Record of personal data processing in the project to establish a positive credit register: persons signed up for stakeholder cooperation and persons participating in stakeholder testing

Finnish Tax Administration
P.O. Box 325, FI-00052 VERO

Visiting address:
Vääksyntie 4, Helsinki

Noora Kontro

Hanna-Mari Korva

P.O. Box 325, FI-00052 VERO
National telephone switchboard: +358 29 512 000

Personal data is processed by the Finnish Tax Administration’s project to establish a positive credit register.

Stakeholder testers’ personal data is processed in a service management system provided by ServiceNow.

The purpose of the processing is that the project to establish a positive credit register could keep contact and communicate with stakeholders.

Another purpose of the processing is communication between the project to establish a positive credit register and the stakeholders during stakeholder testing.

The processing of personal data is based on the following legal provisions:

• General Data Protection Regulation (2016/679), Article 6(1)(e)
• Data Protection Act (1050/2018), section 4(2)

Stakeholder cooperation: persons signed up for stakeholder cooperation

Stakeholder testing: persons participating in stakeholder testing

• In stakeholder testing, data on the stakeholder organisation's master user is obtained from the person themselves.
• Data on other persons participating in the testing is collected from the master user.

Stakeholder cooperation: name, email address and telephone number of the stakeholder organisation’s contact person

Stakeholder testing: name, email address and telephone number of the person participating in stakeholder testing

Stakeholder testers’ personal data is processed in a service management system provided by ServiceNow. The data will not be disclosed to third parties.

Data is stored in accordance with the Tax Administration's information management plan.

Data is removed from the register when the reason for processing or storing it for the specified purpose ceases to exist.

The content and up-to-dateness of the register are checked at regular intervals.

Right of access

The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed.

Stakeholder testing participants can view their data by logging in to the Enter portal.

Right to rectification

The data subject has the right to request the controller to rectify inaccurate personal data concerning them without undue delay.

Stakeholder testing participants can edit their data in the Enter portal themselves.

Right to restriction of processing

The data subject has the right that the controller restricts the processing when the data subject disputes the accuracy of personal data, for example. The processing of the data will then be restricted for a period enabling the controller to verify the accuracy of the data.

Right to oppose data processing

The data subject has the right to object to the processing of their personal data at any time on grounds relating to a special personal situation.

Stakeholder testing participants can request removal of their data on the Enter portal's contact form.

Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with the Data Protection Ombudsman regarding the processing of personal data.