1. Controller
Name: State Treasury
Address: Sörnäisten rantatie 13, P.O. Box 14, FI-00054 State Treasury
Other contact details: tel. 0295 50 2000, registry@statetreasury.fi
2. Contact person for filing system-related matters
Name: Ruut Kastepohja-Seppälä
Address: Services for citizens, P.O. Box 14, FI-00054 State Treasury
Other contact details: registry@statetreasury.fi
3. Data protection officer
4. Legal basis and purpose for processing of personal data
The State Treasury may grant a liable party a full or partial exemption from a payment or compensation due to the government. The data in the register is used to issue decisions on exemption applications and compile decision statistics. These statistics do not contain information that can be used to identify individual applicants.
The processing is based on the Act (529/1980) and Decree (530/1980) on Relief from Payments.
5. Information content of the register
The applicant’s name, address, e-mail address, telephone number and personal identity code, the collecting authority, the applied and granted exemption amount. All documents related to the processing of the matter, including the request for additional clarification, the memorandum prepared based on the application and the decision on the matter, are stored in the register.
The memorandum contains information on the compensation liability/payment to which the application pertains, the applicant’s earnings, expenditures, finances, housing costs, notable health care costs, general health, familial relationships, employment/unemployment and possible earlier exemption decision. The decision lists the payment or compensation obligation, the collecting authority and the State Treasury’s resolution and justifications.
6. Normal data sources
The information is obtained from the application and the appended documents as well as the creditor’s register. Information is also received from the Population Information System, Suomen Asiakastieto’s system and Kauppalehti’s information service.
The statistics contain the quantities and monetary amounts of annually rejected applications as well as information on full or partial exemptions.
7. Regular disclosures of data
Information is disclosed to interested parties. The exemption decision statistics are published on the State Treasury’s website.
8. Regular disclosures of personal data or transfer of data outside the EU or the EEA
Data is not disclosed or transferred to recipients outside the EU or EEA.
9. Principles for filing system protection
The register contains confidential information. Chapter 6, Section 24(23) of the Act on the Openness of Government Activities (621/1999) specifies the identity of the person applying for exemption from charges as confidential information.
Only individuals authorised by the controller, who are under obligation of secrecy, have access to the data processed within the information system. Access rights are kept up-to-date by regular inspection, and unnecessary access rights are removed. The information network and terminals containing the register are protected using technical measures. The application servers are located in the operating service provider’s protected facilities. The actions of the data system users and the authorisation of data access are monitored by means of collecting log data.
Manual data content is stored in a locked room which is only accessible by individuals who have been authorised by the controller and are bound by an obligation of secrecy. Unnecessary manual materials are destroyed in a data secure manner.
10. Data storage period / criteria for determining storage period
The exemption decision and related memorandum, along with any appeal documents, are retained permanently; other documents are stored for 20 years from the resolution of the matter.
11. Information about automatic decision-making and information about the logic of data processing and its impacts on the data subject
The processing of the data does not entail automated decision-making.
12. Right of access
The data subject has the right to access their data in the register. Requests should be sent to the registry office.
In the event that the data subject has exercised their right of access less than one year ago, the controller may collect a fee based on the administrative costs caused by the provision of the data.
13. Rectification of data
Data subjects are entitled to request corrections to any incorrect information the register may contain on them. Requests should be sent to the registry office.
14. The right to object to processing of personal data
The State Treasury processes personal data in order to carry out its statutory duties, and the data subject does not have the right to object to the processing of their personal data.
15. Right to restriction of processing
The data subject has the right to restrict the processing of their personal data as specified in Article 18 of the GDPR.
16. Right to erasure
The State Treasury processes personal data in order to carry out its statutory duties, and the data subject does not have the right to have their personal data removed.
17. Right to lodge a complaint
The data subject has the right to lodge a complaint with a supervisory authority if the data subject believes that their rights have been infringed by the actions of the controller.
18. Other rights
Personal data is neither used nor disclosed for the purpose of direct advertising, distance marketing or other direct marketing, market and opinion research, registers of individuals, or genealogies.
19. Use of cookies
The data system does not use cookies.