Data controller
The Social Insurance Institution of Finland (Kela)
PL 450, 00056 KELA or Nordenskiöldinkatu 12, 00250 Helsinki
020 634 11, www.kela.fi/administration
Contact person for register-related matters
Riitta Keskitalo
Tel. 020 634 11 (exchange)
Name of register
Kela’s brochures and forms supplier’s address register
Purpose and basis for the handling of personal data
Personal data are used only for the purpose of delivering brochures and forms. The processing of the data is part of Kela’s statutory responsibilities. Kela's partner organisations have the right to receive paper forms from Kela at no cost.
Data content of the register
The register contains the following identifying details:
- name of the company/person submitting the order
- address
- phone number (for deliveries)
Additional information included in the register:
- form ID/form name
- amount of forms ordered
- brochure name
- amount of brochures ordered
Regular sources of data
Data is received from the customers themselves.
Regular disclosure of data
Data is disclosed to the contract supplier on the basis of a customer’s consent. Data is disclosed only for the purpose of delivering brochures and forms, and only in connection with orders.
Transfer of data outside the EU or EEA
None.
Retention period for personal data
The brochures and forms supplier retains the data for the entire term of the contract, at the end of which they are deleted.
Principles of register security
Kela exercises due care in all its operations and ensures a high level of data protection and data security.
All Kela staff members who handle personal data sign a confidentiality agreement. The register data may be used only by authorised persons who need them to perform their official duties.
Right of access to data
Under Article 15 of the EU General Data Protection Regulation (EU 2016/679), data subjects have the right to access personal data concerning them. This means that persons included in the register have the right to check data concerning themselves.
A data subject who wishes to check their personal data must submit a request to Kela.
The request can be addressed to Kela's Registry. The contact information of the Registry can be found on Kela’s website (kela.fi).
Alternatively, the request can be made by phone or by visiting a Kela customer service point. It can also be transmitted in a message via Kela's OmaKela e-service at www.kela.fi/omakela (in Finnish) or www.fpa.fi/mittfpa (in Swedish).
Right of correction
According to Article 16 of the General Data Protection Regulation, the data subject has the right to request the correction of inaccurate personal data.
The request for correction must be submitted to Kela.
The request must specify the following:
- the specific information which is incorrect
- the reason why it is incorrect
- how it should be amended.
The request can be addressed to Kela's Registry. The contact information of the Registry can be found on Kela’s website (kela.fi).
Alternatively, the request can be made by phone or by visiting a Kela customer service point. It can also be transmitted in a message via Kela's OmaKela e-service at www.kela.fi/omakela (in Finnish) or www.fpa.fi/mittfpa (in Swedish).
Right of erasure
Under Article 17 of the General Data Protection Regulation, data subjects have the right to request the erasure of their personal data.
This right does not extend to personal data that Kela needs to carry out its statutory duties.
The request to erase personal data must be made to Kela.
The request can be addressed to Kela's Registry. The contact information of the Registry can be found on Kela’s website (kela.fi).
The request can also be transmitted in a message via the OmaKela e-service at www.kela.fi/omakela (in Finnish) or www.fpa.fi/mittfpa (in Swedish). Alternatively, the request can be made by phone or by visiting a Kela customer service point.
Right to file a complaint with a supervisory authority
According to Article 77 of EU Regulation 2016/679, the data subject has the right to lodge a complaint with the Data Protection Ombudsman, if the data subject considers that the processing of Kela personal data relating to him or her infringes this Regulation.