State Treasury | 10.10.2023 |
---|---|
Privacy statement of the financial information service of the municipalities and wellbeing services counties |
1. Controller |
Name
State Treasury AddressSornäisten rantatie 13, PO Box 14, FI-00054 State Treasury Other contact information (e.g. telephone during office hours, email address)tel. 0295 50 2000, kirjaamo(at)valtiokonttori.fi |
2. Contact person in matters concerning the register |
Name
Anne Melanen, tel. 0295 50 2412 anne.melanen(at)valtiokonttori.fi AddressSornäisten rantatie 13, PL14, 00054 State Treasury Other contact information (e.g. telephone during office hours, email address) |
3. Data protection Officer |
Data protection officer: Heikki Kangas, tel. 0295 50 2156, tietosuojavastaava(at)valtiokonttori.fi |
4. Purpose and legal basis of the processing of personal data |
We process the financial data of municipalities and wellbeing services counties as the authority responsible for maintaining the financial data repository of municipalities and wellbeing services counties and as the data controller. We store in our customer register the name and email data of the customer's contact persons for purposes related to the management and development of the customer relationship. According to Article 6(1)(c) of the General Data Protection Regulation, the lawfulness of processing is based on the controller's statutory obligation laid down in the State Treasury Act (section 2b of 15.2.1991/305) Financial data (euros) are reported to the financial information service of municipalities and wellbeing services counties, but data protection issues have been considered when combining them with other data, for example in the reporting and analysis produced to support decision-making. |
5. Data content of the register |
For the user of the service:
As regards the content of the reporting:
|
6. Regular data sources |
The data in the client register are obtained from the registered client in connection with registration. |
7. Regular disclosure of information |
The financial data transmission service both the approval service and the register service of the financial information service of the municipalities and wellbeing services counties exchange user data in connection with financial data transfers. Personal data may be used for automated financial reporting communications, information, instructions or other compilation, transmission, uniformity or other official activities of municipalities' and wellbeing services counties’ financial data. The State Treasury, as the controller, manages the data and considers releasing the data on a case-by-case basis. |
8. Regular disclosure and transfer of data outside the EU or EEA |
As a rule, the State Treasury does not transfer personal data outside the EEA. However, our processor (Microsoft Ireland Operations Ltd.) can transfer the data it processes to its sub-processor (Microsoft Corp.). Thus, a limited amount of personal data can be transferred to the United States in data transfers between the processor and the sub-processor. The transfer criterion is the standard contractual clauses adopted by the Commission. |
9. Principles for registry protection |
Our technical environment has been strengthened by technical safeguards, such as firewalls and pseudonymisation of information. The data are protected against inappropriate viewing, alteration and destruction. Security is based on access control, personal user IDs and access restriction. Access rights are limited according to the tasks of the staff. |
10. Data retention period/criteria for determining retention period |
As a rule, the purpose of the data in the economic data repository requires that the data is retained for the time being. For specific categories of personal data, the need for data retention shall be assessed every five years. |
11. Information on automated decision-making (e.g. profiling) and information on the logic of processing and its impact on the data subject |
The information is not used for automated decision-making, including profiling. |
12. Right of inspection |
The data subject has the right to check his or her data in the register. The request shall be addressed to the Registry. If less than one year has elapsed since the exercise of the right of access by the data subject, the controller may charge a fee based on administrative costs for the provision of information. |
13. Rectification of information |
The data subject has the right to request rectification of erroneous data concerning him or her in the register. The request shall be addressed to the Registry. |
14. Right to object to the processing of data |
The State Treasury processes personal data for the fulfilment of a statutory duty and the data subject has no right to object to the processing of the data. |
15. Right to restriction of processing |
The data subject has the right to restrict the processing of his or her personal data as provided in Article 18 of the GDPR. |
16. Right to erasure |
The State Treasury processes the reported financial data for the fulfilment of a statutory duty and the data subject does not have the right to have his or her data erased. |
17. Right to lodge a complaint |
The data subject has the right to lodge a complaint with the supervisory authority if he or she considers that his or her rights have been violated by the controller. |
18. Other possible rights | |
19. Use of cookies |
We use the Cookie function, or cookies, on our website. The sole purpose of cookies is to make it technically easier to use the service. |
Sörnäisten rantatie 13, Helsinki-PL 14, FI-00054 STATE TREASURY Tel. 0295 50 2000, fax 0295 50 3333, www.valtiokonttori.fi |