Privacy statement for the customer register of Virre Information Service

Controller

Finnish Patent and Registration Office (PRH)
Mailing address: Finnish Patent and Registration Office, FI-00091 PRH, Finland
Street address: Sörnäisten rantatie 13 C, Helsinki, Finland
Tel. +358 29 509 5000

Representative of controller

Ms Kirsi Lahtinen
kirsi.lahtinen(at)prh.fi
Tel. +358 29 509 5000

Data protection officer

tietosuojavastaava(at)prh.fi
Tel. +358 50 473 3129

Purpose of and legal basis for processing personal data

The purpose of processing the data is to manage customer and contractual relationships and to process payments. Furthermore, personal data may be used by the PRH for market research and analysis and for compilation of statistics.

The processing is necessary for the implementation of any contract where the data subject is a party, or in order to take measures at the request of the data subject before making the contract.

The processing of payments is necessary to comply with the controller’s legal obligation.

Personal data and categories of data subjects in the register

The following information about customers of Virre Information Service can be recorded on the register:

• identification and contact details of the customer (personal identity code, if necessary)
• identification and contact details of the customer’s contact person
• identification and contact details of persons with user names
• authentication details
• customer’s order and invoicing details
• customer status and contract details
• log information.

Sources of information

The regular sources of information include the details provided by the customer when registering with the Virre Information Service, becoming a customer, placing an order, making payments and at any time during an established customer and contractual relationship. Information may also be collected through updates by the controller. Furthermore, details may be updated from public registers.

Disclosure of personal data to third parties

As a rule, no data are disclosed to third parties.

Transfer of personal data to countries outside the EU or the EEA or to international organisations

No data is transferred to countries outside the EU or the EEA or to international organisations.

Storage periods of personal data

The data are stored for a maximum of six years after the termination of the contractual relationship, with respect to the implementation of Finnish accounting regulations and the contractual relationship in general.

Profiling and automated decision-making

The registered data are not used for profiling, and no automated decision-making is performed on the data.

Right of access to personal data

The data subject has the right to check what personal data about them have been entered into the register, or to find out that there are no such register entries. The data subject can ask the controller for access to their personal data. Read our instructions on how to request access to data.

Right to rectification of data

The data subject has the right to demand that the controller rectify without undue delay any inaccurate or incorrect personal data concerning them. Read our instructions on rectification of data.

Right to restriction of processing

The data subject has the right to demand that the controller restrict the processing of data, if the data subject contests the accuracy of the personal data. The idea is to restrict the processing for a period during which the controller can verify the accuracy of the personal data.

Right to lodge complaint with supervisory authority

The data subject has the right to lodge a complaint with the supervisory authority (the Data Protection Ombudsman).