Privacy protection

General principles

Ilmarinen may collect, handle and analyse data on the use of its Internet pages, online services and other electronic services, and the traffic, transactions and other statistical data concerning the website. Ilmarinen may also acquire such information from reliable third parties. Primarily, we rely on information from which individual users cannot be identified.

Personal data may be used for the implementation and development of Ilmarinen’s web pages, online services and other electronic services, as well as for the purpose of ensuring information security. Personal data may also be used to develop and improve our Internet pages and services. Any processing of personal data is based on a customer relationship, some other appropriate connection or the consent of a registered user.  Personal data can be connected to an individual, natural person. 

Ilmarinen handles personal data carefully and in accordance with the law, and ensures that privacy protection is realised in all processing of personal data. In services that require registration, the collected data is stored in Ilmarinen’s personal data register and used solely for purposes specified in the registration terms.

Ilmarinen’s pages employ what are known as cookies. Cookies are small text files, saved on the user’s computer by the web browser. Cookies do not harm users’ computers or files. Cookies enable the improvement of, among other things, the pages’ functionality, their content and customers’ information security. Whenever a user visits our website, we save their IP address, data about their browser, operating system, the pages they viewed, as well as the address of the website they came from, in the event that they used a link. Users have the option of changing the settings of their browser so that it will not allow the use of cookies. Our website, however, works as it has been designed to work only when cookies are allowed.

For example, those of our online services which require registration and user authentication will not work if the use of cookies has been denied.  

In addition to cookies, Ilmarinen may also use tracking, or Web beacon, techniques.  The tracking pixel is an image file embedded on a web page or in an e-mail in HTML format.  If the use of cookies has been denied, the tracking pixel cannot track the behaviour of a particular user, but can still collect data generated by the browser.  In order to provide even more concentrated and customised electronic communications, Ilmarinen may use tracking pixels in its electronic customer bulletins or direct marketing and any related links. The tracking pixels allow connecting received messages to a particular user’s personal data. Each message contains a link which you can click if you no longer wish to receive e-mail communications.

A person employed by Ilmarinen is authorised to access the register's data if said person's duties include processing data saved in the register. Ilmarinen’s employees are subject to statutory secrecy. Ilmarinen may use subcontractors to carry out the services. Such subcontractors are subject to the same secrecy statutes and non-disclosure obligations as Ilmarinen’s own personnel.  

The accessibility of services and register data has been secured and is monitored in terms of data, equipment and equipment bays. Access to equipment bays and equipment has been restricted to personnel whose duties entail tasks associated with equipment bays and equipment. 

Principles of personal data protection in Ilmarinen’s online insurance and pension services  

In addition to the principles detailed above, those online insurance and pension services of Ilmarinen which require registration comply with the following principles on the protection of personal data. 

Users are identified through personal or client specific user IDs before they can access the services and the data saved in the register.  Users’ authority to use the register has been restricted to their own data or to such data whose owner has authorised the user to access.

Any data transmission between a service and a user is secured through encryption. The accessibility of services and register data has been secured and is monitored in terms of data, equipment and equipment bays. Access to equipment bays and equipment has been restricted to personnel whose duties entail tasks associated with equipment bays and equipment.  

The authenticity of the applications used in the services is controlled. Any use of the services is logged for the purposes of developing the service, as well as for the purpose of being able to clear up any possible errors and unauthorised use.