Personal data protection

Entrepreneur’s Unemployment Fund (Yrittäjäkassa)
Visiting address: Museokatu 8, 00100 Helsinki
Postal address: P.O. Box 86, 00251 Helsinki
neuvonta@yrittajakassa.fi

https://yrittajakassa.fi/

Entrepreneur’s Unemployment Fund (Yrittäjäkassa)
tel. 09-622 4830
P.O. Box 86, 00251 Helsinki

Data Protection Officer Arto Pirinen

tietosuoja@yrittajakassa.fi

Register of members and benefits of the Entrepreneur’s Unemployment Fund.

The role of the Fund is to provide its members with benefits under the Unemployment Insurance Act. The processing of personal data is based on Article 6(1)(c) of the EU General Data Protection Regulation (2016/679). This processing obligation is based on Article 1 of the Unemployment Fund Act (24.8.1984/603). At the core of the activities of the Entrepreneurs’ Fund is the need to process personal data for the performance of statutory tasks.

The personal data in the register of members and benefits are processed for the purpose of providing the members of the Fund with income security and other benefits under the Unemployment Insurance Act (1290/2002). In addition, the data are processed for the purposes of providing services to members of the Fund in relation to membership and benefits and related activities such as, for example, conducting member surveys and providing information on the activities of the Fund.

The Fund has legitimate interests in the processing of personal data related to the performance of its activities, such as the creation and processing of statistical data, the continuous improvement of its activities and the detection of possible abuses. Personal data may also be processed on the basis of these grounds.

In order to be granted and paid unemployment benefit, the law requires the claimant to provide the necessary information. Incomplete information may result in a negative decision.

Automated decision-making or profiling does not apply to data subjects.

We process the personal data of our members. In addition, we process information about individuals who have been, are or have applied to become members. In addition, we may process information about individuals who have a membership interest, obligation or other connection with the membership relationship.

We process the following information that is needed to process member benefit claims and to provide and develop the member service:

• Basic personal data, such as personal identity number and name (surname, first names)
• Contact information, such as: address, telephone numbers, email address, account number
• Language code
• Member information, such as: Membership application and processing information, membership start and expiry date, if any, reason for resignation, membership fee information, length of membership in the previous unemployment fund, if any, and reason for resignation.
• Information affecting benefit and payment, such as, the benefit claim and information related to its processing, information related to customer counselling and payment, information on dependants under 18 years of age.
• Any information relating to complaints, recoveries or the handling of irregularities.
• Information provided or collected during contact, such as recordings of incoming calls to customer services.
• Other information such as, possible security block, settings selected from the online service, possible member satisfaction, etc. responses to surveys

Personal data is collected from the members of the Fund themselves and, when processing applications, possibly from employers and from authorities and official registers to which the Fund has legal access. The register receives data from the member’s application for membership and benefits and from the authorities mentioned in Chapter 13, Section 1 of the Unemployment Insurance Act (1290/2002):

• State and municipal authorities and other bodies governed by public law.
• The Pension Security Centre, the Pension and Insurance Institution and the Pension Fund.
• From the employer, the contractor or other person performing the work, the unemployment fund, the workplace fund, the provider of training services within the meaning of the Act on Public Employment and Business Services and other educational institutions.
• From another provider of employment services.
• The labour market policy statement and payment notification referred to in Chapter 1, Section 4(3) of the Unemployment Security Act from the Labour Market Authority.
• Information from the penitentiary institution on the start and end of the sentence; the penitentiary institution must provide this information immediately upon admission to the penitentiary institution.
• Kela must inform the relevant fund if a recipient of earnings-related daily allowance or his or her spouse is granted home care allowance under the Act on Support for Home Care and Private Care of Children.
• The Social Insurance Institution of Finland and the Fund have the right to obtain from the Tax Administration, free of charge, the information on the income of unemployment benefit recipients necessary for investigating misuse of unemployment benefits, without prejudice to confidentiality provisions and other restrictions.
• The member’s salary information is obtained from the National Income Register (Act on the National Income Information System, Section 13).

In addition:

• The Population Register Centre provides the Fund with information on members’ addresses, children and deaths.
• The Labour Market Administration provides the Fund with labour policy statements for members.
• Every year, the tax authorities provide the Fund with the tax withholding information of the members of the Fund.
• Kela provides the fund with information on the benefits paid by Kela to benefit claimants.

The right of the staff of the Entrepreneur’s Fund to process the personal data of its members is determined by the authorisation to do so in accordance with this job description. External service providers authorised by the Entrepreneur’s Fund may also process personal data to a limited extent. They process data on behalf of and on behalf of the Entrepreneur’s Fund. The processing is subject to a binding agreement between the parties, which takes into account data protection and confidentiality requirements. Ownership of the data does not pass from the Fund to such contracting party and the contracting party is not entitled to use the data beyond the agreed mandate.

Such contract partners include:

• Payment system supplier Futunio Oy
• Telephone system supplier Telavox

In the course of its activities, the Fund may also subcontract other processors to whom data are disclosed in order to carry out contractually agreed tasks. The contracts will always provide for adequate data protection. Such a situation could for example be the outsourcing of a member satisfaction survey.

We may disclose the member’s personal data to the authorities on the basis of Chapter 13 of the Unemployment Insurance Act, in compliance with applicable law and data protection obligations.

Examples of disclosures include:

• To the Pension Security Centre
• To the Tax Administration
• For the Employment Fund
• To the Social Insurance Institution
• Ministry of Employment and the Economy and Ministry of Justice
• To the Financial Supervisory Authority
• To the Social Security Appeals Board and the Insurance Court
• For the police and the courts
• For insurance and pension institutions
• To the Incomes Register
• To another unemployment fund
• To the Ministry of Social Affairs and Health
• To the Social Welfare Office
• To the enforcement authority
• Other unemployment funds

We may also disclose data to the EESSI electronic system for the exchange of social security information between EU countries.

Member information is not disclosed for marketing or direct marketing purposes.

In principle and as a general rule, data will not be disclosed outside the European Union or the European Economic Area. In some situations, the Entrepreneur’s Bank may use resources and servers located around the world to provide services. As a result, the Entrepreneurial Bank may transfer your personal data outside the country where the services are used and possibly also to countries outside the EU and EEA whose legislation does not offer specific protection of personal data or whose data protection legislation is very different. In these cases, the Entrepreneur Bank will ensure that there is a legal basis for the transfer and that the user’s personal data is adequately protected in accordance with the applicable law, for example by using standard agreements approved by the relevant authorities (where applicable) and by requiring compliance with appropriate technical and practical data protection measures.

The Entrepreneur’s Fund will process your personal data in this register for as long as the Entrepreneur’s Fund has a valid ground for processing as described in section 4 of this Privacy Policy, and for a reasonable period thereafter.

The storage and archiving of data is further defined in the Treasury’s archiving plan.

Kassa takes great care in the storage, processing and security of personal data. By contract, we have obliged our subcontractors to protect the data they process in accordance with the requirements of the GDPR.

We ensure that your computing equipment is maintained and disposed of safely. Data processing equipment is technically secure and can only be accessed with unique access codes. The computer network and network equipment are protected by a firewall and located in a locked and controlled area. Access to the register of members is restricted to those who need it for their work and who have unique user IDs and passwords. Access to premises where confidential information is processed or archived is only allowed to persons who need access for the performance of their duties. All our employees have non-disclosure agreements that prevent information from being disclosed to third parties.

The manual material is kept in the locked archives of the fund’s office for the period specified in the archiving plan.

As a registered member, you have several possibilities to influence the processing of your personal data. We will respond to your requests as soon as possible, and at the latest within one month. If we need more time, we will contact you within one month. In the first instance, please contact the fund of the register via email to tietosuoja@yrittakassa.fi to exercise your rights.

The rights you have include:

a) Right of access to personal data processed about you

Each member of the Entrepreneur Fund can easily check their own data in the Entrepreneur Fund’s Member Pages. Your Member Pages also allows you to update contact details and other personal data and send a secure message to the fund.

For other personal data processed, the request can be made by sending a message to tietosuoja@yrittakassa.fi, where further instructions will be sent. The request for inspection should specify in detail what data the person wishes to inspect and for what period. As a general rule, the request for inspection is free of charge once a year.

b) The right to request the rectification of personal data collected about you

If you notice any errors or omissions in your data, you can edit it yourself in Member pages. You can also submit a request for correction of your personal data to the fund via Member Pages or by email to neuvonta@yrittajakassa.fi.

c) The right to request the deletion of personal data collected about you

We are obliged to delete the personal data you have requested from our register if one of the following criteria is met and no other legal or regulatory obligation to retain the data applies:

• The personal data are no longer needed for the purposes for which they were processed;
• You withdraw your consent and there is no other lawful basis for the processing;
• You object to processing on grounds relating to your particular personal situation and there is no legitimate ground for the processing;
• The processing of the data is against the law;

The right to erasure is limited to situations where the Fund has a legal obligation or right to keep certain data for a certain period of time. The Fund may also have a legitimate interest or a legal right to process your personal data for a certain period after the end of your membership.

We recommend that you make your request via eFiling or by email to neuvonta@yrittakassa.fi.

d) The right to request restriction of the processing of personal data collected about you

You have the right to request restriction of the processing of your personal data in accordance with Article 18 of the GDPR.

We recommend that you make your request via eFiling or by email to neuvonta@yrittakassa.fi.

e) The right to transfer your data from one system to another

You have the right to receive the personal data you provide to the fund in a structured, commonly used and machine-readable format, and the right to transfer this data to another controller.

We recommend that you make your request via eFiling or by email to neuvonta@yrittakassa.fi.

f) Right to lodge a complaint with a supervisory authority

If a potential disagreement between you and the fund regarding the processing of your personal data cannot be settled amicably, you have the right to refer the matter to the Office of the Data Protection Ombudsman.

If you wish to delete your personal data/information, restrict the processing of your personal data or transfer your personal data to another system, we recommend that you make a written request via eFiling or by email to neuvonta@yrittajakassa.fi.

More information on cookies “

This personal data file and the processing of personal data contained in it are governed by Finnish law and EU law directly applicable in Finland, such as the EU General Data Protection Regulation.

We understand the importance of data protection for our members and visitors to our website and we strive to stay at the forefront of developments in this area too. The Entrepreneur’s Fund may change this Privacy and Data Protection Statement. Any changes will be published on this page.