Privacy policy

1. Controller

Finnish Tax Administration, P.O. Box 325, 00052 VERO
+358 29 512 000 (switchboard)

2. Person responsible for register matters

Antti Kettunen
Finnish Tax Administration, P.O. Box 325, 00052 VERO
+358 29 512 000 (switchboard)

3. Data protection officer

Helena Hynynen / Taito von Konow
Finnish Tax Administration, P.O. Box 325, 00052 VERO
+358 29 512 000 (switchboard)

4. Purpose of processing and use of personal data

The processing of personal data processed on the Happy Taxpayer website is based on the duties of the Tax Administration under Section 2 of the act on the Tax Administration (503/2010) to promote correct and uniform taxation and the development of the Tax Administration’s service capacity.

Personal data is processed in order to:

  • authenticate and manage access rights to people who publish content to the Site
  • enable visitor monitoring and service development
  • enable monitoring of the use of systems related to the use of the Site

5. Gounds for collecting and processing data

The processing of personal data is based on the statutory functions of the Finnish Tax Administration (General Data Protection Regulation, article 6(1)(c))

  • act on the Tax Administration, section 2 (laki verohallinnosta (502/2020)
  • Act on Information Management in Public Administration, chapter 4

The handling of cookies is based on the statutory task but also on the consent of the data subject to the processing of their personal data (General Data Protection Regulation, article 6 (1)(a)

6. Reportable personal data

For site administrators and publishers, their username, password and e-mail address. For visitors on the website, the IP address, which is processed in an unidentifiable format.

7. Data storage time

Personal data will be processed for the duration of the maintenance of the website and for publishers as long as it is necessary for the excercise of official responsibility (5 years). The IP addresses of visitors to the website are kept in an anonymous form.

8. Regular sources of data

Personal data is collected from the data subjects themselves. Data are also collected using the Cookiebot cookie system and the Piwik analytics tool.

9. Regular disclosures and transfer of data outside the EU or the European Economic Area

Personal data is processed only in the Tax Administration and they are not disclosed outside the EU or the European Economic Area.

10. Use of cookies

We use cookies on our website. The user can accept either essential cookies or statistical and marketing cookies. The use of cookies is described in more detail in the cookie statement.

11. Protection of the register

The site is monitored and incorrect logins are prevented by locking the username and blocking the IP address. In addition to the normal log-in, the user must enter a number code sent to their phone.

Blocking the JSON user listing prevents the external display of WordPress user names.

Access to information is limited to those persons employed by the controller who need the data in their duties. There are no shared user names in use.

12. Automated decision-making

Automated individual decisions (Article 22 of the EU Data Protection Regulation) are not taken.

13. Rights of the data subject

The data subject has the right to inspect the data relating to them that have been stored in the personal data register. A written request for inspection must be sent to the person responsible for the register.

The data subject has the right to request the correction or deletion of incorrect or obsolete data or the transfer of data from one system to another. They are also entitled to restrict or object to the processing of their data in accordance with Articles 18 and 21 of the EU Data Protection Regulation.

The data subject has the right to withdraw their prior consent to the processing of the data or to lodge a complaint with the supervisory authority concerning the processing of their personal data.