State Treasury 10.10.2023

Privacy statement of the financial information service of the municipalities and wellbeing services counties

1. Controller Name

State Treasury

Address

Sornäisten rantatie 13, PO Box 14, FI-00054 State Treasury

Other contact information (e.g. telephone during office hours, email address)

tel. 0295 50 2000, kirjaamo(at)valtiokonttori.fi

2. Contact person in matters concerning the register Name

Anne Melanen, tel. 0295 50 2412 anne.melanen(at)valtiokonttori.fi

Address

Sornäisten rantatie 13, PL14, 00054 State Treasury

Other contact information (e.g. telephone during office hours, email address)

3. Data protection Officer

Data protection officer: Heikki Kangas, tel. 0295 50 2156, tietosuojavastaava(at)valtiokonttori.fi

4. Purpose and legal basis of the processing of personal data

We process the financial data of municipalities and wellbeing services counties as the authority responsible for maintaining the financial data repository of municipalities and wellbeing services counties and as the data controller.

We store in our customer register the name and email data of the customer's contact persons for purposes related to the management and development of the customer relationship. According to Article 6(1)(c) of the General Data Protection Regulation, the lawfulness of processing is based on the controller's statutory obligation laid down in the State Treasury Act (section 2b of 15.2.1991/305)

Financial data (euros) are reported to the financial information service of municipalities and wellbeing services counties, but data protection issues have been considered when combining them with other data, for example in the reporting and analysis produced to support decision-making.

5. Data content of the register

For the user of the service:

  • Email address
  • name of the person
  • organization, Business ID
  • access credentials (viewer/approver/commentator)

As regards the content of the reporting:

  • The costs of municipalities and wellbeing services counties divided into service categories are reported to the State Treasury's financial information service of municipalities and wellbeing services counties. Sometimes the service category may be subject to costs of less than five persons. In this case, the cost data for the category in question are considered personal data.
6. Regular data sources

The data in the client register are obtained from the registered client in connection with registration.

7. Regular disclosure of information

The financial data transmission service both the approval service and the register service of the financial information service of the municipalities and wellbeing services counties exchange user data in connection with financial data transfers. Personal data may be used for automated financial reporting communications, information, instructions or other compilation, transmission, uniformity or other official activities of municipalities' and wellbeing services counties’ financial data. The State Treasury, as the controller, manages the data and considers releasing the data on a case-by-case basis.

8. Regular disclosure and transfer of data outside the EU or EEA

As a rule, the State Treasury does not transfer personal data outside the EEA. However, our processor (Microsoft Ireland Operations Ltd.) can transfer the data it processes to its sub-processor (Microsoft Corp.). Thus, a limited amount of personal data can be transferred to the United States in data transfers between the processor and the sub-processor.

The transfer criterion is the standard contractual clauses adopted by the Commission.

9. Principles for registry protection

Our technical environment has been strengthened by technical safeguards, such as firewalls and pseudonymisation of information. The data are protected against inappropriate viewing, alteration and destruction. Security is based on access control, personal user IDs and access restriction. Access rights are limited according to the tasks of the staff.

10. Data retention period/criteria for determining retention period

As a rule, the purpose of the data in the economic data repository requires that the data is retained for the time being. For specific categories of personal data, the need for data retention shall be assessed every five years.

11. Information on automated decision-making (e.g. profiling) and information on the logic of processing and its impact on the data subject

The information is not used for automated decision-making, including profiling.

12. Right of inspection

The data subject has the right to check his or her data in the register. The request shall be addressed to the Registry.

If less than one year has elapsed since the exercise of the right of access by the data subject, the controller may charge a fee based on administrative costs for the provision of information.

13. Rectification of information

The data subject has the right to request rectification of erroneous data concerning him or her in the register. The request shall be addressed to the Registry.

14. Right to object to the processing of data

The State Treasury processes personal data for the fulfilment of a statutory duty and the data subject has no right to object to the processing of the data.

15. Right to restriction of processing

The data subject has the right to restrict the processing of his or her personal data as provided in Article 18 of the GDPR.

16. Right to erasure

The State Treasury processes the reported financial data for the fulfilment of a statutory duty and the data subject does not have the right to have his or her data erased.

17. Right to lodge a complaint

The data subject has the right to lodge a complaint with the supervisory authority if he or she considers that his or her rights have been violated by the controller.

18. Other possible rights

19. Use of cookies

We use the Cookie function, or cookies, on our website. The sole purpose of cookies is to make it technically easier to use the service.

Sörnäisten rantatie 13, Helsinki-PL 14, FI-00054 STATE TREASURY

Tel. 0295 50 2000, fax 0295 50 3333, www.valtiokonttori.fi