Data processing

Ilmarinen Mutual Pension Insurance Company manages statutory earnings-related pension insurance. For this task Ilmarinen maintains and processes the personal data of insured persons and pension recipients. Ilmarinen handles personal data according to various laws and regulations, such as the Personal Data Act and insurance legislation.

Information for Ilmarinen’s personal data register is collected from the customers themselves and from bodies authorised by them. In addition information is also gained from the registers of official public authorities that Ilmarinen is legally permitted to use. Ilmarinen also collects personal data from the telephone calls that we have selected to be recorded. Ilmarinen collects personal data only for the above-mentioned purposes and only to the extent that it is necessary. Ilmarinen aims to ensure that the data is correct, complete and up to date.

Inspection of personal data register data

Everyone with personal data in the registers maintained by the company has the right to inspect their personal data as specified in the Personal Data Act and to request the rectification of possible erroneous information. The right to inspect the data is a personal right that cannot be implemented through a representative. For any questions concerning personal data registers or requests to inspect personal data, please contact Ilmarinen’s customer service, tel. +358 10 195 000.

Descriptions of files

Descriptions of files of the personal data registers maintained by Ilmarinen can be viewed in the reception of Ilmarinen’s head office and the customer service office at the address Porkkalankatu 1, Helsinki.

The data register description (in Finnish) on the data of legal persons as prescribed by publicity legislation.

Disclosure of information from the registers

Ilmarinen only discloses personal data with the consent of the registered person or if the recipient of the data has the legal right to receive the data. For example the Finnish Centre for Pensions has the right to receive the data. Ilmarinen may, in order to carry out its statutory earnings-related pension cover work, use sub-contractors in its service operations. Sub-contractors can be provided with data from the registers in order for them to carry out their duties. Sub-contractors are bound by the same legal obligation of non-disclosure as Ilmarinen’s employees. In addition sub-contractors are required to sign a confidentiality agreement.

Ilmarinen can disclose personal data to European Union countries. Data can also be disclosed to officials of social security agreement countries outside the European Union in matters required by social security agreements.

Ilmarinen’s personnel who process register data are subject to an obligation of non-disclosure based on legislation. In addition Ilmarinen’s personnel sign a confidentiality agreement as part of their employment contracts.

Personal data registers are segregated from the public data network. Unauthorised access to the data systems has been prevented using high-level security techniques. If confidential data is transferred through public communications networks the data is carefully encrypted using technology.