The privacy notice is based on the EU’s General Data Protection Regulation (2016/679, “GDPR”) and Finnish Data Protection Act (1050/2018). Version [19.2.2024]. The privacy notice can be updated. The data subject can review the up-to-date content by regularly visiting the website where the privacy notice is available.
1. Name of the purpose of processing
Newgen policies and procedures on the collection, use and disclosure of personal data when using the website: https://www.newgen-project.eu
2. Controller(s), data protection officer and contact person(s)
VTT Technical Research Centre of Finland Ltd (“VTT”), business ID: 2647375-4, Tekniikantie 21, 02150 Espoo
- Address: VTT Technical Research Centre of Finland Ltd., Register Office, P.O. Box 1000, FI-02044 VTT, Finland
- E-mail: dataprotection@vtt.fi (DPO, data security and their substitutes)
Contact details of the contact person:
- Name: Tran Ngo
- Address: Visiokatu 4, 33101 Tampere, Finland
- E-mail: tran.ngo@vtt.fi
3. Personal data to be processed
The personal data to be processed are: Email address, first name and last name, cookies and usage data. There is a separate cookie policy and cookie settings on the website.
The data subjects represent the following groups: NEWGEN website visitors
4. Purpose of processing and legal basis
The purpose of the processing of personal data is to respond to a person who contacts the project and provide project update information for the person who subscribes project newsletter
Legal basis for the processing of personal data [1]:
- Consent of the data subject (Article 6(a) of the GDPR)
5. Data sources
Personal data are obtained from the data subject through the website contact form and newsletter subscription form.
6. Recipients or categories of recipients of personal data
| Name and contact details of the recipient/Type of recipient (if there is a justifiable reason not to specify) | Purpose of the disclosure, role of the recipient in the processing |
| VTT Technical Research Centre of Finland | Responding to the inquiries of people contacting through the contact form on the website |
| CLIC Innovation | Collecting email of newsletter subscribers through the newsletter subscription form on the website and sending out the newsletters to them |
7. Transfer of personal data outside the EU or the EEA
- No
8. Storage period of personal data
The data are processed for a maximum of 4 years from 2023. After that, the data will then be removed or anonymised.
Principles of personal data protection
Protection of personal data processed in an information system:
9. Rights of the data subject
The data subject has the following rights, however, which may be derogated from and/or restricted in accordance with applicable legislation. Please note that in case the controller cannot identify the data subject, certain rights of the data subjects may not apply, unless the data subject provides additional information enabling his or her identification.[2] Restriction and deviation are verified on a case-by-case basis.
The data subject may exercise the above rights by contacting the controller using the contact details specified in item 2, preferably by e-mail.
- right to withdraw consent (and right to erase data)
- right of access
- right to rectification
- right to erasure (so-called “right to be forgotten”)
- right to restrict the processing of data
- right to data portability
- right to lodge a complaint with a supervisory authority
Further information on the data subject’s rights:
Right to withdraw consent
If the processing is based on consent, the data subject has the right to withdraw their consent at any time regarding the processing of their personal data.
The data subject’s right to access data
The data subject has the right to obtain confirmation from the controller as to whether personal data concerning them are processed. In addition, the data subject has the right to access his or hers personal data and information on the processing of personal data.
Right to rectification
The data subject has the right to have inaccurate and incorrect personal data concerning the data subject rectified and incomplete personal data completed without undue delay.
Right to erasure, so-called “right to be forgotten”
The data subject has the right to have the controller erase personal data concerning the data subject without undue delay.
Right to restriction of processing
In certain situations, the data subject has the right to demand that the controller restrict the processing.
Right to object to the processing
In certain situations, the data subject has the right to object to the processing of personal data concerning them.
Right to portability
The data subject has the right to receive personal data concerning them that they have provided to the controller and the right to transmit those data to another controller in so far as the processing is based on consent or contract and the processing is carried out automatically.
Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with supervisory authorities if the data subject considers that their rights have been violated in the light of the EU General Data Protection Regulation. Contact details of Finnish Data Protection Ombudsman: https://tietosuoja.fi/en/contact-information
[1] GDPR Article 6 and Section 4 of the Data Protection Act.
[2] Article 11 of the GDPR.
