<p>
<em>
<strong>We have updated our privacy policy on September 2nd 2020.</strong>
</em>
</p>
<ul>
<li>
<p>Your privacy is important to us</p>
</li>
<li>
<p>What information do we process?</p>
</li>
<li>
<p>What is the purpose of us processing personal data?</p>
</li>
<li>
<p>What is the legal basis for processing personal data?</p>
</li>
<li>
<p>Will the data be shared with any third parties?</p>
</li>
<li>
<p>Who processes your personal data?</p>
</li>
<li>
<p>Is data processed outside the EU or the EEA?</p>
</li>
<li>
<p>What do we do to protect your personal data?</p>
</li>
<li>
<p>How do we use cookies?</p>
</li>
<li>
<p>How long do we store your data?</p>
</li>
<li>
<p>How do you exercise the rights granted to you by data protection legislation?</p>
</li>
<li>
<p>Changes to this privacy statement</p>
</li>
<li>
<p>Who is the data controller and how can I contact them?</p>
</li>
</ul>Your privacy is important to us<p>Yle is committed to protecting the privacy of users of its services and complies with data protection legislation and good data protection practices.
Yle needs to process personal data in order to produce services for all citizens.
This privacy statement describes the practices concerning the collection and processing of personal data at Yle.</p>
<p>In addition, individual services may have privacy statements that supplement or parallel this privacy statement.</p>
<p>This privacy statement does not cover the processing of personal data for journalistic purposes.
Read more on what is meant by the processing of personal data for journalistic purposes (in Finnish).</p>What information do we process?<p>We process information that is necessary to the purposes specified in this privacy statement.
The purpose determines what kind of information is collected about the users in different situations.</p>
<p>We collect personal data during registration, use of services, competitions, campaigns and surveys, as well as any time you are in contact with us.</p>
<p>Depending on the nature and features of the service, we collect the personal data listed below.</p>1.
The information you provide to Yle<p>Depending on the service, we process the following information that you provide to Yle:</p>
<ul>
<li>
<p>
<strong>Basic personal information and information related to authentication</strong>, such as name, pseudonym, username or other individual identifier, email address, gender and age.</p>
</li>
<li>
<p>
<strong>Information describing and related to the user</strong>, such as date of birth, gender, municipality of residence in Finland, interests, favourites, preferred topics, language and other selections, details of user devices and other information related to content production and programmes.</p>
</li>
<li>
<p>
<strong>Information on newsletters subscribed to by the user.</strong>
</p>
</li>
<li>
<p>
<strong>User-created content</strong>, such as customer feedback and contacts, permissions and consent, information related to competitions and drawings as well as comments made in the online service.</p>
</li>
<li>
<p>
<strong>Information about the participant</strong> when registering or participating in Yle events, competitions or drawings.</p>
</li>
<li>
<p>
<strong>Research and survey information.</strong> We may carry out customer surveys and research regarding service quality and use.
The information requested in surveys may be combined with viewing history data in additional surveys to be conducted later.
Any additional surveys conducted are always done so that the data of an individual user is processed as statistical entities and the individual respondent cannot be identified.</p>
</li>
<li>
<p>
<strong>Other information provided or submitted with your consent</strong>, such as information collected from external sources.</p>
</li>
</ul>2.
Information derived from the use of services<ul>
<li>
<p>
<strong>Access to Yle services</strong>, such as content use, programmes you have watched or listened to, articles you have read, or searches you have done in our services.</p>
</li>
<li>
<p>
<strong>Technical and device information</strong>, device identifiers and terminal device information, such as a terminal model and unique device and/or cookie identifier, terminal operating system, user browser, application, browser version, IP address, session identifier, session time and duration.</p>
</li>
<li>
<p>
<strong>Analytics and statistics</strong>, such as statistics collected by online service analytics systems (see the Yle cookie policy).</p>
</li>
<li>
<p>
<strong>Yle service use history</strong> information that is connected to the user and derived from observed use and/or information provided by the user, including demographic, interests and other user grouping.</p>
</li>
<li>
<p>
<strong>Information collected from customer communication</strong>, such as newsletter link clicks to gain insight on the reach of our communications.</p>
</li>
<li>
<p>
<strong>Location information</strong>, if you have provided your express consent for it.
Yle services based on location information use satellite, IP address or other network-based positioning information.
The use of assisted positioning methods may include the exchange of your location information as well as device- and operator-specific identifiers with a positioning server.
When you use our services that are based on location information, such as local content or location-based emergency bulletins, your location information is sent with your consent to Yle for the purpose of providing the appropriate content.</p>
</li>
<li>
<p>
<strong>Information derived from use of the services</strong>, such as information related to age group, gender or life stage (e.g.
couple or family).
The information derived from analytics is mainly based on cookies and cookie-based enriched data (see Yle's cookie policy).</p>
</li>
<li>
<p>
<strong>Other information collected with your consent</strong>.</p>
</li>
</ul>3.
Personal data transferred to us<ul>
<li>
<p>We receive statistical information related to the use of our programme content from content distributors, such as the media services of telecommunications operators.
This information is provided to Yle as statistics or in pseudonymised form, so we cannot identify the user based on the information.</p>
</li>
<li>
<p>We receive information regarding the use of our content in social media.
This information is used to manage social media channels and to ensure appropriateness of the discussion.
Furthermore, the information is used to respond to customer enquiries.
On the Facebook page maintained by Yle, Yle is the co-controller with Facebook Ireland.
Facebook manages personal data according to their own privacy principles: https://facebook.com/privacy/.</p>
</li>
<li>
<p>If you wish to access all Yle Areena content while staying in other EU countries, we need to know your home municipality.
At your request, we may retrieve this information from the Population Register Centre.</p>
</li>
</ul>What is the purpose of us processing personal data?<p>We process your personal data for one or more of the purposes described below.</p>1.
The provision and personalisation of services<p>
<em>We process your personal data in order to provide better services.</em>
</p>
<p>Personal data can be used to provide Yle services, such as enabling the functionalities of our website.
In addition, personal data is processed for user identification, such as when using the Yle ID.
Personal data can be used to implement different user-specific functions, such as by storing information on where the user left the programme.</p>
<p>
<em>We process personal data to provide more personal, interactive and user-friendly services.</em>
</p>
<p>Processing personal data allows us to make services available on different devices, suggest interesting content as well as display content targeted for different users in our services.
Read more about Yle’s operating principles (in Finnish).</p>2.
Service and content development and reporting<p>
<em>We process information related to the use of services in order to make Yle better for you and for everyone.</em>
</p>
<p>We process information related to the use of the services, for example, to create more interesting programme content, develop our services, and improve the service experience and accessibility.
In order to develop our services, we may, for example, conduct surveys and research related to Yle services and content concerning, among other things, habits or interests related to the use of the content.
These surveys can be conducted, for example, by e-mail or on our website.
In order to develop our operations and content, we also use the information provided as customer feedback and in audience surveys.
The personal data related to the improvement of services is typically processed as statistics.</p>3.
Customer communications and newsletters<p>
<em>We contact our users to inform them of Yle services and content.</em>
</p>
<p>As an Yle ID customer, you will receive regular emails on the benefits of Yle ID and Yle content.
You will receive a Yle ID customer newsletter occasionally, unless you have unsubscribed.</p>
<p>At your discretion, we may also send you personalised recommendations of new content.
You can manage customer communication through your Yle ID profile.</p>
<p>We also use topical newsletters to communicate our operations.
You may subscribe to Yle newsletters according to your interest and unsubscribe at will, either directly through a link in the newsletter or by changing your Yle ID communication settings.</p>4.
Customer service and feedback<p>
<em>Personal data can be used to provide customer service.</em>
</p>
<p>Personal data can also be used to respond to a user's requests and questions, for example, if the user has contacted our customer service.
We may also contact users in matters related to customer service or our services.</p>
<p>Calls to Yle customer service are directed to an answering service at certain hours of the day, where the calls are recorded for later response.
Calls recorded in the answering service are converted into text to speed up customer service.</p>
<p>Calls to Yle's switchboard will also be recorded to improve customer service.</p>5.
Other uses<ul>
<li>
<p>Information is also processed to ensure data security and to prevent the misuse of services.</p>
</li>
<li>
<p>Providing various polls and competitions requires the processing of personal data.
For these purposes, we only process personal data provided by the user for polling or competitions.
Competitions and sweepstakes may also be held in social media services.</p>
</li>
</ul>What is the legal basis for processing personal data?<p>Yle will only process personal data when there is a legal basis.
The legal basis for processing personal data depends on the nature and purpose of the processing.</p>
<p>One legal basis is <strong>a contract between a user and Yle</strong>.
Once you have created an Yle ID, we will process your user data for the purpose of providing the service.</p>
<p>In some cases, the legal basis may be <strong>user consent</strong>.
We process your data in some services when you give your consent for the processing.
For example, this type of processing includes participating in audience competitions, subscribing to recommendation messages and location information processing in mobile applications.
Data processing based on consent is always voluntary and you may revoke your consent at will.</p>
<p>In addition, we may process personal data for <strong>an appropriate need, i.e.
a legitimate interest in Yle</strong>.</p>
<p>We process the data for the following purposes based on a legitimate interest.
These include:</p>
<ul>
<li>
<p>the development of services and content</p>
</li>
<li>
<p>communicating about our services and content</p>
</li>
<li>
<p>compiling statistics on and analysing content use</p>
</li>
<li>
<p>the personalisation of services.
You can learn more about recommendations used in Yle services in this article (in Finnish).</p>
</li>
<li>
<p>Technical development of services and ensuring service functionality</p>
</li>
<li>
<p>Ensuring the security of Yle and its customers, preventing the misuse of services and protecting Yle property</p>
</li>
<li>
<p>Monitoring the requirements set by copyright regulations</p>
</li>
<li>
<p>Customer communications, customer feedback processing and customer relationship management.</p>
</li>
</ul>
<p>When we process personal data based on a legitimate interest, we carefully review the necessity and proportionality of the processing.</p>
<p>Yle's archived content and related author information are processed for archiving purposes in the public interest.
Read more about Yle’s operating principles (in Finnish).</p>Will the data be shared with any third parties?<p>We will only disclose information to parties outside Yle in the following situations:</p>
<ul>
<li>
<p>
<em>With your consent, we may disclose personal data to Yle partners in conjunction with service use.</em> Personal data may be disclosed with your express consent to, for instance, a service provided by a non-Yle party.
One such service is the Varaamo reservation service provided by the City of Helsinki that you may use with your Yle ID.</p>
</li>
<li>
<p>
<em>Disclosures to our social media partners.</em> Personal data may be disclosed to social media partners such as Facebook, Twitter, Whatsapp, Spotify and Instagram.
Use of social media widgets at Yle has been further described in the Yle cookie policy.</p>
</li>
<li>
<p>
<em>Disclosure of personal data for research.</em> Any disclosures of data for research use are always assessed on a case-by-case basis.
In principle, the information is only disclosed in a format from which individual persons can no longer be identified.
Cookie information related to audience measurement can be disclosed for statistical and research purposes.
We describe the processing of audience measurement data in more detail in our cookie policy.</p>
</li>
<li>
<p>
<em>We disclose personal data to the authorities only to the extent required by mandatory legislation.</em>Personal data may be disclosed to competent authorities upon demand in accordance with statutory requirements.</p>
</li>
<li>
<p>
<em>Disclosure of personal data related to content author information.</em> Yle stores author information in its contents in Wikidata in order to give its content a keyword to the extent that it is considered relevant from the perspective of communication.
The content metadata, including author information, has been selectively published on the Elävä arkisto website and on the opendata website in accordance with the principles of open data.</p>
</li>
</ul>Who processes your personal data?<p>At Yle, personal data is only processed by persons who are entitled to do so as part of their job.</p>
<p>
<em>Use of subcontractors</em>
</p>
<p>Yle may use subcontractors and service providers for the technical maintenance of its services, customer service, the administration and analysis of user information, surveys, customer communications or the implementation of various campaigns.
Yle's subcontractors and service providers process personal data only to the extent necessary for the purposes described in this privacy statement.</p>
<p>Service providers may not use your data for any purposes other than those specified by Yle, as described in this privacy statement and any service-specific privacy statement.
Yle requires subcontractors to process personal data in a confidential manner and to ensure an adequate level of information security in order to protect personal data.</p>
<p>
<em>Yle applications on third-party application platforms</em>
</p>
<p>Personal data is collected whenever Yle applications are used.
Yle services may be offered on various device platforms, and the services may include links or access to the websites or services of other parties.
When Yle services are used on, for example, a smart TV, mobile device, or a third-party application, the individual and independent privacy policies and terms of use of that service provider shall apply in addition to this privacy statement.
Applications downloaded through the App Store, such as Apple App Store or Google Play, are also subject to the terms of use of that service provider.
We recommend that you carefully review the privacy policies and terms and conditions of such external parties.
Yle is not responsible for the privacy policies or terms and conditions of external parties.</p>Is data processed outside the EU or the EEA?<p>We seek to primarily provide services and process your personal data using operators and services located within EU or EEA countries.
In some cases, operators, services and servers located elsewhere may also be used to provide our services.
In these cases, your personal data may be transferred outside the EU or the EEA to a country where the regulations on the processing of personal data differ from the requirements of the Finnish legislation.
For example, we use the standard contractual clauses approved by the European Commission to implement these transfers in compliance with statutory requirements, which ensures that personal data is adequately protected.
We see to it that personal data is processed in accordance with this privacy statement, regardless of where the processing takes place.</p>What do we do to protect your personal data?<p>We pay particular attention to data protection and information security in the design, implementation and maintenance of our services.
We use appropriate physical, technical and administrative security measures to protect your personal data.
Persons have been specifically appointed to take care of privacy protection and information security.
We restrict access to systems and databases containing personal data to the appointed persons who have an essential work-related need and the right to process the personal data in question.</p>
<p>We implement data protection and information security requirements by using, among other things, preventive risk management measures, by taking privacy protection and information security into account in the design of our services, by training our personnel and by regularly reviewing the compliance of our services with regard to data protection legislation.</p>
<p>We aim to pseudonymise data whenever possible.
Information observed and derived during the use of services is stored in a format that makes it impossible to identify an individual user.</p>
<p>You are able to personally manage the personal data, choices and consent included in your Yle ID.
We recommend that you review your information from time to time.
Most of Yle's services may be used without registering an account or by using a pseudonym.</p>How do we use cookies?<p>Yle uses cookies, web beacons and other similar methods to provide and develop Yle's websites and services and personalise content.
Our pages may also include other components from parties outside Yle that are related to, for example, social networking services.</p>
<p>Our cookie policies describe our use of cookies in more detail and explain how you can restrict their use.</p>How long do we store your data?<p>We store your data according to applicable legislation and only for as long as is necessary for the purposes defined in this privacy statement.<br>How long personal data is stored for varies by service and depends on the nature of the information.
We regularly review the necessary duration of information storage.
We currently use the following storage periods:</p>
<ul>
<li>
<p>We will delete the details of a single Yle ID when that ID has not been used for two years.
Before deleting the account, we send a reminder message to the user.
You may also delete your Yle ID at any time.
In this case, we will delete your personal data related to the Yle ID within 72 hours.</p>
</li>
<li>
<p>Interests, favourites and playlists set by the user will be stored until the user removes the content selection in the Yle service or when that ID is deleted.</p>
</li>
<li>
<p>Data related to the use of the services, such as viewing history, will be retained for 52 months after the data has been collected.</p>
</li>
<li>
<p>Information related to sweepstakes and competitions will be deleted as soon as the sweepstake or competition has ended.</p>
</li>
<li>
<p>As a rule, customer feedback and similar contacts are kept for one year after receiving the contact.</p>
</li>
<li>
<p>Information on calls received by our switchboard and records of discussions with the switchboard operators are deleted 21 days after the call.</p>
</li>
<li>
<p>Customer service voicemail data is kept for a maximum of 90 days.</p>
</li>
</ul>
<p>After the storage period is up, we destroy the information or convert them into an anonymous format that prevents the identification of an individual person.</p>
<p>Please note that some Yle services may include public comment sections or discussion forums.
Your pseudonym and the content you have published may remain available even after your Yle ID has been deleted.</p>How do you exercise the rights granted to you by data protection legislation?<p>Users of an Yle service have the right</p>
<ul>
<li>
<p>To access their own data.
Individuals have the right to know if their data is being processed or not.
If data is being processed, the individual is entitled to review their data.</p>
</li>
<li>
<p>Request the rectification of incorrect data</p>
</li>
<li>
<p>Request the deletion of obsolete data or data that is otherwise processed without an appropriate basis</p>
</li>
<li>
<p>Request a restriction of processing in certain cases</p>
</li>
<li>
<p>Object to data processing based on a legitimate or public interest</p>
</li>
<li>
<p>Request the transfer of their data when the data is processed on the basis of a contract or consent</p>
</li>
<li>
<p>To withdraw their consent to the processing of personal data</p>
</li>
<li>
<p>To lodge a complaint with the supervising authority.</p>
</li>
</ul>
<p>To exercise your rights, please send us a request via the Yle Privacy website at https://yle.fi/tietosuoja (in Finnish).</p>
<p>Some of our services allow you to revoke your consent for the processing of personal data using, for example, the settings of a device, service or application.</p>
<p>You can manage your Yle ID data by logging in to your profile.
You can use the ID communication settings to choose what customer communications you wish to receive from Yle.
You can also cancel the Yle ID newsletter and newsletter subscriptions.
Please note that in this case, we will still be able to send you necessary notifications regarding our services, such as information on features, changes or service faults and disruptions.</p>Changes to this privacy statement<p>Some of our services allow you to revoke your consent for the processing of personal data using, for example, the settings of a device, service or application.</p>
<p>You can manage your Yle ID data by logging in to your profile.
You can use the ID communication settings to choose what customer communications you wish to receive from Yle.
You can also cancel the Yle ID newsletter and newsletter subscriptions.
Please note that in this case, we will still be able to send you necessary notifications regarding our services, such as information on features, changes or service faults and disruptions.</p>
<p>
<em>This privacy statement was updated on September 2nd 2020.</em>
</p>
<p>You can view earlier versions of the Yle Privacy Statement:</p>
<ul>
<li>
<p>Privacy statement for Yles services 14.2.2019-2.9.2020</p>
</li>
<li>
<p>Privacy statement for Yles services 25.5.2018-14.2.2019</p>
</li>
</ul>Who is the data controller and how can I contact them?<p>The controller of your personal data is Yleisradio Oy, the Finnish Broadcasting Company, located at Uutiskatu 5, 00240 Helsinki.</p>
<p>In matters concerning data protection, you can send email to tietosuoja@yle.fi.</p>