Skip to content

Data protection at FTIA

This page describes the processing of personal data by The Finnish Transport Infrastructure Agency (FTIA). FTIA is responsible for the development and maintenance of the state-owned road network, railways and waterways. In carrying out its duties, FTIA processes personal data.

Information on processing of personal data

FTIA processes personal data as part of document management in its projects and in internal operations such as recruitment. In most cases, the processing of personal data by FTIA is carried out for reasons of general public interest. In accordance with Article 4 and section 2 of the Data Protection Act the authorities may process personal data in order to perform tasks that are in the public interest. In some cases, the processing is based on a legal obligation of FTIA, agreement made with the data subject, or consent given by the data subject.

Information processed in the planning, construction and maintenance of fairways

Personal data is processed in the planning and construction of roads, railways and waterways. Examples of this include property ownership information for the area under planning and personal data related to the statutory dialogue procedure. In addition, personal data is processed in tasks connected with plan-related feedback and reminders.

Fairway maintenance work involves photographing the fairways, and these images may also contain personal data. Feedback is also used in maintenance work; more detailed information on this is provided below.

FTIA works with other authorities in the planning of the National Transport System Plan, and this involves processing personal data related to stakeholder meetings.

Privacy statements:

Transport control and management

FTIA is responsible for organising road and rail traffic control and Vessel Traffic Services on waterways. In addition, FTIA is responsible for promoting traffic safety through its various activities. FTIA procures traffic control and management services from the Traffic control company Fintraffic Oy, which operates under the ownership steering of the Ministry of Transport and Communications.

Privacy statements:

Training and competency information

FTIA organises training for working on fairways and inspecting fairways. For this purpose, FTIA processes information on the completion of training programmes in order to ensure safe navigation and working practices on the transport route network.

Privacy statements:

Processing of personal data as part of feedback and request given to FTIA

You can request advice, give feedback, make a request and submit development proposals and notifications concerning Finland’s state-owned transport infrastructure.

Privacy statements:

Information related to stakeholders, customer relationships and events

FTIA processes personal data related to stakeholder activities. This includes organising customer service and stakeholder meetings, compiling invitation lists, customer surveys, sending invitations and announcements, and other stakeholder communications. Personal data is also processed when organising events and processing feedback on events.

Privacy statements:

Information related to electronic services

The purpose of the online services provided is to inform citizens and other stakeholders and to communicate about the activities within FTIA's area of responsibility. These online services are open to everyone, and viewing the webpages does not require registration.

Access to FTIA's systems can be granted to those that require this, such as certain employees of our service providers. In such cases, these individuals’ data is processed for authorisation and system logging purposes.

More information on the processing of personal data related to FTIA's Extranet services can be found on our Extranet website.

Privacy statements:

Premise-related data

The purpose of premise-related data is to ensure the safety of FTIA's premises. It includes camera surveillance, visitor registration and access permits.

Privacy statement:

Information related to case management, procurement, recruitment and investigation of suspected malpractice

FTIA processes personal data as part of its general activities, including case management, procurement, recruitment and investigation of suspected malpractice.

Privacy statements:


Recipients of personal data

In the processing of personal data, FTIA's contractual partners function as data processors.

FTIA discloses personal data:

  • in accordance with the Act on the Openness of Government Activities (621/1999), for example when responding to requests for information
  • to other authorities that have the right to process the information being disclosed, such as in permit matters or planning approval
  • as part of public notices

Retention time of personal data

Personal data is only stored for the required period. The length of this period varies, so for some personal data it may be a matter of seconds and for other data it may be decades – for example in cases where FTIA must retain a document due to legislative requirements.

More detailed information on data processing time periods can be found in the privacy statements.

Using your rights

You can submit a request relating to your rights as a data subject to FTIA by e-mail or by post.

Finnish Transport Infrastructure Agency
P.O. Box 33, FI-00521 Helsinki, Finland

[email protected]

If necessary, you can contact the FTIA Data Protection Officer.

Your rights as a data subject

As the data subject, you have the following rights regarding your personal data:

You have the right to know whether we process your personal data and the right to obtain a copy of your personal data.



You have the right to request that we correct any incorrect information about you.

You have the right to restrict the processing of your personal data when:

  • you have informed FTIA of incorrect personal data and FTIA is still investigating the matter;
  • your data is being processed in an unlawful manner but you do not want your data to be erased;
  • FTIA no longer requires the personal data in question, but you require it for the establishment, exercise or defence of legal claims; or
  • you have objected to processing pursuant to Article 21(1) pending the verification of whether the legitimate grounds of FTIA override your own.

You have the right to object to the processing of your personal data on the basis of a special personal situation when FTIA is processing your personal data on the basis of Article 6(1)(e) of the General Data Protection Regulation to perform a task promoting the public interest or to exercise public authority belonging to FTIA.

You have the right to receive in a structured, commonly used and machine-readable format, any personal data concerning yourself which you have provided to FTIA and you also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was submitted provided that the processing of personal data is based on the data subject’s consent or agreement and the processing is automated.

If the processing of your personal data is based on your consent, you can notify us at any time of the withdrawal of your consent. The withdrawal of consent does not affect the lawfulness of any consent-based processing carried out before this withdrawal.