Record of personal data processing in the project to establish a positive credit register: newsletter subscribers, project newsletter subscribers, persons signed up for stakeholder cooperation, and persons participating in stakeholder testing

Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Articles 13 and 14

Controller

Finnish Tax Administration
P.O. Box 325, FI-00052 VERO

Visiting address:
Vääksyntie 4, Helsinki

Data Protection Officer at the Finnish Tax Administration

Noora Kontro

Taito von Konow

P.O. Box 325, FI-00052 VERO
National telephone switchboard: +358 29 512 000

Personal data processor

Personal data is processed by the Finnish Tax Administration’s project to establish a positive credit register.

Stakeholder testers’ personal data is processed in a service management system provided by ServiceNow.

Purpose of the processing of personal data

The purpose of the processing is that the project to establish a positive credit register could keep contact and communicate with stakeholders. Another purpose of the processing is communication between the project to establish a positive credit register and the stakeholders during stakeholder testing.


The processing of personal data is based on the following legal provisions:

  • General Data Protection Regulation (2016/679), Article 6(1)(e)
  • Data Protection Act (1050/2018), section 4(2)
Categories of data subjects

Electronic newsletter and project newsletter: Subscribers to the electronic newsletter and project newsletter


Stakeholder cooperation: Persons registered for stakeholder cooperation


Stakeholder testing: persons participating in stakeholder testing

  • In stakeholder testing, data on the organisation's master user is obtained from the person themselves.
  • Data on other persons participating in testing is obtained from the master user.
Categories of personal data

Newsletter and project newsletter: Email address provided by person


Stakeholder cooperation: The name, email address and telephone number of the stakeholder organisation's contact person


Stakeholder testing: name, email address and telephone number of a person participating in stakeholder testing

Specific categories of personal data/criminal convictions and offences Not processed.
Categories of recipients of personal data Stakeholder testers’ personal data is processed in a service management system provided by ServiceNow. The data will not be disclosed to third parties.
Disclosure of data to third countries Data will not be disclosed to third countries.
Time limits for erasure of data categories The data will be removed from the register when the reason for processing or storing data for the specified purpose ceases to exist.
Rights of data subjects, and the right to lodge a complaint with a supervisory authority

Right of access

The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed.

Right to rectification

The data subject has the right to request the controller to rectify inaccurate personal data concerning them without undue delay.

Right to restriction of processing

The data subject has the right that the controller restricts the processing of data concerning the data subject, for example, when the data subject disputes the accuracy of personal data. The processing of the data will then be restricted for a period enabling the controller to verify the accuracy of the data.

Right to oppose data processing

The data subject has the right to object to the processing of their personal data at any time on grounds relating to a special personal situation.

Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with the Data Protection Ombudsman regarding the processing of personal data.

Page last updated 2/28/2023