Privacy statement for the payment service

Controller

Finnish Patent and Registration Office (PRH)
Mailing address: Finnish Patent and Registration Office, FI-00091 PRH, Finland
Street address: Sörnäisten rantatie 13 C, Helsinki, Finland
Tel. +358 29 509 5000

Representative of controller

Lasse Koivisto
lasse.koivisto(at)prh.fi
Tel. +358 29 509 5227

Data protection officer

tietosuojavastaava(at)prh.fi
Tel. +358 50 413 6500

Purpose of and legal basis for processing personal data

The data processed in the register for the payment service consists of statutory patent payments made by persons who are authorised by the PRH's client companies.

The processing is necessary to comply with the controller’s legal obligation.

Personal data and categories of data subjects in the register

Client details in the payment service:

• Name and Finnish Business ID of the client company
• VAT number of the client company
• Deposit account agreement of the client company
• Deposit account number of the client company
• Deposit account balance of the client company
• Street and postal addresses, email, country, region, phone and fax numbers of the client company
• Name of the client’s representative or the payer
• Non-public patent information of the client company or the person
• Payment history in the payment service

Sources of information

The sources of information include the PRH’s register systems, the Suomi.fi identification and authorisation services provided by the Digital and Population Data Services Agency, Order Management as well as the systems for e-commerce and other systems relating to financial administration. Clients’ payment details are transferred to a financial administration system (Kieku). Payment details are transferred to their own deposit account group in Kieku. The details are also transferred to the Handi system in order to archive the payments.

Recipients and categories of recipients of personal data

The data can only be disclosed within the limits that the legislation in effect will oblige and permit. The data will be disclosed to the National Audit Office of Finland as well as the bank, the police, execution authorities, and the Finnish Tax Administration.

Transfer of personal data to countries outside the EU or the EEA or to international organisations

No data are transferred to countries outside the EU or the EEA or to international organisations.

Storage periods of personal data

The storage periods of personal and business data are based on the legislation, which specifies the storage periods of accounting material.

Profiling and automated decision-making

The registered data are not used for profiling, and no automated decision-making is performed on the data.

Right of access to personal data

The data subject has the right to check what personal data about them have been entered into the register, or to find out that there are no such register entries. The data subject can ask the controller for access to their personal data. Read our instructions on how to request access to data.

Right to rectification of data

The data subject has the right to demand that the controller rectify without undue delay any inaccurate or incorrect personal data concerning them. Read our instructions on rectification of data.

Right to restriction of processing

The data subject has the right to demand that the controller restrict the processing of data, if the data subject contests the accuracy of the personal data. The intention is to restrict the processing while the controller verifies the accuracy of the personal data.

Right to lodge complaint with supervisory authority

The data subject has the right to lodge a complaint with the supervisory authority (the Data Protection Ombudsman).