1. Controller Finnish Meteorological Institute P.O. Box 503, Erik Palménin aukio 1 FI-00101 HELSINKI tel. +358 29 539 2141 kirjaamo@fmi.fi 2. Register contact person Åsa Stam asa.stam@fmi.fi

3. Data protection officer Jaana Palmunoksa tel. +358 29 539 2310 jaana.palmunoksa@fmi.fi

4. Name of register Survey for early career researchers in TULANET research institutes

5. Purposes for processing personal data The aim of the survey is to map the experiences, needs, and expectations of early career researchers regarding work in research institutes and the researcher career path. The responses will be used to improve researcher career support in the institutes.

6. Legal basis for the processing The legal basis for processing is consent. Consent is given by checking a box at the start of the survey.

The data subject may withdraw their consent at any time. Withdrawal does not affect the legality of processing conducted before the withdrawal.

Consent can be withdrawn by contacting the data controller via email or post. Contact details are listed in section 1.

7. Data content of the register Employer, level of degree, age, gender, and responses to questions about working life. IP address (stored only in Webropol logs for 2 weeks).

8. Regular sources of information The data source is the data subject themself.

9. Recipients or recipient groups of the personal data Persons at the participating research institutes* involved in conducting the survey. Webropol employees (IP address only).

*Participating research institutes: Finnish Meteorological Institute, Geological Survey of Finland (GTK), Natural Resources Institute Finland (Luke), National Land Survey of Finland, Finnish Food Authority, Finnish Environment Institute (Syke), VTT Technical Research Centre of Finland.

10. The transfer of personal data outside the EU or EEA The data is not transferred outside the EU or EEA.

11. Register protection principles Digitally Processed Data The data is collected using the Webropol application. The collected data is primarily analyzed with the analysis tools provided by Webropol. If needed, the data may be exported in Excel format for further analysis, or qualitative responses may be compiled into Word documents for content analysis. The register is maintained in digital form within an information system. Access to electronically stored register data requires a personal username and password. Access rights are granted by the person responsible for the register at the Finnish Meteorological Institute. Data analysis is carried out within the secure networks of the organizations conducting the survey and, when necessary, on encrypted laptops used by research personnel. The devices are protected with personal usernames and passwords. The networks of the research institutes are protected by firewalls and two-factor authentication. The results are shared among the participating organizations via a secure Microsoft Teams channel, with access restricted to individuals involved in conducting the survey. The Teams service operates within Microsoft's cloud environment located in the EU/EEA area, and its data protection and security have been contractually agreed upon. Shared files do not contain identifying information and are deleted once they are no longer needed for analysis.

12. The storage period or the criteria for determining the personal data Data will be retained for 2 months after the final report is completed. Webropol retains IP address logs for 2 weeks.

13. The rights of a data subject - Right to access personal data - Right to rectify data - Right to erasure of data - Right to restrict processing - Right to object - Right to data portability Requests must be sent to: kirjaamo@fmi.fi

14. The right to submit a complaint to the supervisory authority Data subjects have the right to lodge a complaint with a supervisory authority if they believe that their personal data is being processed in violation of applicable data protection regulations.