Data controller
The Social Insurance Institution of Finland (Kela)
PL 450, 00056 KELA or Nordenskiöldinkatu 12, 00250 Helsinki
Tel. 020 634 11, administration's contact information (kela.fi)
Contact person for register-related matters
Maarit Heikkinen
Tel. 020 634 11 (switchboard)
Name of the register
Address register maintained by the supplier of Kela’s brochures, benefit guides and forms.
Purpose and basis for the processing of personal data
Personal data is processed only for the purposes of delivering brochures, benefit guides and forms. The processing of personal data is based on the fulfilment of Kela’s statutory duties (section 2 of the Act on the Social Insurance Institution).
Kela’s partner organisations (the Client or Clients) are entitled to order paper forms, brochures and benefit guides issued by Kela. Kela forwards all orders made by the Clients to the supplier of Kela’s printed products (the Supplier), which then delivers the ordered brochures, benefit guides and forms to the relevant Client.
Processing of orders concerning brochures and benefit guides
Clients order brochures and benefit guides intended for Kela’s partner organisations by filling out the online order form available on kanta.fi website. The Client enters their name, address and contact information as well as the details of their order in the online order form. This data is then transferred electronically to the Supplier.
The register’s data content
The register contains the following identifying details:
- name of the company/the Client
- address
- phone number (for deliveries).
In addition, the register contains other information concerning each order as detailed below:
- form ID or name
- the number of forms ordered by the Client
- the names of the brochures or benefit guides ordered by the Client
- the number of brochures or benefit guides ordered by the Client.
Regular sources of data
All personal data is obtained from the data subjects themselves.
Regular disclosure of data
Data is disclosed to the contract supplier on the basis of a customer’s consent. Data is disclosed only for the purpose of delivering brochures and forms, and only in connection with orders.
Transfer of data outside the EU or EEA
No data is transferred to countries outside the EU or the EEA.
Retention period for personal data
Order data is retained by Kela for a period of six (6) years in accordance with the Accounting Act.
Data security principles that apply to the register
Kela exercises due care in all of its operations and ensures a high level of data protection and data security.
All Kela employees who handle personal data sign a confidentiality agreement. The data stored in the register may be used only by authorised persons who need access to the data to perform their official duties.
Right of access
Under Article 15 of the EU General Data Protection Regulation (EU 2016/679), data subjects have the right to access personal data concerning them. This means that persons included in the register have the right to check what data concerning themselves is stored in the register.
Those who wish to check their data must submit a request to Kela.
The request can be addressed to Kela’s Registry at kirjaamo@kela.fi.
The request can also be made by phone (kela.fi), by visiting a Kela service point (kela.fi), or by sending a message in the OmaKela e-service (kela.fi).
Right of correction
Pursuant to Article 16 of the General Data Protection Regulation, data subjects have the right to request the correction of any inaccurate personal data stored in the register.
The request for correction must be submitted to Kela.
The request must specify the following:
- the specific information that is incorrect
- the reason why it is incorrect
- how it should be amended.
The request can be addressed to Kela’s Registry at kirjaamo@kela.fi.
The request can also be made by phone (kela.fi), by visiting a Kela service point (kela.fi), or by sending a message in the OmaKela e-service (kela.fi).
Right of erasure
Under Article 17 of the General Data Protection Regulation, data subjects have the right to request the erasure of their personal data.
This right does not extend to personal data that Kela needs to carry out its statutory duties.
The request to erase personal data must be made to Kela.
The request can be addressed to Kela’s Registry at kirjaamo@kela.fi.
The request can also be made by phone (kela.fi), by visiting a Kela service point (kela.fi), or by sending a message in the OmaKela e-service (kela.fi).
Right to lodge a complaint with a supervisory authority
Pursuant to Article 77 of the General Data Protection Regulation, data subjects have the right to lodge a complaint with the Data Protection Ombudsman if the data subject is of the opinion that Kela infringes the General Data Protection Regulation when processing personal data.