Right to obtain information on the processing of personal data by the Finnish Border Guard

The Finnish Border Guard website indicates how the Finnish Border Guard processes personal data. For more detailed questions concerning the processing of personal data, contact the data controller of the personal data register in question or the Finnish Border Guard’s data protection officer.

The data subject’s right of access

With certain exceptions, everyone has the right to receive information about which data concerning the data subject has been stored in the personal data register or whether the register contains any data concerning them. In certain situations, the right of access may be denied or restricted. More information regarding restrictions of the right of access is provided in the form on exercising the right of access.

In the case of personal data registers established for the performance of statutory tasks, the request for access must be made in person at the Headquarters of the Finnish Border Guard or one of its administrative units. If necessary, the Headquarters directs or transfers the request to the Data Protection Ombudsman or other authorities. The person submitting a request must prove their identity. In order to facilitate the implementation of the right of access, a separate form has been prepared. Using the form is not a prerequisite for exercising the right of access; the request may also be submitted, in writing, by another document. However, the request must indicate which information the right of access is being used for. 

Henkilötietojen tarkastuspyyntö -lomake (pdf)

For other personal data registers, the request for access should be made to the data controller. More information about the data controller and the contact information for the data controllers and the data protection officer are available on the Data controllers page of the Finnish Border Guard website.

As a rule, exercising the right of access is free of charge. However, a fee may be charged for exercising the right of access if the requests are clearly unfounded or unreasonable due to their frequency or some other reason.

Right to rectification of inaccurate or incorrect personal data

Everyone has the right to demand that the data controller rectify or supplement any inaccurate or incorrect information concerning them. 

A justified request for rectification should be submitted to the data controller. More information about the data controller and the contact information for the data controllers and the data protection officer are available on the Data controllers page of the Finnish Border Guard website.

Right to erasure

In certain cases, everyone has the right to demand have the data controller to erase personal data concerning them. 

A justified request for erasure should be submitted to the data controller. More information about the data controller and the contact information for the data controllers and the data protection officer are available on the Data controllers page of the Finnish Border Guard website.

Right to restrict processing

In certain cases, everyone has the right to request the data controller to restrict the processing of their data. However, the right to restrict processing under the GDPR does not apply when personal data is processed on the basis of the Act on the Processing of Personal Data by the Border Guard. 

A justified request to restrict processing should be submitted to the data controller. More information about the data controller and the contact information for the data controllers and the data protection officer are available on the Data controllers page of the Finnish Border Guard website.

Right to data portability

When personal data is processed on the basis of the GDPR, everyone has, in certain situations, the right to receive the personal data concerning them in a structured, commonly used and machine-readable format and transfer that data to another data controller.

The request for data portability should be submitted to the data controller. More information about the data controller and the contact information for the data controllers and the data protection officer are available on the Data controllers page of the Finnish Border Guard website.

Right to object to the processing of personal data

When personal data is processed on the basis of the GDPR, everyone has, in certain situations, the right to object to the processing of their personal data.

A request to restrict processing should be submitted to the data controller. More information about the data controller and the contact information for the data controllers and the data protection officer are available on the Data controllers page of the Finnish Border Guard website.

Right to not be subjected to automated decision-making

When personal data is processed on the basis of the GDPR, everyone has, with certain exceptions, the right to not be subjected to a decision based solely on automated processing when that decision has a significant impact on them. The Finnish Border Guard does not use automated decision-making as referred to in the Regulation.

Exercising of rights through the Data Protection Ombudsman

Everyone has the right to request the Data Protection Ombudsman to verify the lawfulness of personal data and its processing if the data subject's right of access has been deferred, restricted or denied, or if the data controller does not accept the data subject's request to rectify, supplement, erase or restrict the processing of personal data.

More information about the rights of the data subject and the contact information for the Data Protection Ombudsman are available on the website of the Data Protection Ombudsman (tietosuoja.fi).