1. General
Mandatum Life Services Ltd offers calculations and reports to companies and corporations for their financial statements on post-employment benefits and years-of-service bonus arrangements in compliance with international accounting standards.
In this description of personal data processing, we provide information required by the EU’s General Data Protection Regulation ((EU) 2016/679) and other applicable data protection legislation concerning the processing of personal data carried out by Mandatum Life Services Ltd in connection with the said calculation and reporting services.
If you have more specific questions or requests related to this description, the processing of your personal data or your rights as a data subject, you may contact us via the channels mentioned below.
2. The controller and processor of personal data
In terms of personal data processed in connection with the calculation and reporting services, each employer acts as the controller for the personal data of its own employees.
As a provider of calculation and reporting services, Mandatum Life Services Ltd (Bulevardi 56, P.O. Box 1210, FI-00101 Helsinki) acts as the processor of the personal data on behalf of the controller.
3. The contact details of the Data Protection Officer of the personal data processor
Mandatum Group’s Data Protection Officer
Email: dpo@mandatum.fi
Postal address: Mandatum, Data Protection Officer, P.O. Box 627, FI-00101 Helsinki.
4. Personal data to be processed and sources of personal data
Data subjects whose personal data is processed are employees of the employers that are calculation and reporting service clients of Mandatum Life Services Ltd. We receive the employees’ data from the controller. Information may be received, for example, from pension funds and foundations, insurance companies and other companies.
The data subject’s personal data that we process can be categorised into the following personal data groups. Examples of personal data for these groups include:
- Basic personal information, such as name, personal identity code and the data subject’s employer.
- Benefit plan information that is necessary to produce calculations and reports, such as the employment start date, policy number, date of joining the policy, retirement age and pension start date, benefit determination criteria and benefit-related amounts for earned and target pension, as well as salary information.
5. Purposes of and legal basis for processing personal data
The purpose of processing personal data is to provide calculations and reports based on international accounting standards on post-employment benefits and years-of-service bonus arrangements. Processing of personal data in connection with the provision of services is required for the calculation and reporting of pension obligations and pension costs arising from employment and pension benefits.
The processing of personal data by Mandatum Life Services Ltd is based on a service agreement under which Mandatum Life Services Ltd produces services for the controller.
6. Retention periods for personal data
We store the personal data processed in connection with the calculation and reporting services for six (6) years.
7. Your rights
As a data subject, you have the right to receive confirmation from the controller as to whether your personal data is being processed, as well as the right to receive a copy of the data concerning you and to inspect the data. If you consider that your personal data that is processed to be incorrect or inaccurate, you have the right to request the rectification of such personal data and to have any incomplete data completed.
You also have the right to request the erasure of your personal data and, to the extent that the processing of your personal data is based on consent, to withdraw your consent. If you request the erasure of your data or withdraw your consent to the processing of your personal data, your personal data will not be processed in that respect unless there is another legal basis for processing the data.
You furthermore have the right to object to the processing of your personal data if the processing is based on the fulfilment of the data controller’s or a third party’s legitimate interests. In specifically regulated cases, you may have the right to request restricted processing of your personal data. To the extent that the processing of your personal data is based on consent or a contract, you also have the right to receive the personal data you have provided the data controller in a structured and commonly used format and the right to have the data transferred to another controller.
You can exercise your rights described above by contacting your employer or Mandatum’s customer service. You can contact our customer service in an online message through Mandatum’s Web Service, by calling +358 200 31100 (lnc/mnc) Mon-Fri 9am–5pm, by mailing Mandatum, Asiakaspalvelu, PL 627, 00101 Helsinki, or by visiting our office nearest you. You can find the contact details and opening hours of our offices on our website.
The right to lodge a complaint with a supervisory authority
In matters related to the processing of your personal data and data protection, and if you have any questions, we ask you to primarily use the contact channels mentioned above. In matters related to the processing of your personal data by Mandatum Life Services Ltd, please contact Mandatum Group’s Data Protection Officer, whose contact details are included above in Section 3 of this description.
If you believe our processing of your personal data does not comply with data protection legislation, you have the right to contact the competent supervisory authority, i.e. the Office of the Data Protection Ombudsman.
Updated 16.9.2024