Our data protection policy

The Parliamentary Ombudsman supervises the legality of the activities of the authorities by investigating complaints, carrying out inspections and intervening in shortcomings on on his or her own initiative. Both personal data and other information are collected in the Office of the Parliamentary Ombudsman in connection with this work.

You have the right to know for what purposes and in what ways we process your personal data.

By providing these descriptions on our website, we aim to give a comprehensive picture of our data protection practices regarding the processing of personal data in our operations. If we have not succeeded in doing this, you can ask specifying questions by sending a message to the Office of the Parliamentary Ombudsman.

Contact details of the Office of the Parliamentary Ombudsman

Why we process personal data

We process personal data to perform the tasks of oversight of legality laid down in the Constitution of Finland and the Parliamentary Ombudsman Act (197/2002) and to manage the administrative matters of the Office of the Parliamentary Ombudsman (especially document and personnel administration).

The processing of personal data at the Office of the Parliamentary Ombudsman is governed by the EU General Data Protection Regulation (GDPR), the Data Protection Act (1050/2018) specifying and supplementing it and, when the Ombudsman exercises the right to prosecute laid down in section 110 of the Constitution, the Act on the Processing of Personal Data in Criminal Matters (1054/2018). 

The processing of personal data is mainly based on Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject). In services provided over the telephone and on media email distribution lists, we process personal data to perform a task in the public interest and to exercise official authority vested in the Office of the Parliamentary Ombudsman (Article 6(1)(e) of GDPR (EU 2016/679)).

The legal basis for processing special categories of personal data is Article 9(2)(g) of the GDPR (processing is necessary for reasons of substantial public interest) and Article 6, section 1, subsection 2 of the Data Protection Act. The legal basis for the processing of personal data related to criminal convictions and offences is Article 10 of the GDPR and section 7, subsection 1, paragraph 2 of the Data Protection Act. When the Ombudsman exercises his right to prosecute, the processing of personal data is based on the Act on the Processing of Personal Data in Criminal Matters and in Maintaining National Security (1054/2018).

The Office of the Parliamentary Ombudsman does not make decisions based on automated decision-making. The Office does not carry out profiling on the basis of the personal data it processes.

Read more about the processing of personal data in the activities of the Office of the Parliamentary Ombudsman: