State Treasury

Sornäisten rantatie 13, PO Box 14, FI-00054 State Treasury

tel. 0295 50 2000, kirjaamo(at)valtiokonttori.fi

Anne Melanen, tel. 0295 50 2412 anne.melanen(at)valtiokonttori.fi

Sornäisten rantatie 13, PL14, 00054 State Treasury

Data protection officer: Heikki Kangas, tel. 0295 50 2156, tietosuojavastaava(at)valtiokonttori.fi

We process the financial data of municipalities and wellbeing services counties as the authority responsible for maintaining the financial data repository of municipalities and wellbeing services counties and as the data controller.

We store in our customer register the name and email data of the customer's contact persons for purposes related to the management and development of the customer relationship. According to Article 6(1)(c) of the General Data Protection Regulation, the lawfulness of processing is based on the controller's statutory obligation laid down in the State Treasury Act (section 2b of 15.2.1991/305)

Financial data (euros) are reported to the financial information service of municipalities and wellbeing services counties, but data protection issues have been considered when combining them with other data, for example in the reporting and analysis produced to support decision-making.

For the user of the service:

• Email address
• name of the person
• organization, Business ID
• access credentials (viewer/approver/commentator)

As regards the content of the reporting:

• The costs of municipalities and wellbeing services counties divided into service categories are reported to the State Treasury's financial information service of municipalities and wellbeing services counties. Sometimes the service category may be subject to costs of less than five persons. In this case, the cost data for the category in question are considered personal data.

The data in the client register are obtained from the registered client in connection with registration.

The financial data transmission service both the approval service and the register service of the financial information service of the municipalities and wellbeing services counties exchange user data in connection with financial data transfers. Personal data may be used for automated financial reporting communications, information, instructions or other compilation, transmission, uniformity or other official activities of municipalities' and wellbeing services counties’ financial data. The State Treasury, as the controller, manages the data and considers releasing the data on a case-by-case basis.

As a rule, the State Treasury does not transfer personal data outside the EEA. However, our processor (Microsoft Ireland Operations Ltd.) can transfer the data it processes to its sub-processor (Microsoft Corp.). Thus, a limited amount of personal data can be transferred to the United States in data transfers between the processor and the sub-processor.

The transfer criterion is the standard contractual clauses adopted by the Commission.

Our technical environment has been strengthened by technical safeguards, such as firewalls and pseudonymisation of information. The data are protected against inappropriate viewing, alteration and destruction. Security is based on access control, personal user IDs and access restriction. Access rights are limited according to the tasks of the staff.

As a rule, the purpose of the data in the economic data repository requires that the data is retained for the time being. For specific categories of personal data, the need for data retention shall be assessed every five years.

The information is not used for automated decision-making, including profiling.

The data subject has the right to check his or her data in the register. The request shall be addressed to the Registry.

If less than one year has elapsed since the exercise of the right of access by the data subject, the controller may charge a fee based on administrative costs for the provision of information.

The data subject has the right to request rectification of erroneous data concerning him or her in the register. The request shall be addressed to the Registry.

The State Treasury processes personal data for the fulfilment of a statutory duty and the data subject has no right to object to the processing of the data.

The data subject has the right to restrict the processing of his or her personal data as provided in Article 18 of the GDPR.

The State Treasury processes the reported financial data for the fulfilment of a statutory duty and the data subject does not have the right to have his or her data erased.

The data subject has the right to lodge a complaint with the supervisory authority if he or she considers that his or her rights have been violated by the controller.

We use the Cookie function, or cookies, on our website. The sole purpose of cookies is to make it technically easier to use the service.

Sörnäisten rantatie 13, Helsinki-PL 14, FI-00054 STATE TREASURY

Tel. 0295 50 2000, fax 0295 50 3333, www.valtiokonttori.fi