Privacy Statement


The State Pension Fund of Finland (VER) is tasked to manage and invest the pension assets entrusted to it. Through VER, the state prepares to finance future pensions and to balance pension expenditure over time. To manage its tasks, VER needs to maintain contacts with its partners and other stakeholders.

VER keeps a record of the contact persons of its partners and stakeholders for purposes such as investment of assets. Such purposes include, for example, tasks related to the management and administration of investment assets. The information concerning VER’s stakeholders and partners may also be used for sharing information on its activities and events. The processing of personal data may be based on a legal obligation, contract or consent of the data subject.
 

Purpose of processing

To summarise, VER processes personal data for the following purposes:

  • We process counterparty information (e.g. name, title, business ID, email, phone number, address, bank connection, any call records for verifying business transactions) for the purpose of managing investment activities.
  • We may process stakeholder and partner information (e.g. name, title, email, phone number, address) for the purpose of sharing information on VER’s activities and any events organised by it.
  • We process job applicant information for recruitment purposes.
  • On our website, we process information to ensure its functionality.
     

Sources of data

VER receives counterparty information mainly from the counterparties or their representatives themselves through, for example, contracts and other dealings. In addition, the State Pension Fund may collect personal data from reliable external information services, such as the Trade Register or the Business Information System.

We receive information on the representatives of partners and stakeholders either from themselves or collect it from publicly available information sources, such as websites. 

We collect information on website users only if the Send the Link by E-mail function is used. The information is stored in system logs and users enter the desired email addresses themselves.
 

Disclosure of information

In principle, we will not disclose your information to a third party. VER will only disclose personal data to satisfy a legal right to receive information or pursue disclosure rights and obligations.

However, VER has entered into agreements with certain service providers that may process your personal data on behalf of VER, as part of the service provided by them.  The service providers may also keep personal data files of their own. For more information on them, please contact each individual controller.
 

Disclosure to third countries

No data will be transferred outside the EU or EEA.
 

Data protection

Access to data is limited only to persons who need the data to perform their work duties.

Data protection is provided in accordance with VER’s current security policy.
 

Storage period

We will only keep your data for as long as is necessary for our operations, and as is required by applicable legislation, guidelines or code of conduct. Different storage periods are defined for different data categories and/or purposes of processing on a case-by-case basis.
 

Rights of data subjects

  1. Right of access to data

    Pursuant to Article 15 of EU 2016/679, the data subject has the right to inspect his or her information contained in a data file. The request must be addressed to the party referred to in the additional information.
     
  2. Right to lodge a complaint with a supervisory authority

    Under Article 77 of EU 2016/679, the data subject has the right to appeal to the Supervisory Authority, i.e. the Office of the Data Protection Ombudsman, if he or she believes that the processing of personal data is in breach of the Regulation.
     
  3. Right to rectification

    Pursuant to Article 16 of EU 2016/679, the data subject has the right to request that inaccurate information concerning him or her be rectified in the data file. The request must be addressed to the party referred to in the additional information.
     
  4. Right to erasure

    Under Article 17 of EU 2016/679, the data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay. The request must be addressed to the party referred to in the additional information. However, the right to erasure does not apply to all data files, and the controller must provide a written statement of reasons if the request is not fulfilled.
     
  5. Right to data portability

    Under Article 20 of EU 2016/679, the data subject has the right to transfer his or her personal data from one system to another, provided that the processing is based on consent or contract and is performed automatically. Where technically feasible, the data subject also has the right to have his or her data transmitted directly from one controller to another. The request must be addressed to the party referred to in the additional information. However, the right to transfer data from one system to another does not apply to all data files, and the controller must provide a written statement of reasons if the request is not fulfilled.


Additional information

Controller:
The State Pension Fund of Finland
Mikonkatu 15 A, 00100 Helsinki, Finland

For inquiries related to the privacy statement, please contact:
kirjaamo(at)ver.fi