Record of personal data processing in the project to establish a positive credit register: newsletter subscribers, project newsletter subscribers, persons signed up for stakeholder cooperation, and persons participating in stakeholder testing

Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Articles 13 and 14

Controller	Finnish Tax Administration P.O. Box 325, FI-00052 VERO Visiting address: Vääksyntie 4, Helsinki
Data Protection Officer at the Finnish Tax Administration	Noora Kontro Taito von Konow P.O. Box 325, FI-00052 VERO National telephone switchboard: +358 29 512 000
Personal data processor	Personal data is processed by the Finnish Tax Administration’s project to establish a positive credit register. Stakeholder testers’ personal data is processed in a service management system provided by ServiceNow.
Purpose of the processing of personal data	The purpose of the processing is that the project to establish a positive credit register could keep contact and communicate with stakeholders. Another purpose of the processing is communication between the project to establish a positive credit register and the stakeholders during stakeholder testing. The processing of personal data is based on the following legal provisions: General Data Protection Regulation (2016/679), Article 6(1)(e) Data Protection Act (1050/2018), section 4(2)
Categories of data subjects	Electronic newsletter and project newsletter: Subscribers to the electronic newsletter and project newsletter Stakeholder cooperation: Persons registered for stakeholder cooperation Stakeholder testing: persons participating in stakeholder testing In stakeholder testing, data on the organisation's master user is obtained from the person themselves. Data on other persons participating in testing is obtained from the master user.
Categories of personal data	Newsletter and project newsletter: Email address provided by person Stakeholder cooperation: The name, email address and telephone number of the stakeholder organisation's contact person Stakeholder testing: name, email address and telephone number of a person participating in stakeholder testing
Specific categories of personal data/criminal convictions and offences	Not processed.
Categories of recipients of personal data	Stakeholder testers’ personal data is processed in a service management system provided by ServiceNow. The data will not be disclosed to third parties.
Disclosure of data to third countries	Data will not be disclosed to third countries.
Time limits for erasure of data categories	The data will be removed from the register when the reason for processing or storing data for the specified purpose ceases to exist.
Rights of data subjects, and the right to lodge a complaint with a supervisory authority	Right of access The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed. Right to rectification The data subject has the right to request the controller to rectify inaccurate personal data concerning them without undue delay. Right to restriction of processing The data subject has the right that the controller restricts the processing of data concerning the data subject, for example, when the data subject disputes the accuracy of personal data. The processing of the data will then be restricted for a period enabling the controller to verify the accuracy of the data. Right to oppose data processing The data subject has the right to object to the processing of their personal data at any time on grounds relating to a special personal situation. Right to lodge a complaint with a supervisory authority The data subject has the right to lodge a complaint with the Data Protection Ombudsman regarding the processing of personal data.

Page last updated 2/28/2023