Data protection at Tukija

At Tukija, personal data processing is mainly based on Tukija’s statutory obligations, tasks in the public interest and the exercise of public powers. Tukija always processes personal data in accordance with the data protection principles defined in legislation.

Tukija follows the following principles for personal data processing:

• Personal data is handled lawfully, appropriately and transparently from the point of view of the data subject.
• Personal data is collected and handled only for a certain, explicit and legal purpose. Primarily, personal data can only be processed for the mentioned purposes and for as long as the processing is purposeful and necessary in view of the laws.
• Only necessary personal data is collected, which minimises the processing of personal data.
• Personal data is updated whenever necessary. Imprecise, outdated and incorrect personal data will be deleted or corrected without delay either on Tukija’s own initiative or following a request by the data subject.
• Personal data is stored in a format in which the data subject can be identified only for as long as necessary for the purpose of personal data processing. The storage period for documents containing personal data have been defined in Tukija’s information management plan.
• Personal data is processed confidentially and securely. Personal data will only be disclosed in accordance with legislation or on the basis of the data subject’s consent. The data subject has been informed through the privacy statement on how data is disclosed in accordance with regulations.

Principle of openness

Personal data will be disclosed only to those requesting it in accordance with the Act on the Openness of Government Activities. Information and documents are public unless specifically determined as confidential under law.

Privacy Policies

Tukija has two privacy statements, and the Administrative Review Division for Medical Research Ethics has one.

Privacy policy for pharmaceutical studies (pdf)

Privacy policy for biobanks (pdf)

Tukija also uses the Sampo case management system and the European Medicines Agency’s (EMA) CTIS system to process applications.

• Read more about the Sampo system’s privacy statement (in Finnish).
• Read more about the CTIS system’s privacy statement.