MeteoGate privacy notice
EU General Data Protection Regulation (679/2016)
1. Controller Finnish Meteorological Institute P.O. Box 503 (Erik Palménin aukio 1) FI-00101 Helsinki, Finland tel. +358 29 539 2141, kirjaamo(at)fmi.fi
2. Contact person for the register Mikko Visa tel. +358 29 539 1000, mikko.visa(at)fmi.fi
3. Data Protection Officer Jaana Palmunoksa tel. +358 29 539 2310, jaana.palmunoksa(at)fmi.fi
4. Name of the register MeteoGate system
5. Purpose of the processing of personal data
For registered users to use the system – API key, username, email address
Analysis of who is using MeteoGate, to inform decisions about system development and future investments into user experience
System information messages, e.g. changes to the service, issues with their data publishing or requests
Running a data user group
6. Legal basis of the processing of personal data A contract (a subscribed service)
7. Data content of the register Identity Provider's name, Username, email, first and last name, User ID, API key
8. Regular data sources Keycloak accessing a new user’s ID provider, e.g. GitHub, Google at time of registration
9. Recipients or recipient groups of the personal data The Finnish Meteorological Institute’s employees whose duties require monitoring and/or analysing the use of the system.
EUMETNET SNC’s employees whose duties require organising and running a data user group. EUMETNET SNC is a collaborative network comprising many European National Meteorological Services that deliver weather data to METEOGATE.
10. The transfer of data outside the EU or EEA None
11. Register protection principles Access to the user data is limited to the minimum. Data is in an encrypted vault. The register cannot be accessed outside the system or directly from the Internet.
12. Duration for storage of the personal data Until the user deletes their account.
13. Rights of the data subjects Data subjects have a right to review, correct and remove their personal information
14. The right to lodge a complaint with the supervisory authority The user has the right to submit a complaint to the supervisory authority if the user believes that the processing of the personal data concerning them is in violation of the applicable data protection legislation.
