Your data protection rights regarding the processing of personal data

As a controller, the Income Register Unit is responsible for enforcing your data protection rights based on the EU's General Data Protection Regulation. You can make a free-form written request regarding your data protection rights and send it to us to the address below:

POSITIVE CREDIT REGISTER
P.O. BOX 2
FI-00055 Incomes Register

You can find more information about your data protection rights on the website of the Office of the Data Protection Ombudsman.

If you need help in exercising your rights, you can contact our customer service.

Personal data is confidential

The data stored in the Positive credit register is confidential, with the exception of the name and the Finnish Business ID or foreign business ID of a lender that is required to submit reports. These the Incomes Register Unit can publish on its website. Data can be disclosed only for the purposes laid down in the Act on the Positive Credit Register.

As a party concerned, you always have the right to receive information about documents that concern you.

The public availability of loan and income data other than the data stored in the Positive credit register is determined by the Act on the Openness of Government Activities (621/1999, Act on Openness): As a rule, authorities' documents are public. Everyone has the right to receive information about a public authority document in accordance with the Openness Act.

Right to receive information about the processing of personal data

You have the right to know why and on what grounds we are processing your personal data. On this website, we aim to give you a comprehensive picture of the processing of personal data in the operations of the Positive credit register. If you need further information, you can contact our customer service.

Right to view personal data

You have the right to know if we are processing your personal data. You are also entitled to receive a copy of your personal data that we process.

You can submit us a request to view your personal data with the paperform or contact form below.

Request to view personal data

Contact form

You can access the Positive credit register’s data through the e-service for private individuals. There you will see the latest loan data reported by lenders, and the credit register extracts requested about you. To use the e-service, you will need your online banking codes, a mobile certificate or a certificate card.

Right to rectify data

You have the right to request us to rectify your inaccurate or incorrect personal data without any undue delay. You can submit a free-form request to us in writing.

The loan data in the Positive credit register is as reported by lenders, and the income data has been received from the Incomes Register. You can see the most recent data reported by a lender in the Positive credit register’s e-service. The credit register extract is always generated based on the most recent data.

If you detect an error in your loan data, it is important to correct it, because lenders use the register’s data when assessing your creditworthiness. To correct the error, you can contact the Incomes Register Unit or the lender who submitted the erroneous data. Usually the quickest way to settle the matter is to contact the lender directly. When you contact us, we will investigate the matter with the lender and, in the first place, ask the lender to correct the error by reporting the correct data to the register.

Right to restriction of processing

If you think the data we are processing about you is incorrect, if the data is processed against the law or if you have opposed the processing of your data, you can request us to restrict the processing of your personal data. You can submit a free-form request to us in writing.

The Act on the Positive Credit Register separately prescribes that we can disclose data to authorities, lenders and other parties having the right of access to data even in situations where the data subject has denied the accuracy of their data and required that the processing should be restricted. In such a case, the credit register extract delivered to the lender will show that you have requested the restriction of processing. This will be indicated on the credit register extract until the matter is settled. The lender or other party using the credit register extract can thus take into account that the accuracy of the data has been questioned.

Right to oppose data processing

We have a statutory obligation to process the Positive credit register's data. Because of this, you do not usually have the right to oppose the processing of your data, i.e. to request that we should not process it at all.

When the processing of your personal data is not based on our statutory obligation, you have the right to oppose the processing. You can oppose at any time on grounds of your special personal circumstances. In such a case, we may no longer process your personal data, except if there is a justified reason of great importance that supersedes your interests, rights and freedoms, or if the processing is necessary for the purpose of preparing, presenting or defending a legal claim.

Data whose processing you can oppose

You can oppose the processing of the following data because the processing is not based on our statutory obligation :

• personal data collected in connection with telephone service
• cookies collected in connection with e-services
• personal data collected on contact, observation and feedback forms
• personal data collected in connection with stakeholder cooperation and stakeholder testing
• personal data on subscribers to the newsletter and system information bulletin
• notifications of requested credit register extracts sent through Suomi.fi Messages.

You can submit a free-form request to us in writing or by phoning our customer service. If you do not want to receive notifications through Suomi.fi Messages, you can also disable them in the Positive credit register’s e-service.

Right to removal of data

The Positive credit register has the obligation to collect the information prescribed by law and retain it for the retention period prescribed by law. Because of this, your data cannot be removed from the register even if you are requesting it to be deleted.

If the processing of data is based on your consent, you have the right to ask us to delete it at any time.

The processing of personal data on subscribers to the newsletter and system information bulletin is based on consent. You can cancel the newsletter or system information bulletin at any time, after which the data will be deleted immediately.

Automated decision-making and profiling

We do not make decisions based on automated decision-making, and we do not make profiles based on the personal data we process.

Right to file a notification with the supervisory authority

You have the right to file a notification with the Data Protection Ombudsman regarding the processing of your personal data. Further information and instructions on how to file a notification are available on the website of the Office of the Data Protection Ombudsman.