Data protection

Description of data handling

EU´s general data protection act is applied in all EU member countries since 25.5.2018.

Based on this act Lestijärvi municipality has an obligation to compile a written description of how the personal data is handled. This description is called description of processing actions.

The description is an organization´s internal document. It works as a tool for understanding the handling process of personal data and it is meant to show that the personal data is handled according to the Data Protection Legislation. The description is a relevant part of demonstrating the implementation of the act within the organization.

A supervising authority can access the lawfulness based on the description if needed. Therefore the description has to be delivered to the supervising authority if requested.