Privacy statement, statetreasury.fi

Drafted 13.4.2018

1. Controller

Name: State Treasury

Address: Sörnäisten rantatie 13, PO Box 14, FI-00054 State Treasury

Other contact details: tel. +358 (0)295 50 2000, kirjaamo@valtiokonttori.fi

2. Contact person for filing system-related matters

Name: Sami Moksunen, Administrative Affairs and Development, Communications Unit

Address: Sörnäisten rantatie 13, PO Box 14, FI-00054 State Treasury

Other contact details: +358 (0)295 50 3206, sami.moksunen(at)valtiokonttori.fi

3. Data protection officer

Eija Louhelainen, eija.louhelainen(at)valtiokonttori.fi

4. Legal basis and purpose for processing of personal data

  1. Responding to customer feedback (feedback form): The contact details provided by the customer are used only for responding to feedback. The giving of contact details as voluntary. The customer gives their consent by writing their contact details on the feedback form.
  2. Delivering subscriptions for published materials (the State Treasury’s different publications, press releases and newsletters, and order forms): The contact details provided by the customer are used only for delivering the subscription. The State Treasury maintains a separate customer register in eMailer for the purpose of distributing publications (not linked to webpages). The customer gives their consent by writing their contact details on the subscription form.
  3. Lists of specialist groups that are part of webpage content (HR and administrative coordinators for different agencies as well as Kaiku developers): To support cooperation, lists of agency specialists are published on the webpages (the controller for this filing system is the Personnel Management Support unit of the Financial and Personnel Administration division). The lists are connected to the official work of the specialists in question. Officials have the right, nevertheless, to refuse to have their name published in the lists mentioned above.
  4. Visitor monitoring: To support webpage development, we use cookies to collect statistical data about webpage use. The user cannot be identified, however, based on the data collected. The Google Analytics visitor monitoring system is in use.

5. Data content of the filing system

  1. Feedback: data provided by feedback giver (not compulsory), generally email address and name, possibly telephone number. The State Treasury responds to the feedback using the data.
     
  2. Subscriptions / subscription cancellations for published materials (* = required information):
    A. Newsletters: forename*, surname*, email address*, organisation*, newsletters requested*.
    B. Finance and HR administration publications: name*, job title, organisation, email address*, telephone number, address, postal address and office, and subscribed publications / cancelled subscriptions.
    C. Publications on state funding activities: name, email address, business, postal address and office, country, and subscribed publications / cancelled subscriptions.
     
  3. Lists of specialist groups that are part of webpage content:
    A. HR coordinators: agencies according to administrative sector, name, email address
    B. Administrative coordinators: ministry, name entitled, email address
    C. Kaiku developers: name, organisation
     
  4. Visitor monitoring (Google Analytics): User IP address without the identifying final section (=anonymous IP), meaning that Google Analytics uses only part of the IP address instead of the full address. The user is able to select the ‘do not track’ setting on their browser, in which case Google Analytics does not even collect the above data. Using the IP address, data is collected – for the purpose of visitor monitoring – on the actions carried out by the user on the webpages. This data includes, for example, navigation within the pages, clicking on links, length of visit and information about where the visitor connected to the service from and where they transferred to afterwards. For more information on IP anonymization, see https://support.google.com/analytics/answer/2905384/

6. Normal data sources

Case 1 and 2: The data is collected from the customer themselves

Case 3: The data is collected in cooperation with the relevant agencies and individuals and published with their consent as part of the official duties of the persons involved.

Case 4: The data is collected using cookies.

7. Regular disclosures of data

Case 1 and 2: The data is not disclosed to others.

Case 3: The data is published as part of public webpage content.

Case 4: The data is not disclosed to others.

8. Regular disclosures of personal data or transfer of data to outside the EU or EEA area

The data is not disclosed to others.

9. Principles for filing system protection

The filing system does not contain confidential material.

Only individuals authorised by the controller have access to the data processed within the information system. Access rights are kept up-to-date by regular inspection, and unnecessary access rights are removed. The information network and terminals containing the filing system are protected using technical measures.

10. Data storage period / criteria for determining storage period

Case 1 (feedback): The data is stored only for the period required for processing the customer’s affairs. It is not saved into the filing system.

Case 2 (subscriptions): The data is saved into the State Treasury’s customer register for publication subscriptions in eMailer, and it is stored there until the customer cancels their subscription.

Case 3 (lists of specialists): The data is stored for as long as the matter in question is relevant and of use to State Treasury customers.

Case 4 (visitor monitoring): The data is saved into the Google Analytics visitor monitoring service, in which the data is stored for 26 months. After the storage periof has expired, the data will be deleted automatically on a monthly basis.

11. Information about automatic decision-making (e.g. profiling) and information about the logic of data processing and its impacts on the data subject

No automatic decisions or profiling are carried out using the data.

12. Right of access

The data subject has the right to access his or her data in the register. Requests should be sent to the registry office.

13. Rectification of data

The data subject has the right to access his or her data in the register. Requests should be sent to the registry office.

14. The right to object to processing of personal data

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her, such as profiling.

15. Right to restriction of processing

The data subject has the right to restrict the processing of his or her personal data as specified in Article 18 of the GDPR.

16. Right to erasure

The data subject has the right to request that the controller erase his or her personal data from the filing system.

17. Right to lodge a complaint

The data subject has the right to lodge a complaint with a supervisory authority if the data subject believes that his or her rights have been infringed by the actions of the controller.

18. Other rights

Personal data is neither used nor disclosed for the purpose of direct advertising, distance marketing or other directing marketing, market and opinion research, registers of individuals, or genealogies.

19. Use of cookies

We use cookies on our webpages. The only purpose of the cookies is to technically facilitate the use of the service. A cookie is a small text file which is sent to the user’s computer and stored there, and which enables the website administrator to recognise regular visitors to the website and to facilitate their use of the webpages.

Cookies do not cause damage to a user’s computer or files. If a user visiting our webpages does not want us to obtain the information mentioned above through the use of cookies, most web browsers have functions for disabling cookies. On Internet Explorer, for example, this can be done by selecting “Tools”, then “Internet Options”, and then “Privacy”.

It is nevertheless good to take note that the cookies may be needed for the correct functioning of some of the services we offer and some of the webpages available.

For more information on cookies in Google Analytics, see https://support.google.com/analytics/answer/6004245?hl=fi

Target group: All

Published 2018-05-24 at  12:20 , updated 2018-09-06 at  10:06 Suomeksi   På svenska   In English

Top of the page

Give feedback

Feedback on


Contact details