When carrying out stakeholder cooperation, we process the personal data of parties that have signed up for stakeholder cooperation so as to keep in contact with the stakeholders and implement stakeholder communications. The data includes the name, email address and telephone number of the stakeholder organisation’s contact person.
Subscribers to the newsletter and the system information bulletin
Anyone can subscribe to the Positive credit register's newsletter or system information bulletin on the Positive credit register's website. We process email addresses to be able to send the newsletter and system information bulletin to subscribers. Email addresses are processed in the newsletter service provided by Liana Technologies.
The Positive credit register’s website
The Positive credit register’s website (www.vero.fi/en/positivecreditregister) uses cookies.
A cookie is a small text file that a website places on the user’s device. We use cookies to implement essential functions. We do not use non-essential cookies. Because of this, the site does not request the visitor’s permission to save and use cookies.
Essential technical cookies (3 cookies)
To implement essential technical functionalities, the website places three (3) cookie files on the user’s device. The files do not save the user’s personal data, such as IP address, nor do they collect data on the device or location. The cookies are valid for the duration of the session, i.e. they are disabled when the user closes the browser window.
The table below shows what technical cookies the site saves, what they are used for and how long they are valid.
Name of cookie
Purpose of use
Period of validity
ApplicationGatewayAffinity
Enables session affinity, i.e. ensures that all the user’s requests are sent to the same background server during the session.
Until the browser window is closed.
ApplicationGatewayAffinityCORS
Part of the Microsoft Azure Application Gateway service. Enables session affinity even in the case of cross-origin requests, for example when the web application uses resources from another domain.
Until the browser window is closed.
EPiStateMarker
Enables saving the user’s visit as a continuous session.
Until the browser window is closed.
Visitor monitoring and web analytics
We use two web analytics tools on our website: Piwik Pro and Askem. They collect visitor information anonymously on the website. The tools do not save a cookie on the user’s device. The collected data is stored for no more than 25 months, after which it will be automatically deleted.
Our website collects data to allow us to monitor the number of visitors, to assess whether instructions are easy to find and to identify the ways the site is used. We use the data in website development.
The information collected includes items such as:
information about page views is saved in an anonymous session hash, so the user cannot be identified
number of individual page views and number of sessions
from where the user lands on the page and where they go next
sources from which the user lands on the page
what search word entered in the search engine takes the user to the page
search words used in the internal search engine
browser name and version
device type (computer, mobile device, etc.)
what elements the user clicks on the page (navigation, function buttons, etc.)
how far down the user scrolls the page
from what country the user accesses the page.
The following information is not collected:
full IP addresses
exact information on the device used (e.g. resolution, browser extensions used)
information about the use of the MyTax service.
Can you prevent collection of data?
The user can prevent web analytics tools from collecting data by enabling the brower’s Do not tract function in the browser settings.
Can the user be identified?
The Positive credit register cannot identify the user based on cookies or the data saved by the web analytics tools. Further, the data is not linked to the login data of the e-service or the user’s other personally identifiable data that the register may process in some other connection.
Email addresses of subscribers to the Positive credit register’s newsletter and system information bulletin are processed in the newsletter service provided by Liana Technologies.
We use the survey and reporting solution service provided by Webropol Ltd to organise events and customer surveys.
Retention of data
With regard to data retention, we comply with the Tax Administration's information management plan.
Personal data associated with trainings, surveys and events will be deleted or anonymised without delay after the training has been held and the materials and feedback survey related to it have been delivered to the participants. After anonymisation, the Incomes Register Unit can access only information needed in the development of operations, such as advance questions related to the event. Anonymisation means that personal data is processed in such a way that a person can no longer be identified on the basis of the data.
We regularly check that the data on those participating in stakeholder cooperation and stakeholder testing is up-to-date.
Email addresses of the subscribers to the newsletter and system information bulletin will be retained until the subscription is cancelled. The personal data of a subscriber who cancels their subscription will be destroyed without delay.
Your data protection rights regarding the processing of personal data
As a controller, the Income Register Unit is responsible for enforcing your data protection rights based on the EU's General Data Protection Regulation. You can make a request regarding your data protection rights in our e-service or in your own words with the contact form or by posting your request to us with the address below:
You can find more information about your data protection rights on the website of the Office of the Data Protection Ombudsman. If you need help in exercising your rights, you can contact our customer service.
Right to view personal data
You have the right to know if we are processing your personal data. You are also entitled to receive a copy of your personal data that we process.
You can submit us a request to view your personal data with the paperform or contact form below.
If you think the data we are processing about you is incorrect, if the data is processed against the law or if you have objected to the processing of your data, you can request us to restrict the processing of your personal data.
When the processing of your personal data is not based on our statutory obligation, you have the right to oppose the processing. You can oppose at any time on grounds of your special personal circumstances. In such a case, we may no longer process your personal data, except if there is a justified reason of great importance that supersedes your interests, rights and freedoms, or if the processing is necessary for the purpose of preparing, presenting or defending a legal claim.
Right to removal of data
You can cancel the newsletter or the system information bulletin at any time. Each newsletter and system information bulletin tells the subscriber that they can cancel the subscription via the Unsubscribe link. When you cancel the subscription, your personal data will be destroyed without delay.
Right to file a notification with the supervisory authority
You have the right to file a notification with the Data Protection Ombudsman regarding the processing of your personal data. Further information and instructions on how to file a notification are available on the website of the Office of the Data Protection Ombudsman.
