register
A Manual material
Manual material is kept in a locked space and will be destroyed after the retention period.
B Data processed through automated data processing
Data is stored in an information system. Users have personal user IDs. Access is granted only to those persons who are entitled to access and use the data in the system in order to perform their duties.
The lawful processing of personal data is ensured by categorisation of data and with operating methods that are in compliance with the data handling rules concerning data set.
No automated decision-making is performed on the recorded data.
Transfer of data outside the EU or EEA
No data is transferred outside the EU or EEA.