Privacy Policy

Welcome to the personal data protection website of TVO Group companies (Teollisuuden Voima Oyj (TVO), Posiva Oy, TVO Nuclear Services Oy, Posiva Solutions Oy). We have compiled here information about how we collect, retain, and use your personal data. The new General Data Protection Regulation became applicable on 25 May 2018. Data are stored in our information systems when you submit a job application to us or use our online services, for example. Examples of the data we collect:

• Personal data, such as name and contact details
• Data on your education and employment history required to fill out the job application
• Data provided by subcontractors on their employees

You can find in our Privacy Statement more examples of the type of data that are collected.

Will my data be safe?

Protection of personal data

TVO Group protects personal data in its possession by means of several different IT-based methods designed to prevent, detect, and/or register any unlawful processing of personal data. The servers containing personal data and the backup copies of them are located in locked and guarded premises and the data are only accessible by specifically appointed persons.

Prudent processing of data
As the data controller, we have the responsibility for the compliance of the parties authorised to process personal data with laws and agreed practices. The safe processing of data is ensured by detailed guidelines, personnel training, and careful selection of partners. More detailed information about the processing and purposes of use of personal data is provided in the Privacy Statement (see below).

PRIVACY STATEMENT ON PROCESSING OF PERSONAL DATA BY TVO GROUP COMPANIES

TVO Group companies (Teollisuuden Voima Oyj (TVO), Posiva Oy, TVO Nuclear Services Oy, Posiva Solutions Oy) process personal data safely and with care. This Privacy Statement describes the procedures applied to personal data processed by TVO Group. The Privacy Statement presented on this page is also subject to updating.

Data controller

• Teollisuuden Voima Oyj, Olkiluoto, FI-27160 EURAJOKI, FINLANDTelephone +358 2 83 811 Business ID: 0196656-0
• Posiva Oy, Olkiluoto, FI-27160 EURAJOKI, FINLAND Telephone + 358 2 83 72 (31) Business ID: 1029258-8
• TVO Nuclear Services Oy, FI-27160 EURAJOKI, FINLAND Telephone + 358 2 83 811 Business ID: 1468037-7
• Posiva Solutions Oy, Olkiluoto, FI-27160 EURAJOKI, FINLAND Telephone + 358 2 83 72 (31) Business ID: 2765436-2

Name of data file

Personal data file of TVO Group

Person in charge of data file matters and/or contact person
Data Protection Officer Juho Marila, Teollisuuden Voima Oyj, Olkiluoto, FI-27160 EURAJOKI, FINLAND Telephone +358 40 634 2216, [email protected]

Data file contents

Data classified into the following categories can be processed in the service:

• name and address data
• telephone contact details
• email contact details (e.g. subscription to Newsletter)
• analytics data (e.g. Newsletter reader analysis)
• data on main users of organisations
• visual material
• website visitor data
• data on representatives and personnel of service and material suppliers, such as contact details and roles of supplier’s employees, contact details of contractors, data provided in security clearance form, access control data
• data on providers of feedback received through feedback channels, and submitters of requests for statement, such as name and contact details
• visitor data

Regular data sources

Personal data are collected from the data subjects themselves and from generally available sources. The primary sources of data include the data subject, the employer of the data subject, or our stakeholders, as well as our suppliers regarding data on their subcontractors. Data can also be obtained from the other data files of the controller or from authorities.

For which purposes do we use the collected data?

Personal data are used within the limits of valid laws for purposes of communication, direct marketing, sending Newsletters to subscribers, handling stakeholder relations, replying to contact requests (e.g. feedback and orders for publications), organising marketing contests, handling employment and work relations, invoicing, as well as developing online content and organising visits. The processing of personal data is based on an agreement, consent, regulatory obligation, or legitimate interest. Personal data are processed based on the legitimate interest of a TVO Group company in the following contexts, for example:

• management of stakeholder relations and development of services
• management of relationships with service and material suppliers
• other stakeholder groups: communication with various stakeholders related to cooperation with authorities and corporations

How do we process your personal data?

As the data controller, we have the responsibility for the compliance of the parties authorised to process personal data with laws and agreed practices. The safe processing of data is ensured by detailed guidelines, personnel training, and careful selection of partners.In addition to the General Data Protection Regulation of the EU, TVO Group companies comply also with the Finnish Privacy Policy Act (5.12.2018/1050) in the processing and storing of personal data. Some functionalities on the websites of TVO Group companies may require registration and logging in to use the service. The personal data you provide when registering may be used for electronic direct marketing under the Finnish Privacy Policy Act and the Finnish Act on the services of Electronic Communications (7.11.2014/917). The personal data you provide to TVO Group companies (such as name, function, address, email address, telephone number, fax number, company name, reference number, and information about the request) will be used for service purposes and to fulfil your requests. You may be contacted by a representative of TVO Group companies, in case further information is needed to reply your questions or fulfil your request, or for marketing purposes (with private persons only if the user has expressly consented to this when registering to and/or using the service), stakeholder surveys, or for purposes related to the management or technical development of the website or other similar purposes. Personal data can be used to verify information related to privacy protection, or to investigate or prevent unlawful activities, activities which interfere with the operation of the network, or attacks causing denial of service.If you provide personal data on behalf of another person, such as your spouse, partner, child, or colleague, we assume you have been authorised by this person to disclose the data. By providing data, you also authorise TVO Group companies to exchange the data provided by you between TVO Group companies for the purposes described above.

How do we protect your data?

TVO Group companies take specific actions (e.g. through agreements) to ensure that the subsidiaries, representatives, Group companies, and service providers of the Group implement data protection according to the standards of TVO Group when processing your personal data, regardless of their location. The recipient of such data is requested to protect confidential data and to safeguard the information security of personal data, and is not authorised to use the data for any other purposes. TVO Group companies store and process personal data in the manner required by the General Data Protection Regulation of the EU, as well as laws and other provisions, and in compliance with this Privacy Statement. TVO Group has taken actions to prevent the unauthorised use and misuse of data as required for purposes of personal data protection. However, electronic systems always involve a risk of information security breach which cannot be completely eliminated. TVO Group protects personal data in its possession by means of several different IT-based methods designed to prevent, detect, and/or register any unlawful processing of personal data. The servers containing personal data and the backup copies of them are located in locked and guarded premises and the data are only accessible by specifically appointed and authorised persons. Communications are SSL encrypted in the online service.

We will not sell your data

It is not the policy of TVO Group companies to rent or sell personal data to third parties. We can disclose you data for processing purposes to reliable subcontractors who process personal data on our behalf for invoicing or contractual purposes, for example, or to authorities where required or allowed by law. Personal data provided to TVO Group will not be disclosed or transferred outside the European Union or the European Economic Area, unless necessary for the technical implementation of the service. By using a service provided by TVO Group and accepting these terms and conditions, you are consenting to the above data transfers for the purposes described above.

What other information do we collect, apart from personal data?

Your use of our services and your IP address are recorded in a log file. The purpose of the log file is to collect data on the amount and manner of use of the services, visitor numbers, system errors and which part of the services have or have not been used. The collected data are used to develop and improve our services. The users’ personal data (for example name, address, date of birth) are not collected in the log file, unless the users themselves provide them. Nor is any data collected in the log file which would allow individual users to be identified. Various technical tools can be used on the websites, such as Google Analytics, which provide certain technical information, including the operating system used in the computer, network location, browser type, and address of the website that sent the request, as well as the name of the company. TVO can contact the company based on these data for advertising and marketing purposes.

Data retention period

The data you provide on the websites of TVO Group companies can be stored and used for purposes of service development, for example. The data are processed only for as long as necessary to accomplish the original purpose of use or regulatory obligations. Personal data are deleted as soon as they are no longer needed to accomplish their purpose of use, unless otherwise specified in valid laws regarding retention of personal data. Where personal data and the processing of the data concern the performance of a task carried out for reasons of public interest, historical data related to the use of nuclear energy shall be retained in this respect (EU 2016/679, Article 89 (3)). The subscription to the Newsletter can be cancelled at any time using the link provided with the Newsletter.

How do we process personal data provided for recruitment purposes?

When you register to the career opportunities service provided on the websites of TVO Group companies, you authorise the representatives of TVO Group companies to process your personal data, and express your interest in a career with TVO Group. You should always provide your private email and street address as your contact details, if possible. TVO Group will process your personal data as confidential. When you submit the application, the representatives of TVO Group involved in the recruitment process can process your data. By registering to the career opportunities service provided on the websites of TVO Group companies, you are giving your consent to being contacted by a representative of TVO Group companies for recruitment purposes. Representatives of TVO Group companies carrying out recruitment processes can be employed by third party recruitment firms. Appropriate information security tools are deployed in the transfer of data to ensure the protection of personal data as required by the applicable law. By providing your personal data, you are consenting to your data being retained. The following personal data can be processed in the career opportunities service:

• name and address data
• telephone contact details
• email address information
• identity code data
• education data
• work history data

You are responsible for the accuracy and truthfulness of the data you provide. By submitting your application, you are consenting to your data being used in the filling of vacancies. Applications are retained in the service for 2 years from the date of submission or last update. Data can be processed in the service also for longer than this, for example where the data subject has been selected as an employee or substitute in the organisation.Read more about personal data protection in recruitment: Link to the

Right of access and right to object

The data subject has the right to inspect the data retained on them. You have the right to inspect once a year free of charge what, if any, data have been retained about you in the data files of TVO Group, and to access the data in electronically readable form. You have the right to ask any inaccurate data on you to be rectified, or ask the data to be erased. There is no right of erasure, if TVO Group companies are obliged under the law to retain the data, or if TVO Group companies need the data in order to submit, present or defend a legal claim. Access to data is restricted with respect to data related to control and inspection tasks. The data referred to in Article 15 (1) of the General Data Protection Regulation can be disclosed to the Data Protection Ombudsman at the request of the data subject.The right of access request shall be made in writing and signed, and sent to the following address: Teollisuuden Voima Oyj/Posiva Oy, Data Protection Officer, Olkiluoto, FI-27160 EURAJOKI. The right of access request shall indicate:

• name,
• identity code,
• name of data file,
• full address details and telephone number.

TVO will respond to right of access requests within one month after the receipt of the request. Where the right of access request is manifestly unfounded or less than one year has elapsed since the previous request, a remuneration of 200 EUR can be charged for the request.

Right to revoke consent

If you have expressly consented to specific processing of data, you can revoke your consent at any time.

Right to object to processing of personal data

Under Article 13 of the General Data Protection Regulation, data subjects have the right to object to the processing of their personal data.

Right to object to direct marketing

You have at any time the right to object to the processing of your personal data for purposes of direct marketing. In that case we will discontinue the processing of your personal data for these purposes. A prohibition of direct marketing will cause your personal data to be deleted.

Right to restrict processing

You have the right to restrict the processing of your personal data while we verify and investigate your request. The data subject has the right to prohibit the use of the data for direct marketing purposes by sending a letter to this effect to the address given above.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the data protection authority or some other competent regulatory authority, if you believe we process your personal data contrary to valid data protection legislation.

COOKIE POLICY

By using this website, you are consenting to us placing cookies on your computer or mobile device. Cookies are small files of information transferred to your computer when you connect to a website. Cookies are stored in the folders used by the browser. For more information about cookies, visit

Cookies recognise your computer when you revisit the site. They also remember the selections you have previously made on the website and thus improve your experience of using the site. Cookies can be used, for example, to identify the user’s devices and to adapt marketing on websites and in other potential services. Some cookies are essential to enable the technical functioning and use of our website. These cookies do not collect any user information for utilisation in marketing, or remember the pages the user has visited. Our performance-measuring cookies collect information about how the users use our website (e.g. most visited pages, possible error messages). These cookies do not collect data that can be linked to a certain user, but they are anonymous, and they are used only to improve the performance of the website. Third-party service plugins on the website (e.g. advertisements, YouTube videos, Google analytics, or Facebook plugins) may store information used to identify users. Unfortunately we have no control over these. If you want to prevent them from tracking your online movements, you can disable third-party cookies in your browser settings. You will find instructions for this in the Help menu of the browser. Our websites may also contain buttons which make it easier to share content to different network communication environments and to social media. If you use these buttons, the service you have selected can set a cookie on your device. These cookies are not in our control. More information about the use of third-party cookies can be found on the third-party website in question.

Management and deletion of cookies

If you do not want to receive cookies, you can change the settings of your web browser so that you are notified every time cookies are about to be set on your device. Alternatively, you can prevent the use of cookies completely. The use of cookies can be restricted or prevented via your web browser (see the Help menu of the browser for details). If you prevent cookies from being placed or disable them, some of the functionalities of our website may not work properly.