Privacy statement for invoice information

Controller

Finnish Patent and Registration Office (PRH)
Mailing address: Finnish Patent and Registration Office, FI-00091 PRH, Finland
Street address: Sörnäisten rantatie 13 C, Helsinki, Finland
Tel. +358 029 509 5000

Representative of controller

Ms Tiina Honkanen
tiina.honkanen[at]prh.fi
Tel. +358 029 509 5984

Data protection officer

Mr Olli Vento
olli.vento[at]prh.fi
Tel. +358 029 509 5743

Purpose of and legal basis for processing personal data

The data processed in the register of invoice information consists of invoices the PRH sends for its customers (sales invoices) and invoices the PRH receives from its suppliers (purchase invoices).

The processing is necessary to comply with the controller’s legal obligation.

Personal data and categories of data subjects in the register

The following customer information on sales invoices is saved.

  • name and Finnish Business ID of the customer company
  • VAT number of the customer company
  • name and customer identification number of the customer’s representative
  • personal identity code of the customer
  • street and mailing addresses
  • country, region, time zone, and language
  • phone number, fax number, and e-mail address
  • address for online invoices (EDI Identification Code) and Transmission Identification Code (operator)
  • information on consumer online invoices


The following supplier information on purchase invoices is saved.

  • name and Finnish Business ID of the supplier company
  • VAT number of the supplier company
  • name and supplier identification number of the supplier’s representative
  • personal identity code of the supplier’s representative
  • street address
  • mailing address
  • country, region, time zone, and language
  • phone number, fax number, and e-mail address
  • bank account information (IBAN and SWIFT codes)

Sources of information

The regular sources of information include the PRH register system as well as the systems for cash desk, e-commerce, and payment transactions, and other systems relating to financial administration.

The customer and supplier information are transferred to a financial administration system (Kieku).

The information on sales and purchase invoices are transferred to their own customer account group in Kieku.

The information is also transferred to the Rondo system in order to archive the invoices and approve the purchase invoices.

Disclosure of personal data to third parties

The data can only be disclosed within the limits that the legislation in effect will oblige and permit.

The data will be disclosed to the National Audit Office of Finland as well as the bank, execution authorities, and the Finnish Tax Administration.

Transfer of personal data to countries outside the EU or the EEA or to international organisations

No data are transferred to countries outside the EU or the EEA or to international organisations.

Storage periods of personal data

The storage periods of personal data are based on the legislation, which specifies the storage periods of accounting material.

Profiling and automated decision-making

The registered data are not used for profiling, and no automated decision-making is performed on the data.

Right of access to personal data

As the data subject, you have the right to check what personal data about yourself has been entered into the register, or to find out that there are no such register entries. You can ask the controller for access to your personal data. Read our instructions on how to request access to data.

Right to rectification of data

As the data subject, you have the right to demand that the controller rectify without undue delay any inaccurate or incorrect personal data about yourself. You should address your request to the controller. Read our instructions on how to request rectification of data.

Right to restriction of processing

As the data subject, you have the right to demand that the controller restrict the processing of data, if you contest the accuracy of the personal data. The idea is to restrict the processing while the controller verifies the accuracy of the personal data.

Right to lodge complaint with supervisory authority

As the data subject, you have the right to lodge a complaint with the supervisory authority (the Data Protection Ombudsman).

Printable version
Latest update 26.06.2019