Communication of the positive credit register
Stakeholder cooperation
When carrying out stakeholder cooperation, we process the personal data of parties that have signed up for stakeholder cooperation so as to keep in contact with the stakeholders and implement stakeholder communications. The data includes the name, email address and telephone number of the stakeholder organisation’s contact person.
Subscribers to the newsletter and the system information bulletin
Anyone can subscribe to the Positive credit register's newsletter or system information bulletin on the Positive credit register's website. We process email addresses to be able to send the newsletter and system information bulletin to subscribers. Email addresses are processed in the newsletter service provided by Liana Technologies.
The Positive credit register’s website
The Positive credit register’s website (www.vero.fi/en/positivecreditregister) uses cookies.
A cookie is a small text file that a website places on the user’s device. We use cookies to implement essential functions. We do not use non-essential cookies. Because of this, the site does not request the visitor’s permission to save and use cookies.
Essential technical cookies (3 cookies)
To implement essential technical functionalities, the website places three (3) cookie files on the user’s device. The files do not save the user’s personal data, such as IP address, nor do they collect data on the device or location. The cookies are valid for the duration of the session, i.e. they are disabled when the user closes the browser window.
| Name of cookie | Purpose of use | Period of validity |
|---|---|---|
| ApplicationGatewayAffinity | Enables session affinity, i.e. ensures that all the user’s requests are sent to the same background server during the session. | Until the browser window is closed. |
| ApplicationGatewayAffinityCORS | Part of the Microsoft Azure Application Gateway service. Enables session affinity even in the case of cross-origin requests, for example when the web application uses resources from another domain. | Until the browser window is closed. |
| EPiStateMarker | Enables saving the user’s visit as a continuous session. | Until the browser window is closed. |
Visitor monitoring and web analytics
We use two web analytics tools on our website: Piwik Pro and Askem. They collect visitor information anonymously on the website. The tools do not save a cookie on the user’s device. The collected data is stored for no more than 25 months, after which it will be automatically deleted.
Our website collects data to allow us to monitor the number of visitors, to assess whether instructions are easy to find and to identify the ways the site is used. We use the data in website development.
The information collected includes items such as:
- information about page views is saved in an anonymous session hash, so the user cannot be identified
- number of individual page views and number of sessions
- from where the user lands on the page and where they go next
- sources from which the user lands on the page
- what search word entered in the search engine takes the user to the page
- search words used in the internal search engine
- browser name and version
- device type (computer, mobile device, etc.)
- what elements the user clicks on the page (navigation, function buttons, etc.)
- how far down the user scrolls the page
- from what country the user accesses the page.
The following information is not collected:
- full IP addresses
- exact information on the device used (e.g. resolution, browser extensions used)
- information about the use of the MyTax service.
Can you prevent collection of data?
The user can prevent web analytics tools from collecting data by enabling the brower’s Do not tract function in the browser settings.
Can the user be identified?
The Positive credit register cannot identify the user based on cookies or the data saved by the web analytics tools. Further, the data is not linked to the login data of the e-service or the user’s other personally identifiable data that the register may process in some other connection.
On what basis do we process data?
We process personal data in stakeholder cooperation and stakeholder testing to perform our task in the public interest (General Data Protection Regulation (EU 2016/679), Article 6(1)(e).)
The processing of personal data of subscribers to the newsletter and system information bulletin is based on the data subject's consent (General Data Protection Regulation (EU 2016/679), Article 6(1)(a)
Disclosure of data
As a general rule, data is not disclosed.
Processors
Email addresses of subscribers to the Positive credit register’s newsletter and system information bulletin are processed in the newsletter service provided by Koodiviidakko Oy.
Retention of data
With regard to data retention, we comply with the Tax Administration's information management plan.
We regularly check that the data on those participating in stakeholder cooperation and stakeholder testing is up-to-date.
Email addresses of the subscribers to the newsletter and system information bulletin will be retained until the subscription is cancelled. The personal data of a subscriber who cancels their subscription will be destroyed without delay.
Your data protection rights regarding the processing of personal data
The Incomes Register Unit is responsible for enforcing your data protection rights. You can make a free-form written request regarding your data protection rights and send it to us to the address below:
POSITIVE CREDIT REGISTER
P.O. BOX 2
FI-00055 Incomes Register
You can find more information about your data protection rights on the website of the Office of the Data Protection Ombudsman.
If you need help in exercising your rights, you can contact our customer service.
Right to view personal data
You have the right to know if we are processing your personal data. You are also entitled to receive a copy of your personal data that we process.
You can submit us a request to view your personal data with the paperform or contact form below.
Persons who participate in stakeholder testing and use the Enter portal can see their data by logging in to the portal.
Right to rectify data
You have the right to request us to rectify your inaccurate or incorrect personal data without any undue delay.
Right to restriction of processing
If you think the data we are processing about you is incorrect, if the data is processed against the law or if you have objected to the processing of your data, you can request us to restrict the processing of your personal data.
Right to oppose data processing
When the processing of your personal data is not based on our statutory obligation, you have the right to oppose the processing. You can oppose at any time on grounds of your special personal circumstances. In such a case, we may no longer process your personal data, except if there is a justified reason of great importance that supersedes your interests, rights and freedoms, or if the processing is necessary for the purpose of preparing, presenting or defending a legal claim.
Right to removal of data
You can cancel the newsletter or the system information bulletin at any time. Each newsletter and system information bulletin tells the subscriber that they can cancel the subscription via the Unsubscribe link. When you cancel the subscription, your personal data will be destroyed without delay.
Right to file a notification with the supervisory authority
You have the right to file a notification with the Data Protection Ombudsman regarding the processing of your personal data. Further information and instructions on how to file a notification are available on the website of the Office of the Data Protection Ombudsman.