Deficient wage information has been generated on some credit register extracts between October 1 and November 6. The deficiency only applies to a part of credit register extracts requested at this time period. Missing data has been transferred to the register on November 7. Wage information will be correctly shown on the extracts as of 7.11. We apologize for the inconvenience and any harm it may have caused. Read more in the news.

Record of personal data processing in the project to establish a positive credit register: persons signed up for stakeholder cooperation and persons participating in stakeholder testing

Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Articles 13 and 14

Controller

Finnish Tax Administration
P.O. Box 325, FI-00052 VERO

Visiting address:
Vääksyntie 4, Helsinki
Data Protection Officer
at the Finnish Tax Administration

Noora Kontro

Hanna-Mari Korva

P.O. Box 325, FI-00052 VERO
National telephone switchboard: +358 29 512 000
Personal data processor

Personal data is processed by the Finnish Tax Administration’s project to establish a positive credit register.

Stakeholder testers’ personal data is processed in a service management system provided by ServiceNow.
Purpose of the processing of personal data

The purpose of the processing is that the project to establish a positive credit register could keep contact and communicate with stakeholders.

Another purpose of the processing is communication between the project to establish a positive credit register and the stakeholders during stakeholder testing.

The processing of personal data is based on the following legal provisions:

  • General Data Protection Regulation (2016/679), Article 6(1)(e)
  • Data Protection Act (1050/2018), section 4(2)
Categories of data subjects

Stakeholder cooperation: persons signed up for stakeholder cooperation

Stakeholder testing: persons participating in stakeholder testing

  • In stakeholder testing, data on the stakeholder organisation's master user is obtained from the person themselves.
  • Data on other persons participating in the testing is collected from the master user.
Categories of personal data

Stakeholder cooperation: name, email address and telephone number of the stakeholder organisation’s contact person

Stakeholder testing: name, email address and telephone number of the person participating in stakeholder testing
Specific categories of personal data/criminal convictions and offences Not processed.
Categories of recipients of personal data

Stakeholder testers’ personal data is processed in a service management system provided by ServiceNow. The data will not be disclosed to third parties.
Disclosure of data to third countries Data will not be disclosed to third countries.
Time limits for erasure of data categories

Data is stored in accordance with the Tax Administration's information management plan.

Data is removed from the register when the reason for processing or storing it for the specified purpose ceases to exist.

The content and up-to-dateness of the register are checked at regular intervals.
Rights of data subjects, and the right to lodge a complaint with a supervisory authority

Right of access

The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed.

Stakeholder testing participants can view their data by logging in to the Enter portal.

Right to rectification

The data subject has the right to request the controller to rectify inaccurate personal data concerning them without undue delay.

Stakeholder testing participants can edit their data in the Enter portal themselves.

Right to restriction of processing

The data subject has the right that the controller restricts the processing when the data subject disputes the accuracy of personal data, for example. The processing of the data will then be restricted for a period enabling the controller to verify the accuracy of the data.

Right to oppose data processing

The data subject has the right to object to the processing of their personal data at any time on grounds relating to a special personal situation.

Stakeholder testing participants can request removal of their data on the Enter portal's contact form.

Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with the Data Protection Ombudsman regarding the processing of personal data.
Page last updated 9/27/2023