1. Controller
Name: State Treasury
Address: Sörnäisten rantatie 13, P.O. Box 14, FI-00054 State Treasury
Other contact details: tel. +358 (0)295 50 2000, registry@statetreasury.fi
2. Contact person for filing system-related matters
Name: Hanna Koskinen
Address: Sörnäisten rantatie 13, P.O. Box 450, FI-00054 State Treasury
Other contact details: registry@statetreasury.fi
3. Data protection officer
dpo@statetreasury.fi
4. Legal basis and purpose for processing of personal data
The processing is based on the Military Injuries Act (404/1948).
The purpose of the processing is to resolve compensation matters arising from the Military Injuries Act.
The data in the register is used to issue decisions and pay compensations in matters related to annuity, assistance pension funeral allowance, supplementary annuity, health care, rehabilitation and institutional care. The register data is used to compile a variety of statistics. These statistics do not contain information that can be used to identify individual applicants.
5. Information content of the register
Details stored in the information system
- Information on the compensation recipient
- name, personal identity code, address, banking details, telephone number
- beginning and end date of marriage
- date of death
- language, home municipality
- possible trustee
- application’s date of arrival, decision’s date of issue
- degree of disability as specified in the Military Injuries Act / amount of compensation granted and the period for which the compensation was provided
- possible deduction and its cause
- disability and/or illness compensable under the Military Injuries Act
- disability and/or illness rejected under the Military Injuries Act
- income and asset information required to resolve the compensation matter
- mentions of medications and other factors affecting the resolution
- information on compensations paid (sum, payment date, compensation type, time)
- rehabilitation times and places
- functional capacity class
- time and place of institutional care
- indication if the compensation is paid to a basic security committee
- recourse information
- Information on family members entitling to compensation
- name, personal identity code, date of death
and whether or not the family member is receiving compensation, as well as
- address and banking details
- possible trustee
- widow’s wedding date
- language, home municipality
- application’s date of arrival, decision’s date of issue
- amount of compensation and period for which it was granted
- information on compensations paid (sum, payment date, compensation type, time)
- income and asset information required to resolve the compensation matter
- indication if the compensation is paid to a basic security committee
- recourse information
- Other information
- name of processor/resolver as well as their position and resolution rights
- document loan date
- information on other parties involved (guardians, municipalities, hospitals, doctors, pharmacies, companies that have sent invoices, relevant organisations, etc.)
Documents to be stored:
- application documents
- medical certificates and other health-related accounts
- documents regarding the service period
- accounts regarding expenses
- accounts regarding finances
6. Normal data sources
Personal details are received from the applicant or their representative.
The Population Information System is used for information on changed circumstances with regard to
- address and home municipality,
- guardian,
- date of death,
- wedding date, spouse’s name and personal identity code, and end date of marriage,
- child’s birth, name and personal identity code.
From Kela and pension institutions
- pension information (type, amount in euros)
From tax authorities
- income and asset information
From the National Archives of Finland
- information on the period of service
The right of access to information is based on the Act on Repealing the Act on the State Accident Compensation Office (1528/1995).
7. Regular disclosures of data
If necessary, information on benefits granted is disclosed to Kela and the Tax Administration.
8. Regular disclosures of personal data or transfer of data outside the EU or the EEA
Data is not disclosed or transferred to recipients outside the EU or EEA.
9. Principles for filing system protection
The register contains confidential materials.
Only individuals authorised by the controller, who are under obligation of secrecy, have access to the data processed within the information system. Access rights are kept up-to-date by regular inspection, and unnecessary access rights are removed. The information network and terminals containing the register are protected using technical measures. The application servers are located in the operating service provider’s protected facilities. The actions of the data system users and the authorisation of data access are monitored by means of collecting log data.
Manual data content received or printed out for the register is stored in a locked room which is only accessible by individuals who have been authorised by the controller and are bound by an obligation of secrecy. Unnecessary manual materials are destroyed in a data secure manner.
10. Data storage period / criteria for determining storage period
The stipulations of the Archives Act 831/1994 are observed with regard to the storage of documents.
If the archives service has not specified the documents for permanent storage, they will be retained for 100 years.
The storage period for documents regarding compensation is calculated from the date on which the proceedings were initiated.
Data storage periods are governed by what is stated on document storage in the Workers’ Compensation Act (459/2015) and Motor Liability Insurance Act (460/2016).
11. Information about automatic decision-making and information about the logic of data processing and its impacts on the data subject
The processing of the data does not entail automated decision-making.
12. Right of access
The data subject has the right to access their data in the register. Requests should be sent to the registry office.
In the event that the data subject has exercised their right of access less than one year ago, the controller may collect a fee based on the administrative costs caused by the provision of the data.
13. Rectification of data
Data subjects are entitled to request corrections to any incorrect information the register may contain on them. Requests should be sent to the registry office.
14. The right to object to processing of personal data
The State Treasury processes personal data in order to carry out its statutory duties, and the data subject does not have the right to object to the processing of their personal data.
15. Right to restriction of processing
The data subject has the right to restrict the processing of their personal data as specified in Article 18 of the GDPR.
16. Right to erasure
The State Treasury processes personal data in order to carry out its statutory duties, and the data subject does not have the right to have their personal data removed.
17. Right to lodge a complaint
The data subject has the right to lodge a complaint with a supervisory authority if the data subject believes that their rights have been infringed by the actions of the controller.
18. Other rights
Information is not disclosed to external parties.
19. Use of cookies
The data system does not use cookies.