Privacy statement

Controller:

Finnish Tax Administration

P.O. Box 325, FI-00052 VERO

Tel. +358 29 512 000 (switchboard)

Street address:

Registry

Vääksyntie 4, Helsinki

Data Protection Officer at the Finnish Tax Administration:

Noora Kontro

Taito von Konow

P.O. Box 325, FI-00052 VERO

Tel. +358 29 512 000 (switchboard)

Purpose of use of the register, and grounds for collecting and processing data 

Personal data is processed for purposes of website visitor monitoring. When website visitors’ IP addresses and cookies necessary for the operation of the service can be regarded as personal data, the reason for their processing is to attend to information security and collect statistical data. For third parties’ cookies, separate consent is requested.

The legal basis for the processing of personal data is consent under Article 6, section 1 (a) of the EU General Data Protection Regulation (documented, freely given, specific, informed and unambiguous). You can cancel the consent in the settings, which you can find by selecting the Settings icon at bottom left of the page.

IP addresses and cookies necessary for the operation of the service are processed by virtue of Article 6, section 6 (e) of the General Data Protection Regulation and § 4, subsection 2 of the Finnish Data Protection Act (1050/2018).

Data collected in the register of users: 

The following information can be stored in the register:

– user’s anonymised IP address

– town and country

– time of visit

– pages visited

– browser and browser version

– actions on the website (clicks)

– website through which the user entered the Verokampus site

– a unique ID assigned to the visitor.

When website visitors’ IP addresses and cookies necessary for the operation of the service can be regarded as personal data, they are processed based on justified benefit, for example to attend to information security and collect statistical data on visitors. For third parties’ cookies, separate consent is requested.

Data storage time:

The data is stored for 13 months.

Regular sources of data: 

The website makes use of the Matamo Analytics service.

Processors

G-Works Oy (website administrator)

Regular disclosure and transfer of data outside the EU or the European Economic Area: 

Data is not disclosed to third parties on a regular basis. Data is not disclosed outside the EU or the European Economic Area.

Use of cookies:

This website uses cookies. Cookies are small text files that the website stores on the user’s computer when the user visits the website.

Cookies make it possible to track and identify users as they navigate pages on the website. Cookies show, for example, the page through which the user entered the website and how the user navigated. This information is used to improve the website and make it easier to use.

Without cookies it would be significantly harder to track individual users and sessions.

Cookies are used to collect the following data:

  • user’s anonymised IP address
  • town and country
  • time of visit
  • pages visited
  • browser and browser version
  • actions on the website (clicks)
  • website through which the user entered the Verokampus site
  • an anonymous unique ID assigned to the visitor.

The data collected with the help of cookies is not used to identify individual visitors. You can disable cookies in the browser settings if you want. You will find the settings by selecting the settings icon at bottom left of the page. Please note, however, that the website may contain functions that do not work if the cookies are disabled.

Protection of the register:

The register is handled with care, and the data processed in information systems is protected appropriately. When the register’s data is stored on Internet servers, the physical and digital information security of the hardware is appropriately ensured. The controller sees that stored data, access rights to servers, and other data critical to the protection of personal data are processed in confidentiality and only by employees whose work duties include such processing.

Automated decision-making:

The data subject’s data is not used in automated decision-making.

Rights of the data subject: 

Each person in the register is entitled to check what information about them the register contains. They are also entitled to request that any errors in their data should be corrected and additions made as necessary. If a person wants to check their information recorded in the register and ask for corrections to be made, they must submit a written request to the controller. The controller can request the person to identify themself if necessary. The controller responds to the customer within the period laid down in the EU General Data Protection Regulation (usually within a month).

Further information and instructions and contact information are available at Data security and the processing of personal data at the Finnish Tax Administration (vero.fi).