Skip to content
Tietosuoja haltuun harrastustoiminnassa -hankkeen logo, jossa on tietosuojalainsäädäntöön ja lapsiin liittyvä kirjainlyhenne GDPR4CHLDRN. Tietosuoja haltuun harrastustoiminnassa -hankkeen logo, jossa on tietosuojalainsäädäntöön ja lapsiin liittyvä kirjainlyhenne GDPR4CHLDRN.
Search
  • English
    • Suomi
    • Svenska
    • English
  • Front page
  • Guiding materials
    • Board of the association
    • Coaches and instructors
    • Parents
    • Children and young people
  • Material bank
    • Term bank
    • Quizzes
    • Downloadable materials
    • Data protection icons 
    • Articles
  • Information on the site
  • English
    • Suomi
    • Svenska
    • English
  • Front page
  • Guiding materials
    • Board of the association
    • Coaches and instructors
    • Parents
    • Children and young people
  • Material bank
    • Term bank
    • Quizzes
    • Downloadable materials
    • Data protection icons 
    • Articles
  • Information on the site
Search
  1. Front page
  2. Board of the association
  3. What should you take into account when publishing photos and videos?
Skip to page content

Board of the association

  • Starting page
  • Why is the protection of personal data important?
    • 1. Privacy is a fundamental right
    • 2. Sensitive personal data requires particularly careful protection
    • 3. Personal identity codes may only be processed if necessary
  • What roles are involved in processing?
    • 1. The controller is responsible for the processing of personal data
    • 2. A processor acts on behalf of the controller
  • What principles must be observed in the processing of personal data?
    • 1. Take data protection into account from the start and in all circumstances
    • 2. Processing requires a basis
      • 2.1 Legal bases for processing personal data
      • 2.2 Consent requires an indication of the participant's wishes
      • 2.3 Consent from minors
    • 3. Only use personal data for the planned purposes
    • 4. Inform data subjects transparently of the processing of personal data
    • 5. Only process necessary personal data
    • 6. Only process accurate personal data and rectify inaccurate data
    • 7. Ensure the security of processing
    • 8. Define storage periods for personal data and erase unnecessary data
      • 8.1. Storage period
      • 8.2. Storage location
      • 8.3 Erasure 
    • 9. Demonstrate compliance with data protection legislation
  • What obligations does a hobby organiser have in the processing of personal data?
    • 1. Fulfil the participants' data protection rights
    • 2. Describe the hobby organiser's processing of personal data with a record of processing activities
    • 3. Agree on processing
    • 4. Assess the risks and impact of processing
    • 5. Report personal data breaches
    • 6. Only transfer personal data out of the EU if the conditions are met
    • 7. Give people involved in the hobby instructions and training in data protection
    • 8. Manage the life cycle of personal data from planning to collection, storage and erasure
  • What should you take into account when publishing photos and videos?
  • What should you take into account when processing health data in hobby activities?
  • What should you take into account when disclosing personal data in hobby activities? 
  • Annex 1: Consent form - template
  • Annex 2: Comics to inform about data protection

What should you take into account when publishing photos and videos?

Children are sometimes photographed or videoed in their hobbies. A photograph or video constitutes personal data if people can be identified from them.

You need a legal basis for processing and publishing photos of participants. For example, the hobby organiser can ask for the child’s or their custodian’s consent for publishing the photos. If you request the consent from the child themselves, you need to consider the child’s age and ability to assess the significance of their consent.

Jump to section about consent from minors

It is the hobby organiser’s responsibility to demonstrate that consent has been given. For this reason, you should request the consent in writing.

To publish a photograph, you need the consent of every identifiable person in it. If you have not obtained everyone’s consent, you cannot publish the photo in a form that enables the identification of people who have not given their consent for the publication.

People also have the right to withdraw their consent for the publication of photographs. If someone withdraws their consent, you normally have to remove the photo or edit it to render the person unidentifiable.

Consent for taking and publishing photographs and video must be freely given. That means that it must be requested in a manner and context that let the participant refuse their consent without fear of consequences such as falling into disfavour. You should be especially mindful of this when requesting consent directly from a child.

When publishing photos and video on social media, for example, you should remember that the social media platform may use the photos and video for its own purposes. The people identifiable from photos must be informed of where the photos will be published and of the possible consequences of such publication (for example, the possibility of the photos spreading or being used for other purposes).

You should draw up instructions for taking and publishing photos and video for everyone involved in the hobby.

The hobby organiser must have a legal basis for publishing the personal data of participants and processing it, also on social media. It is also a good idea to draw up instructions for the use of social media.

When can a hobby organiser publish photos and video featuring children, e.g. on its website?

The hobby organiser needs a legal basis for publishing photos and video of people in the hobby. For example, the hobby organiser has to ask for the child’s or their custodian’s consent for publishing photos and video. The consent must be specific, which means that it must be explicitly stated that photos of the child will be published on the hobby organiser’s website.

8. Manage the life cycle of personal data from planning to collection, storage and erasure
What should you take into account when processing health data in hobby activities?
The logo of the Office of the Data Protection Ombudsman.
The logo of TIEKE Finnish Information Society Development Centre.

The European Union flag, with the text "Funded by the European Union" on its right-hand side.

Funded by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or European Commission. Neither the European Union nor the granting authority can be held responsible for them.

Information on the website

The site contains material that provide information on data protection legislation and the protection of personal data, especially for children and young people aged 13–17, their parents, and associations that organise hobby activities. The website has been developed in the GDPR4CHLDRN – Ensuring data protection in hobbies project (2022–2024) implemented by the Office of the Data Protection Ombudsman and TIEKE.

Feedback about the site can be given by e-mail to the address tietosuoja@om.fi. In the message field, you must mention tietosuojaharrastuksissa.fi, so that the feedback is directed to the correct address.

  • Data protection on the website
  • Accessibility statement
Guiding materials
  • Board of the association
  • Coaches and instructors
  • Parents
  • Children and young people

© 2024 Office of the Data Protection Ombudsman and TIEKE. The site uses free Font Awesome icons. The icons have not been changed. License: CC BY 4.0

Touched by Hutcode