ILMOS survey privacy notice

The EU's General Data Protection Regulation (2016/679)

1. Controller Finnish Meteorological Institute P.O. Box 503 (Erik Palménin aukio 1) FI-00101 HELSINKI tel. +358 29 539 1000 kirjaamo@fmi.fi 0244664-7 2. Register contact person Enni Lehtinen tel. +358 50 328 7969 firstname.lastname@fmi.fi

3. Data protection officer Jaana Palmunoksa tel. +358 29 539 2310 firstname.lastname@fmi.fi

4. Name of register ILMOS survey

5. Purposes for processing personal data Research: the impact of socio-demographic factors on the perceived value of urban green spaces.

6. Legal basis for the processing The processing is necessary for the performance of a task carried out in the public interest.

7. Data content of the register The following data may be processed in the register: age, gender, municipality of residence, level of education, income level, household type, long-term illnesses (multiple selections), perceived state of health (multiple selections), living environment, and type of accommodation.

8. Regular sources of information The data subject themselves.

9. Recipients or recipient groups of the personal data The data is processed by designated researchers who work in the ILMOS research project.

10. The transfer of personal data outside the EU or EEA No regular disclosure or transfer of data outside the EU or the EEA.

11. Register protection principles Personal data held in electronic form is protected by technical measures. Access to electronically stored data in the register requires a personal username and password.

The survey is conducted using SurveyEngine, a survey platform provided by the German company SurveyEngine GmbH. All survey responses are stored on the platform’s servers. Respondents are assigned an anonymous project ID.

Respondents’ IP addresses are stored as technical data in SurveyEngine’s system logs. IP addresses are not included in the response data processed by the researchers. The survey is not intended to collect personal data, and the responses do not contain personal data by default.

12. The storage period of personal data Personal data will be retained for a maximum of two years from the completion of the study.

13. The rights of a data subject In general, the data subject may exercise for example the following rights:

• right to access their personal data

• right to the rectification of their data

• right to the erasure of their data.

As the survey does not intentionally collect personal data and respondents cannot be identified from the survey responses, it may not be possible to exercise rights such as access to, rectification of, or erasure of survey responses.

14. The right to submit a complaint to the supervisory authority The data subject has the right to lodge a complaint with the supervisory authority if they consider that the processing of their personal data infringes the applicable data protection legislation. In Finland, the Data Protection Ombudsman acts as the supervisory authority.