Obligation management report app
Personal data refers to any information that can be directly or indirectly linked to a natural person.
On this page, we will outline the instructions we follow, our methods for processing and storing your data, and what rights you have. These guidelines will never limit the rights granted to you by the General Data Protection Regulation or any other legally valid decision.
The Obligation management report app is a system used for ordering necessary obligation management reports from the Tax Administration’s information system. Completed documents are extracted from the Tax Administration and saved in the USPA case management system as an attachment to the order procedure.
Documents can be ordered using either a business ID or a personal identity code. Documents are never stored in the Obligation management report app’s database.
The processing of your personal data is based on Article 6 (1)(c) of the EU General Data Protection Regulation (EU 2016/679), i.e. processing required compliance with the Regional State Administrative Agency’s statutory obligation.
The legal basis for the processing of your data is Article 6(1)(e) of the GDPR (EU 2016/679), which provides that data is processed for performing tasks carried out in the public interest or in the exercise of official authority vested in the Regional State Administrative Agency.
This is also provided for in section 4, paragraphs 1 and 2 of the Data Protection Act (1050/2018).
- Personal identity code or business ID. The personal identity code is not readable.
- Parameters required for document identification.
Pay security application and information used in supervision.
Data is not disclosed to anyone.
Personal data are not transferred outside the EU or the EEA.
Information that has become unnecessary is removed from the system twice a year.
The registry is stored on a server to which third parties do not have access. Use of the Obligation management report app is limited with access rights. Access rights are only granted on the basis of a supervisor's application as required by the work task. Unauthorized access can be traced from the system log data.
The processing of your personal data also does not involve automatic decision-making or profiling.
Each Regional State Administrative Agency is competent to carry out its tasks in a specific geographical area in Finland unless the national management of a matter has been centralised to a specific Regional State Administrative Agency. Therefore, one of the six Regional State Administrative Agencies usually acts as the controller for the processing of personal data in accordance with this notification, depending on where in Finland you live and which Regional State Administrative Agency has processed your matter.
The controller in accordance with this notification is:
- Regional State Administrative Agency for Southern Finland
Area of jurisdiction: regions of Uusimaa, Kanta-Häme, Päijät-Häme, Kymenlaakso, South Karelia, Southwest Finland and Satakunta - Regional State Administrative Agency for Eastern Finland
Area of jurisdiction: regions of South Savo, North Savo and North Karelia - Regional State Administrative Agency for Lapland
Area of jurisdiction: region of Lapland - Regional State Administrative Agency for Southwestern Finland
Area of jurisdiction: regions of Southwest Finland and Satakunta - Regional State Administrative Agency for Western and inland Finland
Area of jurisdiction: regions of Pirkanmaa, Central Finland, South Ostrobothnia, Ostrobothnia and Central Ostrobothnia - Regional State Administrative Agency for Northern Finland
Area of Jurisdiction: regions of North Ostrobothnia, Kainuu and Lapland
Uusimaa Centre for Economic Development, Transport and the Environment / Pay security and legal support
Regional State Administrative Agency for Southern Finland, Occupational Safety and Health Division
OSH Division of the Regional State Administrative Agency for Eastern Finland
OSH Division of the Regional State Administrative Agency for Southwestern Finland
OSH Division of the Regional State Administrative Agency for Western and Inland Finland
Regional State Administrative Agency of Northern Finland, Occupational Safety and Health Division
Regional State Administrative Agency for Southern Finland / Supervision of businesses
Regional State Administrative Agency for Eastern Finland / Supervision of businesses
Regional State Administrative Agency for Lapland / Supervision of businesses
Regional State Administrative Agency for Southwestern Finland / Supervision of businesses
Regional State Administrative Agency for Western and inland Finland / Supervision of businesses
Regional State Administrative Agency for Northern Finland / Supervision of businesses
Keha/TiVi
Gofore Oyj
Valtori
Regional State Administrative Agency for Southern Finland
Right to be informed of the processing of personal data
You have the right to know what we use your information for and how.
The aim of this notification is to give you an overall idea of the processing of personal data that is the subject of this notification at the Regional State Administrative Agency. If you feel that this notification does not give you the overall idea we are aiming to provide, we have failed in our goal. In this case and whenever you have questions about the processing of personal data by Regional State Administrative Agencies, you can contact the Data Protection Officer for the Regional State Administrative Agencies (see contact details below).
Right to access to your personal data
You can request and receive a copy to your personal data that we have in our register by sending a signed information request form by letter or email to the Regional State Administrative Agency's registry. We will implement your request unless we have a legitimate reason to refuse realising your rights.
You have the right to receive information about whether we process your personal data in our activities. If we do not process your personal data, you have the right to be informed about this as well.
Form: Request to access personal data (in Finnish)
Send a written request to the Regional State Administrative Agency’s registry.
Right to request that inaccuracies be corrected and missing information be added
If you notice any omissions or inaccuracies in your personal data, you have the right to request that we update these. In such a case, we ask that you indicate which information is incorrect and how the information should be changed or which information should be supplemented and how.
Form: Request for the correction of inaccurate personal data and to restrict the use of personal data (in Finnish)
Send a written request to the Regional State Administrative Agency’s registry.
Restricting the use of your information
If you believe that the information we are processing that concerns you is incorrect, that it is being processed unlawfully, or you oppose the processing of your information, you may ask us to restrict the processing of your information.
Form: Request for the correction of inaccurate personal data and to restrict the use of personal data (in Finnish)
In that case, we can only process your data
- with your consent
- if we need the data for the purpose of establishing, submitting or defending a legal claim
- in the public interest
- to protect the rights of another person.
If we limit the processing of your data on the basis of your request, we are obligated, as far as possible, to notify all those to whom the data was previously disclosed.
Send a written data restriction request to the Regional State Administrative Agency’s registry.
Right to object to the processing of personal data
You have the right to object to us processing your personal data. You can do so at any time giving reasons related to your specific personal situation.
In that case, we will no longer be allowed to process your personal data unless there is a significant and substantiated reason that supersedes your interests, rights and freedoms, or if the processing of the data is necessary to establish, present or defend a legal claim.
Send your written and justified request to the Regional State Administrative Agency's registry.
If you believe that your personal data has been processed in a manner that is violated to the law, you can file a complaint or complain to the Office of the Data Protection Ombudsman about the processing of your data. However, we recommend that you first contact the Regional State Administrative Agencies' Data Protection Officer (see contact details below).
Contact information for the Data Protection Officer and further information on data protection
Office of the Data Protection Ombudsman
Contact information
Data Protection Officer
tel. +358 295 018 015
[email protected]
You can contact the Regional State Administrative Agencies' Data Protection Officer if you need more information on the processing of personal data by Regional State Administrative Agencies. Contact the Regional State Administrative Agency's registry office, if you have any questions concerning the exercising of your rights in matters related to the processing of your personal data. The contact details for the registry office can be found below. If your matter concerns the processing of your personal data by an organisation other than the Regional State Administrative Agency, you must first contact the relevant organisation or its data protection officer.
Queries relating to exercising your rights as a data subject should be addressed to the registry of the Regional State Administrative Agency for Southern Finland: