Most permits are granted to Finnish projects, but a permit holder may also be located in another EU or EEA country. Even then, the data may be processed only in a secure processing environment and only for the purpose defined in the permit.
Personal data may be transferred outside the EU or EEA only where there is a legal basis for the transfer under Chapter V of the EU General Data Protection Regulation and the requirements of the law on data protection and information security are met.
Read more: Transfer of personal data outside EU or EEA