Privacy policy

This Privacy Policy applies to all those whose personal information MSF Finland collects and processes, for example when you

• visit the websites of MSF Finland or use our digital channels;
• make a one-time donation or become a monthly supporter of MSF Finland;
• subscribe to e.g. our newsletter;
• apply for and accept to become a member of MSF Finland;
• stand for election and become elected as a member of the MSF Finland Board;
• apply for a job at the MSF Finland office;
• offer your services as an independent subcontractor or consultant;
• contact our donor services by mail, email, telephone or via our website or social media channels;
• contact MSF Finland regarding other matters by mail, email, telephone or via our website or social media channels;
• visit our website or social media channels (i.e. third-party platforms such as Facebook, Twitter, Instagram, LinkedIn and YouTube);
• enter into a professional relationship with us (e.g. as a representative of a service provider or media organisation, or as a politician, official or other stakeholder representative);
• participate in one of our events (e.g. conferences, seminars, trainings, information and discussion events);
• others as may apply.

Please note that the privacy policy of MSF Sweden (Läkare Utan Gränser) applies if you are

• a Finnish resident aid worker applying to or currently employed in international aid work via MSF Sweden; or
• a Finnish resident member of the MSF Sweden (Läkare Utan Gränser) association.

The policies are very much similar and based on same principles while the processes may vary. You can find out more about the MSF Sweden Privacy Policy here.

Personal data is any information relating to an identified or identifiable living individual (also called Data Subject). An identifiable living individual is one who can, directly or indirectly, be identified – either from the data itself or from the data in conjunction with other information that is, or is likely to come into, the possession of the data controller (in this case the data controller is MSF Finland). In practice this means many types of data, for example your name, contact information, IP addresses and photos.

MSF Agreement 2019 MSF Finland’s processing of your personal data may include fundraising, registering, organising, structuring, saving, processing or changing, gathering, reading, using, sharing, spreading, correcting or gathering, limiting, deleting or destroying.

We only register personal data that is needed for us to carry out our work, and when we can clearly motivate the need to use the data. We never retain personal data longer than needed for the specific purpose for which the data was collected.

We may collect, process and store your name, and your contact data (address, telephone numbers email address), date of birth, gender, language preference and bank account number. We will register the transaction history such as type of donation, time for donation, and amount and payment method. We may also register information about your wishes and interests, and the type of donation including, but not limited to, one-time donations, regular donations, major donations, company donations, trust donations, honorary gifts, legacies, and private fundraising campaigns for MSF Finland.

The personal data we collect is for the purposes described below, and for other purposes that may be specified when collected. The data is held in the donor register of MSF Finland. We process your personal data to be able to, including but not limited to:

• Inform you about our work and our organisation;
• Identify you as a donor and verify that you are over 18;
• Fulfil your donation, order or request;
• Process your payment and to process or discover any fraud;
• Thank you for your donation and tell you about how your donation will be used;
• Offer good donor services through administration of your donor profile, handling of your requests, correcting data or sending information, for example in legacy matters or donation certificates for honorary gifts per your request;
• Communicate with you via mail or via our digital channels (email, text and image messages);
• Analyse, group and collect statistics about our donors by choices, priorities and preferences (so called profiling) to be able to adapt information, ads and offers;
• Analyse donor behaviour to search for errors, maintenance, development, testing and improvement of our donor services and/or the technical platforms on which they are provided, to improve our communication and user experience;
• Administer the donor register (system administration) to maintain a well-functioning donor database;
• Others as may apply.

• Fulfilment of agreement between us and data subject
• Our legal obligation
• Data subject’s consent
• Our legitimate interest (read more from The lawful basis on which we process your personal data – Legitimate interest)

• Directly from the data subject itself.
• Regarding direct marketing to potential future donors, MSF Finland may use the services of external service providers such as Suomen Asiakastieto Oy. However, we store personal data only when a data subject makes a donation to MSF Finland.

To ensure up-to-date contact information (e.g. addresses and telephone numbers), MSF Finland updates the personal data of registered persons on a regular basis from third-party registers.

We may collect, process and store your name and your contact information (address, telephone numbers and email address) your resume/CV with information about your education, training and work experience, your personal letter, photograph, grades and certificates, results from assessments/tests or tasks, and information from your references (for example information about your performance) and other information you have provided as an applicant.

If you apply for a position in MSF Finland within Finance, Fundraising or for a managerial role or if you are elected to be a Board Member, we may perform a credit control at the end of the recruitment process. Since the verification of your credit report can include sensitive data about you, you will be asked for consent before requesting the credit control. In addition, you may be asked to give consent for example before performing assessments and/or tests.

The personal data we register is processed for the purposes which are described below, and for other purposes that may be specified when collected. We process your personal data to (including, but not limited to):

• Administer your application and select candidates in the recruitment process;
• Communicate with you via the recruitment platform and possibly also via other digital channels such as email, text and image messages
• Collect statistics over applications to analyse behaviours and patterns to be able to adapt our capacity (the statistics is aggregated, meaning that the data from individual applicants will not be revealed);
• Analyse and group applications by choices, priorities and preferences (so called profiling) to be able to adapt information, ads and offers to our applicants for the future;
• Analyse applicant behaviours to search for errors, maintain, develop, test and improve our application services and the technical platforms on which they are provided to improve our communication and user experience;
• Verify credit checks (fundraising, finance and managerial positions);
• Others as may apply.

• Data subject’s consent
• Our legitimate interest (read more from The lawful basis on which we process your personal data – Legitimate interest)

• Directly from the data subject
• From reference(s) provided by the data subject
• From public data sources

We may collect, process and store your name and your contact information (address, telephone numbers and email address), date of birth, nationality, your resume with information about your education, training and work experience, your personal letter, photograph, grades and certificates, results from assessments, tests or tasks and information from your references (for example information about your performance) and other information you have provided as an applicant.

If you are a doctor, nurse, midwife or psychologist and are applying to become an aid worker, we may also store your medical license and verify it with the National Supervisory Authority for Welfare and Health (Valvira).

The personal data we register is processed for the purposes which are described below, and for other purposes that may be specified when collected. We process your personal data to (including, but not limited to):

• Administer your application and select candidates in the recruitment process;
• Communicate with you via the recruitment platform on our website and possibly also via other digital channels such as email, text and image messages, as well as our social media platforms including, but not limited to, Facebook, Twitter, Instagram, LinkedIn and YouTube, and by telephone;
• Collect statistics over applications to analyse behaviours and patterns to be able to adapt our capacity (the statistics is aggregated, meaning that the data from individual applicants will not be revealed);
• Analyse and group applications by choices, priorities and preferences (so called profiling) to be able to adapt information, ads and offers to our applicants for the future;
• Analyse applicant behaviours to search for errors, maintain, develop, test and improve our application services and the technical platforms on which they are provided to improve our communication and user experience;
• Verify medical licenses (medical aid workers);
• Others as may apply.

• Data subject’s consent
• Our legitimate interest (read more from The lawful basis on which we process your personal data – Legitimate interest)

• Directly from the data subject
• From reference(s) provided by the data subject
• From MSF Sweden
• From public sources

We collect, process and store your name and your contact information (address, telephone numbers and email address), areas of interest/expertise, information requested for visa or work permit applications (this may include information also about countries visited and health information) and a copy of your passport.

If you are a doctor, nurse, midwife or psychologist, we also collect, process and store your medical license and verify it with the National Supervisory Authority for Welfare and Health (Valvira).

The personal data we register is processed for the purposes which are described below, and for other purposes that may be specified when collected. We process your personal data to (including, but not limited to):

• Administer the work of and develop aid workers currently included in the pool of aid workers;
• Communicate with you via mail, via our digital channels and via telephone;
• Match your competence and profile against communications assignments (press as well as our own and other media channels);
• Match your competence and profile against internal and external presentations (MSF evenings, company presentations etc.);
• Inform you about current activities and events;
• Publish your name and photo in connection with the MSF Finland office and/or our digital channels as part of aid work stories with your express consent.
• Others as may apply.

• Fulfilment of agreement between us and data subject
• Data subject’s consent
• Our legitimate interest (read more from The lawful basis on which we process your personal data – Legitimate interest)

• Directly from the data subject
• From references provided by the data subject
• From MSF Sweden
• From public sources.

If you are a member of the MSF Finland Association (Lääkärit Ilman Rajoja), we may register your name, and your contact information (address, telephone numbers and email address) your education, work experience and aid work history. If you are a member of the Board of Directors, we may also register your social security number and/or date of birth, place of domicile and passport copy in accordance with statutory requirements on the registration of Board members.

The personal data that we collect is processed for the purposes below, and for other purposes which may be specified when collected. We process your personal data to (included but not limited to):

• Confirm to legal requirements of association membership registries (Yhdistyslaki 503/1989, as amended) and for registration of members of the Board of Directors to the Patent and Registry Office (PRH);
• Communicate with you via mail and via our digital channels (email, text and image messages) and telephone;
• Inform about, invite to, and administer events such as seminars, conferences, trainings and other in MSF Finland (such as the General Assembly and other membership events (photos, participation lists etc.));
• Others as may apply.

• Data subject’s consent
• Fulfilment of agreement between us and data subject
• Our legitimate interest (read more from The lawful basis on which we process your personal data – Legitimate interest)

• Directly from the data subject
• MSF Sweden

We may register information about you such as the data we collected in the recruitment process (please see I am a job applicant section). We may also register your bank details, your next of kin information and/or in case of emergency information as well as data about your career development (employments, trainings and other experience) as well as information on job evaluations and feedback. We may also register data about your absences from work as part of our labour protection obligations, and if you travel with MSF Finland, we may register a copy of your passport.

The personal data we register about you is processed for the purposes below, and for other purposes which may be specified when collected. We process your personal data to be a responsible employer and (including, but not limited to):

• Administer your contract information such as worktime and annual leave information, sickness absence, user rights, fee/remuneration, pension, insurances etc.;
• Administer your travel through an online travel agency, other ticket bookings, hotels, visas etc.;
• Process reimbursements and payments for travel, trainings, vaccinations etc.;
• Communicate with you via mail, via our digital channels (email, text and image messages, and via telephone);
• Fulfil our statutory obligations as an employer, with regard to e.g. taxation and prepayment, social security, labour protection and other reporting obligations;
• Actively work to prevent bullying, discrimination and long-term sick leave etc.;
• Establish next-of-kin lists and in case of emergency lists for contact in case of emergency;
• Create good IT and information practices by establishing secure user profiles, updating of passwords, and control of IT devices;
• If you are an employee of MSF Finland, with your express consent, we may publish your name, title, photo, work email address and phone number on our website to establish an open, transparent and welcoming atmosphere around MSF Finland and the work we do in the field;
• Spread information in our digital channels through recordings, streaming and photography from our events such as meetings, seminars, conferences, trainings as well as information and discussion evenings;
• Work systematically with competence development through feedback, trainings, and reviews/evaluations etc.;
• Inform about, invite to, and administer events such as seminars, conferences, trainings, and associative events (such as General Assembly) in terms of photos, participation lists etc.;
• Perform surveys, analysis and statistics to improve MSF Finland as an employer, a contractor, a membership organisation and an organiser of events;
• Others as may apply.

• Fulfilment of agreement between us and data subject
• Our legitimate interest
• Our legal obligation
• The data subject’s consent

• Directly from the data subject
• (MSF employees only) assessments carried out by third parties and/or the employer
• MSF sources (websites, media bank etc)

We may collect personal data such as your name, title, organisation, employer if you act as a representative of your employer, and your contact information (address, telephone numbers and email address). You may also be filmed and/or photographed when you participate in any of our events, as they often are recorded and streamed via our digital channels.

The personal data we collect when you, in your relation to MSF Finland, is processed for the purposes below (and/or for the purposes above), and for other purposes which may be specified when collected. We process your personal data to (included but not limited to):

• Create participation lists for our events (such as conferences, seminars, trainings and information and discussion evenings). Please note that we do not always create participation lists for our events;
• Disseminate information in our digital channels (stream film and/or publish photographs) from conferences, seminars, trainings and information and discussion events etc.;
• Keep in contact with you as a service provider or media representative or other partner, to provide customer support etc. via mail, telephone or our digital channels (email, text and image messages or website);
• Keep in contact with you as a representative of a media organisation, ministry or other government agency or partner, to be able to provide efficient and effective communication and advocacy on our work, via mail, via our digital channels and via telephone;
• Internal control of tenders and other;
• Others as may apply.

• Data subject’s consent
• Fulfilment of a contract entered into with the data subject
• Our legitimate interest (read more from The lawful basis on which we process your personal data – Legitimate interest)

• Directly from the data subject
• From references provided by the data subject
• From public sources
• MSF Sweden

We may collect traffic data, location data, web logs and other communication data, for example IP address, unique ID or IT device used, operation system and browser type. We also use cookies, which are small text files that are saved on your IT device containing information from our digital channels. More information about the use of cookies in our digital channels can be found under Cookies.

The personal data that we collect is processed for the purposes below, for the purposes described under Sections “I am a donor” and “I am a job applicant” above, and for other purposes that may be specified when collected. We process your personal data to (included but not limited to):

• Collect statistics of the use of our digital channels to analyse behaviours and patterns to be able to adapt our capacity to respond to our donors and followers. The analysis is of aggregated data, (meaning that the data from individual visitors will not be revealed);
• Analyse and group visitors to our digital channels by choices, priorities and preferences to be able to adapt information, ads and offers to our visitors for the future;
• Analyse visitor behaviour in our digital channels to search for errors, maintain, develop, test and improve our digital channels and the technical platforms on which they are provided, to improve our communication and user experience;
• Others as may apply.

• The data subject’s consent, e.g. consent to the use of cookies
• Our legitimate interest (read more from The lawful basis on which we process your personal data – Legitimate interest)

• Directly from the data subject
• Collected when visiting our website(s) and other digital channels

Fulfilment of agreement is used as lawful basis when there is an agreement between you and MSF Finland which needs to be fulfilled. An example of such agreement is when you donate to MSF Finland. To fulfil your donation, MSF Finland needs to administer your personal data. Another example of when fulfilment of agreement is used as lawful basis is when you are offered an employment following the recruitment process. We do not use fulfilment of agreement as lawful basis longer than what it takes to complete the administration of the agreement. In some cases, for example monthly donors or employees, the administration takes longer, running the full term of the agreement and thereafter as necessary, e.g. on the grounds of statutory obligations.

Legal obligation is used as lawful basis when there are legal requirements for MSF Finland to process your personal data. An example of this is accounting (book-keeping) of your gift. According to accounting law, we need to save book-keeping records for at least ten years, depending on the type of information. This means that, while we do not process your personal data with the lawful basis of fulfilment of agreement (above), we still process them for at least ten years due to legal obligations.

Legitimate interest is a lawful basis based on an assessment of the balance between MSF Finland’s interest in processing your personal data and your interest to protection your personal data.

When we process your personal information with reference to legitimate interest, the period of time differs for each purpose. For example, if you have donated a gift to us, we will consider you an active donor and save your personal data for as long as necessary, however seldom longer than up to six calendar years from your last donation, in our donor register. During this time, we will process your personal data to, for example, inform you about our work and ask you for new donations. If, for instance, you visit our website, we aim to not store your personal data for more than 24 months. The 24 months are based on a default calculation for troubleshooting, statistics, etc. in web contexts.

Consent is a lawful basis which requires proof of your explicit and recorded consent. When we ask for your consent we are very specific in what you consent to. If we get your consent, we process your personal data until we no longer need it or until you withdraw your consent. You can withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing of your personal data based on consent before its withdrawal. Giving us your consent is voluntary and refusing consent does not entail any material negative consequences. An example of when MSF Finland uses consent as lawful basis is for job applications through our websites. When applying for a job or an assignment you tick a box “I consent” right next to where you fill in your application data. Other examples are when collecting cookies on our websites as well as when we need to collect sensitive personal data about you. When not given in a tick box, consent may be given in writing or verbally (recorded) as part of an agreement with MSF Finland.

Consent can be withdrawn at any time by contacting us by any of the methods listed in this policy.

You have the right to obtain confirmation from us whether your personal data is being processed. You also have the right to access and request copies of your personal data and to obtain certain information, such as the purposes of processing your personal data and the types of personal data involved.

MSF Finland is responsible that the personal data we process is correct, but you are most welcome to contact us to have your personal data completed with relevant information. If you find incorrect personal data regarding you, you have the right to have this rectified. When the data is rectified, we will inform those with whom we may have shared the data about the changes, except for in the cases when it proves to be impossible or otherwise unreasonable. Upon your request, we will inform you about with whom the rectification has been shared.

You have the right to, without unnecessary delay, get your personal data erased (also called as “right to be forgotten”) in certain situations, such as:

• If the data is no longer needed for the purposes for which they are processed;
• If the processing is based on your consent only and you inform us that you no longer wish to give consent;
• If the processing is for direct marketing purposes and you oppose to having your personal data processed for this purpose;
• If you object to processing based on legitimate interest, and that the interest of MSF Finland cannot be proven to be stronger than your interest:
• If data has not been processed in accordance with data protection laws;
• If erasure is needed to fulfil a legal obligation.

You have the right to contest the kind of processing of your data that MSF Finland performs based on its legitimate interest. If so, you must specify which type of data processing you are objecting to. If MSF Finland considers that the processing of your data needs to be performed, we must show that our interests are stronger than your interests to protect your personal data. The exception is if for personal data processed for direct marketing purposes where you always have the right to object to the processing.

You have the right to require a temporary restriction from processing of your personal data. The restriction is applicable for example to these situations:

• When you consider your personal data not being correct and you have asked us for rectification. In these cases, you can require that the processing of your personal data is restricted until the error is rectified.
• When the processing of your personal data is not compliant with the data protection legislation, but you object to having your data deleted and instead require that processing is restricted.
• When you need your data to be able to confirm or to make a claim or defend legal interests, even if we do not need your data for the purpose of our processing.

If the processing is temporarily restricted, we will inform those with whom we have shared the data about the restriction taking place, except for in the cases when it proves to be impossible or otherwise unreasonable. We will notify you when the temporary restriction is lifted.

You have the right to obtain your personal data in a structured, commonly used and machine-readable format and to transfer the data to another controller, if we process your personal data based on your consent or because it is necessary for performance of a contract that we have entered with you or in order to enter a contract with you. For this right to be available to you, our processing of your personal data must take place by automated means.

You have the right to be informed if the personal data you provided is to be used by another organisation, if for instance, it will be moved to another IT server. This is applicable both in the instance where you have given your consent to us processing your personal data and if the processing is needed in order for us to be able to fulfil an agreement, we have entered with you. This is not applicable for the processing that we do based on legitimate interest or based on a legal obligation.

If you wish to exercise your data protection rights or have a question about our privacy policy, please contact us by email info@laakaritilmanrajoja.fi. The request is free of charge unless you request several copies of your data or we deem your request ungrounded or otherwise unreasonable. In your request, you should clearly state how you wish to exercise your data protection rights or which data you want to access in order for MSF Finland to be able to respond in an appropriate way. We must verify your identity before we can fulfil your request. If we are unable to verify your identity based on your request, we will contact you and request additional information.

We will answer your request without unnecessary delay and always within a month from when we received your request. If there is a reason for not being able to fulfil your wishes, we will notify you of the reason by letter. The copy of the personal data undergoing processing will be sent to the address you have given in the request.

If you consider your personal data have been implicated in a data breach, you need to report this to us without delay. You have the right to make a complaint with the data protection authorities concerning our processing of your personal data. You can make the complaint with the data protection authority of the EU member state where you have your permanent residence or where you work, or where you find that a potential breach with regard to your personal data has occurred. In Finland, the relevant data protection authority is the Data Protection Ombudsman.

If you have suffered damages due to a data breach as defined by the applicable legislation you have the right to compensation. You can require compensation from us directly or through a court order. A request for damages shall be done in writing to MSF Finland.

E.g. any personal data relating to the physical and physiological characteristics of an individual (e.g. a natural person) obtained by technical means, such as facial photographs, which allows the person’s unique identification.

Freely given, specific, informed and explicit consent by statement or acting signifying agreement to the processing of their personal data.

Any personal data related to the physical or mental health of an individual or the provision of health services to them.

The entity that determines the purpose, conditions and means of the processing of personal data, in this case MSF Finland.

Also known as the “Right to be Forgotten”, it entitles the data subject to have the data controller erase his/her personal data, cease further dissemination of the data, and potentially have third parties cease processing the data.

The entity that processes data on behalf of the Data Controller service providers.

A natural person whose personal data is processed by a processor.

Personal data that is protected through technological measures to ensure that the data is only accessible/readable by those with specified access.

Any information related to an identified or identifiable natural person or “Data Subject”, such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

A breach of security leading to the accidental or unlawful access to, destruction, misuse, etc. of personal data.

Any operation performed on personal data, whether or not by automated means including collection, use, recording, etc.

Any automated processing of personal data intended to evaluate, analyze, or predict data subject behavior.

Also known as “Subject Access Right”, it entitles the data subject to have access to and information about the personal data that a controller has concerning them.

MSF Finland uses cookies when you visit laakaritilmanrajoja.fi and our other websites. Through these cookies, data is gathered about how you use our digital channels.

Cookies are small text files which are stored on a user’s computer holding a modest amount of data from the website. Next time you come back to the website these cookies will be read and show the web pages with the right settings. There are two types of cookies that we use:

A temporary session cookie which is saved in the memory of your computer during the time that you are visiting the website. This cookie disappears when you close your web browser.

A permanent cookie which stays on your computer until it is removed. This type of cookie can be removed through the setting in your web browser.

[cookie_audit]

You can shut off cookies through the security settings in your web browser. If you do not accept cookies on our websites, the consequence may be that the user experience and the functionality is affected.

The purpose with cookies is to give you as a visitor to our websites access to functions and facilitate the use of our websites. Cookies collect information about how you as a visitor (not on individual level though) use our functions. We collect this information to improve the website.

To facilitate sharing of information from our websites in social media, we use so called plug ins. These plug ins can save so called third-party cookies in the web browser and makes it possible for the visitor to recommend articles on for example Facebook and Twitter.

The web analysis tool Google Analytics is used on our websites, and cookies register information on an aggregated level about how the visitors use the websites. The information collected is about number of page views, from where visitors come and number of visits.

We use remarketing on our websites. This gives us an idea about the age and the sex of our visitors. This information may be used in donation campaigns to direct advertisements in Google Display Network and the advertising tools of Facebook. A third-party cookie is used for this purpose. You can change the settings for advertisements or opt-out from advertisements to avoid advertising from Google based on behaviour.

You can control Google Marketing through this link https://adssettings.google.com/authenticated.

You can opt-out Google Analytics web browser addendums through this link https://tools.google.com/dlpage/gaoptout.