Privacy statement for the library’s customer register

Controller

Finnish Patent and Registration Office (PRH)
Postal address: Finnish Patent and Registration Office, FI-00091 PRH, Finland
Street address: Sörnäisten rantatie 13 C, Helsinki, Finland
Tel. +358 29 509 5000

Representative of controller

Jorma Lehtonen
jorma.lehtonen(at)prh.fi
Tel. +358 29 509 5904

Data protection officer

tietosuojavastaava(at)prh.fi
Tel. +358 50 413 6500

Purpose of and legal basis for processing personal data

The library's customer register contains details of the persons who borrow works from the Patent Library. The details are only used for monitoring borrowing and for debt collection.

The processing of data is based on the person’s consent.

Personal data and categories of data subjects in the register

The following customer details are registered as personal details:

• Name
• Date of birth
• Address
• Phone number
• Email address

Sources of information

The details are entered into the register according to the notification filed by the customer. The customer is obliged to report details that have changed.

Disclosure of personal data to third parties

No data will be disclosed to third parties. Personal details are also processed by administrators and developers of information systems who have an agreement with the PRH on processing personal data in accordance with the applicable privacy legislation.

Transfer of personal data to countries outside the EU or EEA or to international organisations

No personal data will be transferred to countries outside the EU or EEA or to international organisations.

Storage periods of personal data

Personal data will be erased from the register if the customer has not borrowed works in three years and if earlier loans do not involve unresolved matters. Erasures are carried out once a year.

Profiling and automated decision-making

The registered data are not used for profiling or automated decision-making.

Right of access to personal data

The data subject has the right to check what personal data about them have been entered into the register or to find out if there are no such register entries. The data subject can ask the controller for access to their personal data. Read our instructions on how to request access to data.

Right to rectification of data

The data subject has the right to demand that the controller rectify without undue delay any inaccurate or incorrect personal data concerning them. Read our instructions on rectification of data.

Right to deletion of data

The data subject has the right to make the controller erase any personal data concerning them without undue delay if the data subject withdraws their consent and the loans do not involve unresolved matters. The data subject has the right to withdraw their consent by contacting the representative of the controller.

Right to restriction of processing

The data subject has the right to demand that the controller restrict the processing of data, if the data subject contests the accuracy of the personal data. The purpose is to restrict the processing for a period during which the controller can verify the accuracy of the personal data.

Right to lodge a complaint with the supervisory authority

If the data subject considers that the processing of their personal data infringes the relevant legislation, the data subject has the right to lodge a complaint with the supervisory authority (the Office of the Data Protection Ombudsman).

‍