Privacy statement for phone call and chat recordings of the PRH customer service

Controller

Finnish Patent and Registration Office (PRH)
Mailing address: Finnish Patent and Registration Office, FI-00091 PRH, Finland
Street address: Sörnäisten rantatie 13 C, Helsinki, Finland
Tel. +358 29 509 5000

Representative of controller

Ms Kirsi Lahtinen
kirsi.lahtinen(at)prh.fi
Tel. +358 29 509 5000

Data protection officer

Mr Olli Vento
olli.vento(at)prh.fi
Tel. +358 29 509 5743

Purpose of and legal basis for processing personal data

The purpose of processing personal data is

  • to ensure the quality of the Finnish Patent and Registration Office’s (PRH) customer service and to develop the customer service
  • to identify the customer when the PRH discloses details about actual beneficial owners of companies.

In order to develop the PRH’s customer service, the recordings may be used for the training of the customer service personnel, for service level analyses and for the development of instructions.

The processing of customer contacts and the identification of customers related to the disclosure of details about actual beneficial owners are based on the controller’s statutory obligation.

Personal data and categories of data subjects in the register

The following identification details of phone calls are registered:

  • start and end time of the call
  • number of the caller
  • service number called
  • name and phone number of the official.

All phone calls made to service numbers are recorded. The recordings are made in a predetermined manner. The recording starts when the call is answered and ends with an end signal.

The following details of chat sessions are registered:

  • start and end time of the chat session
  • nickname or other details given by the customer
  • name of the official.

The contents of chat sessions are saved.

The following details of chatbot sessions are registered:

  • date and time of the chat session
  • the contents of the session between the automated chatbot and the customer

The contents of the chatbot’s answers are collected from public sources available to anyone. At the beginning of the session, customers are provided with instructions for use. No personal questions are asked of the customer, and the customer cannot deal with personal matters in the chatbot service.

The following details are registered to identify the customers receiving details about actual beneficial owners:

  • person’s name and personal identity code

Sources of information

The data are obtained from the customer’s phone calls or chat sessions started by the customer through the prh.fi website.

The chatbot session data are obtained a) either from the sessions started by the customer through the prh.fi website, or b) from the sessions started by the customer with the PRH Chatbot through the Chatbot service provided by the Finnish Tax Administration and the Finnish Immigration Service.

Disclosure of personal data to third parties

No data is regularly disclosed.

As an exception to this, the PRH may temporarily disclose selected recordings to a research institute for evaluating the quality level of the customer service. In that case, the research institute must commit to returning or destroying the recordings used in the analysis once the analysis is complete.

The customers’ identification details are obtained from the Finnish Population Register Centre through the identification service Suomi.fi.

Transfer of personal data to countries outside the EU or the EEA or to international organisations

No data is transferred to countries outside the EU or the EEA or to international organisations.

Storage periods of personal data

The call recordings are stored for a maximum of 6 months and the contact history for 12 months. We started the storage of phone calls and the contact history on 1 October 2017. The chat and Chatbot recordings are stored for a maximum of 2 years.

The customers’ identification details are not saved in our system of phone calls and chat sessions. The identification details are saved in a customer register of information services related to beneficial owners, where the storage period is five years. Go to the privacy statement for the customer register of the information service about beneficial owners.

Profiling and automated decision-making

The registered data are not used for profiling, and no automated decision-making is performed on the data.

Right of access to personal data

The data subject has the right to check what personal data about them have been entered into the register, or to find out that there are no such register entries. The data subject can ask the controller for access to their personal data. Read our instructions on how to request access to data.

Right to rectification of data

The data subject has the right to demand that the controller rectify without undue delay any inaccurate or incorrect personal data concerning them. Read our instructions on rectification of data.

Right to restriction of processing

The data subject has the right to demand that the controller restrict the processing of data, if the data subject contests the accuracy of the personal data. The idea is to restrict the processing for a period during which the controller can verify the accuracy of the personal data.

Right to lodge complaint with supervisory authority

The data subject has the right to lodge a complaint with the supervisory authority (the Data Protection Ombudsman).

Printable version
Latest update 11.07.2019