Privacy policy

Lukkari: the website publishing system of the Evangelical Lutheran Church of Finland

Controller

Church Council, Church Communications
Eteläranta 8, P.O. Box 210, 00131 Helsinki, Finland
Tel. +358 (0)9 18021

kirkkohallitus(at)evl.fi

Contact person

Lari Lohikoski
Eteläranta 8, P.O. Box 210, 00131 Helsinki, Finland

Tel. +358 (0)50 346 9041
lari.lohikoski(at)evl.fi

Data protection officer

Data protection officer of the Central Church Fund of Finland

tietosuojavastaava.kkr(at)evl.fi

Name of the register

Lukkari: the website publishing system of the Evangelical Lutheran Church of Finland

Purpose of and legal basis for processing personal data

Lukkari is a website designed for the parishes and other organisational units of the Church. Its structure and functions are the same for all, but the visual identity of individual pages can be altered to reflect an individual parish’s identity, for example. Lukkari was used to set up the Church’s online service at Evl.fi as well, and this privacy policy also applies to it.

The site processes personal data in connection with electronic functions that make it easier to access services when ordering a civil status document, joining the Church, requesting an intercessory prayer, providing feedback and subscribing to a newsletter.

The legal basis for processing the data is the legitimate interest stated in Article 6.1.f of the EU’s General Data Protection Regulation, which is based on each data subject’s declaration and consent given in connection with ordering a civil status document, joining the Church, requesting an intercessory prayer, providing feedback or subscribing to a newsletter.

Categories of persons and data content in the register

The Church Council is responsible for the general and shared content of the site. Each parish is responsible for its own introduction, contact information, event details, etc.

The site processes the following data that results from a person requesting a civil status order, joining the Church, signing up for events, providing feedback, etc.

Each parish draws up its own forms, for example for people who wish to request an intercessory prayer, submit feedback or sign up for parish activities. The data such forms contain vary, but it is always clear from the form what data are processed by the site.

The data submitted by people are processed by the relevant parish.

Data sources

The site user provides the personal data required for the form or activity in question.

Data disclosures

Personal data submitted through the site are also provided to the relevant parish.

Data submitted through the site are not disclosed to third parties.

The maintenance of the site’s technical environment has been outsourced to an operational service and application provider whose operations meet the requirements of the EU’s General Data Protection Regulation.

Data are not disclosed outside the EU or EEA.

We utilize self-hosted Matomo analytics on our website, which does not deploy tracking cookies.

Storage period for personal data

The data submitted to the Lukkari publishing system through a form or request are removed from the Lukkari database six months after submission. The data submitted on a civil status document form are removed from the Lukkari database three months after submission. This data can also be erased by request.

The rights of data subjects

Data subjects have the following rights:

• The right to request access to their personal data and the right to have that personal data corrected or deleted.
• The right to request limited processing of their personal data and the right to exercise their rights to object and to portable data.
• When processing of personal data is based on consent, the right to withdraw consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• The right to lodge a complaint regarding the processing of personal data to the national supervisory authority if the data subject believes that the processing of his or her data violates the EU’s General Data Protection Regulation. Exercising this right does not restrict the judicial redress described in the Finnish Church Act (1054/1994).

Contact information for the national supervisory authority

Data Protection Ombudsman

P.O. Box 800, Ratapihantie 9, 00521 Helsinki, Finland

Tel. +358 (0)29 566 6700

Other rights related to the processing of personal data