This privacy statement describes how the Finnish Patent and Registration Office (PRH), the State Treasury, the Finnish Tax Administration, the Digital and Population Data Services Agency (DVV) and Statistics Finland process personal data of the Finnish Real-Time Economy’s stakeholder representatives.
The Finnish Real-Time Economy refers to a system in which financial data in a structured digital format are transferred digitally between the Real-Time Economy actors (companies, service providers, authorities). The Finnish Real-Time Economy follows on the development work carried out in the Real-Time Economy (YD) project in 2021–2024 and promotes companies’ digital economy.
Personal data are processed as part of co-creation between the government agencies related to the Finnish Real-Time Economy.
1. Controllers and contact persons
Controller
Finnish Patent and Registration Office (PRH)
Mailing address: Finnish Patent and Registration Office, FI-00091 PRH, Finland
Street address: Sörnäisten rantatie 13 C, Helsinki, Finland
Telephone (switchboard) +358 29 509 5000
Controller’s representative
Minna Rintala
minna.rintala(at)prh.fi
+358 29 509 5000
Contact details of the other agencies:
State Treasury
Sörnäisten rantatie 13, Helsinki
P.O. Box 14, FI-00054 STATE TREASURY
+358 295 50 3000, kirjaamo(at)valtiokonttori.fi
Finnish Tax Administration
Vääksyntie 4, Helsinki,
PO Box 325, FI-00052 VERO, Finland
+358 29 512 000, verohallinto(at)vero.fi
Digital and Population Data Services Agency
Lintulahdenkuja 2 D
PO Box 123 FI- 00531 HELSINKI
+358 295 536 000, kirjaamo(at)dvv.fi
Statistics Finland
Työpajankatu 13, FI-00022 TILASTOKESKUS
+358 29 551 2564, kirjaamo(at)stat.fi
The agencies listed above are joint controllers.
2. Data Protection Officers
Finnish Patent and Registration Office
+358 29 509 5000 (switchboard)
tietosuojavastaava(at)prh.fi
State Treasury
+358 295 50 2000 (switchboard)
tietosuojavastaava(at)valtiokonttori.fi
Finnish Tax Administration
+358 29 512 000 (switchboard)
verohallinto(at)vero.fi
Digital and Population Data Services Agency
+358 2 9553 6000 (switchboard)
tietosuoja(at)dvv.fi
Statistics Finland
+358 29 551 1000 (switchboard)
tietosuoja(at)stat.fi
3. Purpose and legal basis of personal data processing
Personal data are processed for the purposes of communicating about the activities of the Finnish Real-Time Economy and organising events and various experiments related to co-creation.
Personal data are processed for the following purposes:
- sending out newsletters
- processing customer feedback
- registration for events organised by the Finnish Real-Time Economy
- organisation and conduct of co-creation (including various experiments)
- conduct of surveys
- visitor tracking on Real-Time Economy website
The legal basis for the processing of personal data depends on the intended use of the data. The processing of personal data is based on the EU General Data Protection Regulation (679/2016):
- consent referred to in Article 6(1)(a) when personal data are processed for the purpose of receiving newsletters and bulletins
- compliance with the controller’s legal obligation referred to in Article 6(1)(c) in connection with tasks related to coordinating the co-creation. PRH’s statutory task to coordinate companies’ digital financial administration network and co-creation are laid down in section 2, subsection 2 of the Act on the Finnish Patent and Registration Office (578/2013).
- performance of a task carried out in the public interest as personal data are processed for the purposes of stakeholder cooperation and communication. Personal data needs to be processed in order to reach stakeholders. The task carried out in the public interest is described in detail in section 2 of the Act on the Finnish Patent and Registration Office.
4. Personal data retention periods
The retention periods of personal data used for the communication and activities of the Finnish Real-Time Economy vary depending on the purpose of the personal data processing.
The data concerning recipients of newsletters are stored as long as the consent for receiving the letters remains in effect.
Customer feedback is retained while the matter is being processed and for three years after the processing has been concluded.
Visitor tracking data are retained for 26 months. The data are automatically deleted each month at the end of the data retention period.
The data concerning invitees and attendees at events are retained for two years.
Data concerning registrations for co-creation or experiments are retained for three years.
Data relating to surveys are stored for three years.
Data collected during the term of the Real-Time Economy project will be retained until the end of 2032 (Article 18 of the Act on the Administration, Control and Audit of the European Union Recovery and Resilience Facility (537/2022).
5. Personal data processed
The data content of the processed personal data may vary depending on the purpose for which the data are used.
The following types of personal data are processed:
- identity data (name, date of birth)
- contact details (phone number, email)
- the organisation in which the person works
- data concerning subscribed newsletters
- dietary information collected for events
- anonymised IP address, in other words the user’s IP address without identifying data
- the IP address makes it possible to collect data for visitor tracking on what users do on the website (including navigation on the website, clicking on links, duration of the visit and information on where and how the service is accessed and where the user goes when leaving the website)
As a basic premise, the Finnish Real-Time Economy does not process special categories of personal data referred to in the EU General Data Protection Regulation.
Further information about the processed IP addresses: The user can select a ‘do not track’ setting in their browser, which means that not even the IP address data mentioned above is recorded.
6. Regular data sources
The personal data to be processed are collected from the persons themselves and the organisations participating in the co-creation.
The data collected using cookies are an exception to this.
7. Disclosures of data
The data can be used between the agencies operating as joint controllers for the purposes described in this Privacy Statement.
There are no regular data disclosures to parties outside the Finnish Real-Time Economy.
8. Transfer of data to countries outside the EU or the EEA
No personal data are transferred outside the EU or the EEA or to international organisations.
9. Automated decision-making
No personal data are used for automated decision-making.
10. Rights of the data subject
Right of access
You have the right to access your personal data and check them.
Your request should primarily be addressed to the Finnish Patent and Registration Office. However, you can also contact one of the other agencies.
For the contact details of the registry offices of PRH and other agencies, see Section 1, Controllers and contact details, in this Privacy Statement.
Be prepared to prove your identity.
Right to rectification of data
You have the right to rectify inaccurate and incorrect personal data concerning you.
You should primarily address your request to PRH’s registry. However, you can also address the request to one of the other agencies.
In the request for rectification, please indicate the information to be rectified and how exactly you would like to have it corrected or supplemented. Be prepared to prove your identity.
Restrictions on the data subject’s rights
Some of the data processing by the Finnish Patent and Registration Office is based on compliance with the controller’s legal obligation. In these cases, you cannot request that your personal data be deleted or transferred to another system.
Right to deletion of data
You have the right to request that the Finnish Patent and Registration Office delete your personal data that are processed on the basis of your consent. You can send a request to this effect to the person responsible for the register. Be prepared to prove your identity.
The request should primarily be addressed to the Finnish Patent and Registration Office. However, you can also contact one of the other agencies.
11. Right to submit a complaint to the supervisory authority
If you consider that your personal data are processed unlawfully, you can submit a complaint to the Office of the Data Protection Ombudsman.
Office of the Data Protection Ombudsman
Visiting address Lintulahdenkuja 4, 00530 Helsinki
Mailing address P.O. Box 800, FI-00531 Helsinki
Email tietosuoja(at)om.fi
Switchboard +358 29 566 6700
Registry +358 29 566 6768
For more information on submitting the complaint, visit the website of the Office of the Data Protection Ombudsman at https://tietosuoja.fi/en/home.
12. Other information
Use of cookies
We use cookies on our website. The only purpose of the cookies is to make the service easier to use. A cookie is a small text file sent to and stored on the user’s computer, which enables the website administrator to identify frequent visitors to the site and use this information to make the site easier to use.
Cookies do not damage users’ computers or files. If you do not want us to use cookies to collect the above information, you can disable the cookie feature on most browsers. If you use Chrome, go to ‘Settings’ in the ‘Edit and manage’ menu and click ‘Data protection and privacy’.
Note, however, that some of the pages and services we provide may not function properly if cookies are disabled.
More information about cookies: Siteimprove’s Cookie Notice and Information. (The link opens to the English-language Siteimprove support site.)