Yle’s services are governed by the principles of personal data protection
YOUR PRIVACY IS IMPORTANT TO US
Yleisradio Oy (hereinafter “Yle”) is committed to protecting the privacy of the users of its services and observes in its operations the legislation concerning privacy protection, other legislation and best privacy practices. This privacy statement describes the practices concerning the collection and processing of personal data at Yle. “Personal data” means information that can be connected to a specific person.
This privacy statement applies when Yle is the controller of the personal data file and when we refer to the application of this privacy statement in connection with the use of Yle’s services. We may also provide additional information related to data protection in connection with a specific service, website or application.
The primary basis for the processing of personal data is the use of Yle’s services, the user’s other pertinent connection with Yle’s services or the user’s consent. Applications published by Yle that you install may also process your personal data.
Yle’s services can be offered on various device platforms, and the services may include links or access to the websites or services of other parties. Yle’s services can be used, for instance, with a smart TV, mobile device or third-party application with its own, independent privacy policies and terms and conditions of use. Applications downloaded from an application store, such as the Apple App Store, Google Play or Microsoft Store, are also subject to the terms and conditions of the service provider in question. We recommend that you carefully review the privacy policies and terms and conditions of such third parties. Yle is not responsible for the privacy policies or terms and conditions of third parties.
If you do not accept the practices described in this privacy statement, we do not recommend that you submit your personal data to Yle. Most of Yle’s services can be used without registration or by using an alias instead of your real name, in which case you do not need to submit your personal data.
What information do we collect?
Yle may collect information of its users necessary for the purposes defined in this privacy statement. The purpose determines what kind of information is collected of the users in different situations.
Your personal data may be collected when you register as a user of Yle’s services, when you use the services, in connection with competitions, campaigns or surveys, and otherwise when you do business with us. Among other information, Yle collects personal data belonging to the groups specified below.
1. The information you provide to Yle.
In connection with various services, we may ask information from you that you may choose to provide to Yle:
- Name or alias
- Password or another form of identification
- E-mail information and other contact information
- Other information describing the user, such as date of birth and gender
- Permissions, consents and information on your language selections and other comparable selections
- Interests, favourites and topic focuses
- Information related to competitions and raffles
- Comments you provide in Yle’s online services
- Other information related to content production and programmes
- Survey and questionnaire information
- Information on the devices you use
- Customer feedback
- Other information provided or submitted with your consent, such as information collected from external sources.
We collect data through various means, for instance, when you enter information during registration, when using a service or when participating in Yle’s competitions, campaigns or surveys.
2. Information observed and derived during the use of services
We may collect the following information of you and your use of Yle’s services:
- Data collected by the analytics systems of online services
- Customer communication information, e.g. information on clicking links
- The web page from which you came to Yle’s web page
- Device IDs, such as terminal device model and the individual device and/or cookie ID
- Channel of data collection: web browser, mobile browser, application and browser version
- IP address
- Operating system of the terminal device
- Session ID, session time and duration
- Location information, if you have provided your express consent for it
- Information that can be connected to the user based on the usage history of Yle’s services, derived from usage observed and/or the information the user has provided, e.g. demography, interests and other user grouping.
- Other information collected with your consent.
Yle’s services and functions based on location information utilise satellite, IP address or other network-based positioning information. The use of assisted positioning methods, such as assisted GPS, may include the exchange of your location information and device- and operator-specific identifiers with a positioning server. When you use our services that are based on location information, such as local content or location-based emergency warnings, your location information is sent with your consent to Yle for the purpose of providing the appropriate content.
Why do we process personal data?
We process your personal data in association with one or more of the purposes defined below.
1. Providing services
Your personal data can be used for the implementation of Yle’s services, for user identification and for making Yle’s services more personal, interactive and user-friendly, e.g. by enabling the use of Yle’s services on your different devices, by providing you with recommendations on potentially interesting content and by showing you targeted content in our services. Your personal data may also be used for responding to your requests and questions, implementing the choices you make and performing other comparable tasks, ensuring data security and preventing the misuse of services.
2. Developing services
Your personal data may be used for developing Yle’s services and for improving the user experience. Your personal data may be used for questionnaires and surveys related to Yle’s services and content, as well as implementing coverage and usage analyses related to audience surveys. We may combine information collected through different services and applications to the extent that the information has been collected for the same purpose, and we may create statistics as required for the purpose of developing services and applications.
3. Marketing and customer communications
Your personal data may be used for marketing Yle’s services and for customer communications, e.g. for sending you notifications concerning our services and contacting you on matters related to customer service or our services.
How do we store and connect personal data?
According to what has been described above, Yle’s services may store information on the use of Yle’s services to facilitate various functions. Yle stores information observed and derived during the use of services separate from the actual personal data file used to identify a user. Information observed and derived during the use of services is stored using surrogate keys from which an individual user cannot be identified.
Do we disclose personal data?
As a rule, Yle does not sell or otherwise disclose your personal data outside Yle. However, Yle may disclose your personal data outside Yle in the following situations:
1. Your consent
Your personal data can be disclosed with your express consent, for instance, in connection with a service provided by a third party.
As a rule, your personal data is not shown to other users of Yle’s services, but in some services, you can choose to share, for instance, your alias or other information with other users. We advise you to consider carefully before sharing your personal data or other information with other users.
3. Subcontractors and service providers
Yle may use subcontractors and service providers for the technical maintenance of its services, customer service, the administration and analysis of user information, surveys, customer communications or the implementation of various campaigns. Your personal data may only be disclosed to Yle’s subcontractors or service providers to the extent that they participate in the implementation of Yle’s services and the purposes described in this privacy statement.
Such third parties may not use your information for any other purpose than what is described in this privacy statement and defined by Yle. Yle obligates them to maintain the privacy of your information and to ensure a sufficient level of data security to protect your personal data.
4. International data transfers
Yle seeks to primarily implement services and process your personal data utilising operators and services located within the EU or ETA zone. However, in some cases, Yle’s services may be implemented using operators, services and servers located elsewhere, in which case your personal data may be transferred between different countries. Such transfers may include moving personal data outside the EU or ETA zone to countries with legislation concerning the processing of personal data that deviates from the requirements of the Finnish legislation, such as the United States. Even then, Yle ensures a sufficient level of protection for your personal data, among other things, by agreeing on matters related to the privacy and processing of personal data as required by the legislation using e.g. the model agreement provisions approved by the European Commission and otherwise so that the processing of personal data takes place according to this privacy statement.
5. Research use
In some cases, we may disclose information for scientific or other research, provided that the information in question has first been converted to a form in which individual persons are no longer identifiable.
6. Disclosure due to mandatory legislation
Your personal data may be disclosed according to the demands of competent authorities and relevant legal prerequisites.
How do we keep the data up to date?
We strive to keep the personal data in our possession accurate through reasonable measures by removing unnecessary information and updating outdated information.
Some of Yle’s services allow users to administer the personal data, selections and consents we collect themselves. We advise you to regularly check the accuracy of your data using these functionalities. Please note that it is your responsibility to update the personal data you provide to us if they change.
What do we do to protect your personal data?
We pay particular attention to privacy protection and data security in the design, implementation and maintenance of our services. We use appropriate physical, technical and administrative security measures to protect your personal data against misuse. Persons have been specifically appointed to take care of privacy protection and data security. We restrict access to systems and databases containing personal data to the appointed persons who have an essential work-related need and the right to process the personal data in question.
We implement privacy protection and data security, among other things, through the measures of preventive risk management, by taking privacy protection and data security into account in the design of our services, by training our personnel and by regularly inspecting the compliance of our services. We respond to risks related to the misuse of data and other comparable risks, taking into account the probability of the risk and the nature of the data to be protected.
Yle may also use subcontractors and service providers for implementing its services and processing personal data. In this case, we ensure through agreements and other arrangements that your personal data is processed in accordance with the legislation, best data security practices and this privacy statement.
How long do we store your data?
We store your data according to the relevant legislation and only as long as is necessary for the purposes defined in this privacy statement. After the basis for processing your personal data has ended, we will delete your personal data.
The user is considered to have terminated the account they have registered, such as Yle ID (Yle Tunnus) , if they have not logged in using their user ID in two years. In such a case, Yle will remove the data the person has provided from the user information database and delete the user ID, after which nobody (not even the user in question) can take it into use again. Information observed and derived during the use of services is turned into a format in which an individual cannot be recognised any more.
Please note that some of Yle’s services may include public, interactive and communicative functionalities, such as comments sections or discussion boards, and your alias and the content you have produced may remain visible in them even after you have terminated the user ID you have registered or your user relationship has ended.
What rights do you have?
You have the legal right to inspect which data we have collected concerning you. You also have the right to request the correction or deletion of incorrect, defective, unnecessary or outdated personal data.
You can exercise your rights by contacting our customer service as mentioned below, by administering your user account in certain Yle services and by utilising the functions available on your device, in our applications or in our services.
You can send an inspection request concerning Yle ID by e-mail to email@example.com. For the purpose of identifying the user, the inspection request shall be sent from the same e-mail address that is associated with Yle ID which the inspection request concerns. Information on the registered personal data is sent back to the same address associated with Yle ID. The inspection request can be made once a year without charge.
You can also prohibit Yle from using data concerning you for direct marketing and customer satisfaction and other surveys. However, we may still send you notifications concerning our services, such as information on changes or service failures and interruptions.
You can request Yle to delete your data from the user register by contacting our customer service as mentioned below. You can request the deletion of your data related to Yle ID by sending an e-mail to firstname.lastname@example.org. The request to delete data shall be sent from the same address that you have associated with Yle ID which the deletion request concerns.
Changes to this privacy statement
Who is the controller and how can I contact them?
The controller of your personal data is Yle, the Finnish Broadcasting Company, at the address Radiokatu 5, 00240 Helsinki, Finland.
In matters concerning the protection of privacy, you can contact our customer service by e-mail at email@example.com or firstname.lastname@example.org. You can also use the mail address Yleisradio Oy, PL 77, 00024 Yleisradio, or call us at +358 20 690 414.
Please note that for reasons of data security, we may have to verify your identity before fulfilling your request.