The Ticket Product Selection Privacy Policy

10 May 2016

This Privacy Policy sets forth the information required under Sections 10 and 24 of the Finnish Personal Data Act.

1. Data controllers

In relation to the personal data of an employee, the data controller is the employer that has concluded a service agreement with Edenred Finland Oy regarding personnel benefit services included in the Ticket product selection. Edenred Finland Oy processes the personal data of the employees entered in the employer’s register in order to provide personnel benefits upon the assignment of the employer and/or the employee. Edenred Finland Oy shall be responsible for the technical functioning and reliability of the Ticket product selection services provided by it.
 
In their capacity as data controllers, employers shall be responsible for the processing of the personal data of their employees, as well as for any queries related to same. All inquiries should be addressed to the person responsible for register matters at each employer.
 
Edenred Finland Oy acts as the data controller in relation to the personal data of persons who register as users of the additional services of the Ticket product selection. These comprise the MyEdenred service and MyEdenred mobile application. Additionally, Edenred Finland Oy acts as the data controller in relation to the personal data of its own employer clients and their contact persons.
 
Edenred Finland Oy’s contact details for its own private customers and the contact persons of its employer clients are as follows:
 
Edenred Finland Oy
Business ID 1057825-2
Elimäenkatu 15
00510 Helsinki
telephone: (09) 7594 2848
email: yritys-fi@edenred.com

2. Name of register

Employers shall themselves name their registers relating to their employees’ personal data. In relation to the register consisting of Edenred Finland Oy’s own employer clients and their contact persons, as well as the private customers of the additional services of the Ticket product selection, the name of the register is Edenred Finland Oy’s Ticket Customer Register.

3. Basis for processing personal data and intended use of register 

Employers shall themselves determine the basis for the processing of personal data in their registers containing the personal data of their employees, as well as the intended use of the register.
 
The purpose of the processing of personal data by Edenred Finland Oy is the carrying out of the services and additional services pertaining to the personnel benefits offered by employers to their employees. For the said purpose, personal data is processed, inter alia, in order to individualize and identify employees, to provide services and additional services, as well as to market products and services.
 
Edenred Finland Oy’s Ticket product selection and services comprise the following:

  • Ticket Lounas® card and Ticket Lounasseteli™ voucher (meal benefit),
  • Ticket Virike® (Mind&Body®) card and Virikeseteli® voucher (cultural and/or sports benefit),
  • Ticket Duo® card (combination card for meal, cultural and sports benefits),
  • Ticket Transport® card (commuting benefit).

In relation to the employers’ personal data registers, the processing of personal data by Edenred Finland Oy is based upon Section 8, Sub-Section 1, item 7) of the Finnish Personal Data Act, and in relation to Edenred Finland Oy’s Ticket Customer Register, upon Section 8, Sub-Section 1, items 1), 2) and 5) of the Finnish Personal Data Act.
 
Edenred Finland Oy uses the personal data of employers’ employees for the following purposes:
 

  • Ordering, manufacturing, delivery and loading of Ticket cards
  • Ordering and delivery of voucher products
  • Communications related to a product or service ordered by a customer
  • Managing, administration, maintenance and development of a customer relationship
  • Invoicing for products and services
  • Marketing measures that strengthen the customer relationship, such as customer messages and notifications.

In addition to the above, Edenred Finland Oy also utilises its Ticket Customer Register for the following purposes:
 

  • Business planning and development
  • Research, product development and statistics
  • Marketing of its own, and its group’s products and services, as well as the products and services of its co-operation partners
  • Collection, organization and analysis of customer data in order to efficiently target sales, advertising and marketing
  • For surveys and market research, customer satisfaction surveys and similar measures, in accordance with Section 19 of the Finnish Personal Data Act, or based on the consent of the registered person.

4. Data content of register

Employers shall themselves determine the data content of their registers containing the personal data of their employees.
 
Edenred Finland Oy’s Ticket Customer Register may contain, inter alia, the following information concerning the registered persons:
 

  • Customer details (name, social security number, address, telephone number, email)
  • Name of employer
  • Contact person details of the employer company
  • Ticket card individualization data
  • Identification information for one’s own online services or mobile account (e.g. user name)
  • Details related to the customership, such as products and services used, as well as opening and termination dates
  • Data collected in conjunction with customer phone calls and other customer communications
  • Card and account payment transactions, balances and usage information
  • Other information pertaining to the usage of a card
  • Choices made by the registered person concerning permission to process personal data
  • Choices made by the registered person concerning direct marketing
  • Choices made by the registered person concerning electronic direct marketing
  • Choices made by the registered person concerning the location and tracking data / context information used by the mobile application
  • Choices made by the registered person concerning disclosure of address to third parties.

The social security number of a registered person may be processed in payment service operations, or when the unequivocal identification of a customer is important for the carrying out of Edenred Finland Oy’s rights and obligations. The social security number shall not be needlessly inscribed on documents printed or devised on the basis of the personal data register.

5. Regular data sources

Employers shall themselves determine the regular data sources for their registers containing the personal data of their employees.
 
Edenred Finland Oy obtains data from:

  • An employer that orders a service from Edenred Finland Oy to offer a personnel benefit, in conjunction with ordering a product and during the client relationship
  • From the customers themselves during the customer relationship
  • From notifications made by the customers during the customer relationship
  • From the registrations made by the customers themselves into the additional services of the Ticket product selection, such as the MyEdenred service and MyEdenred mobile application
  • In relation to customers registered for additional services, from the account information logged from the use of a Ticket card and from the information provided by co-operation partners.

6. Disclosure of personal data

Employers shall themselves determine the personal data disclosures of their employees.
 
Edenred Finland Oy may disclose and transfer the personal data of those registered in Edenred Finland Oy’s Ticket Customer Register:

  • To the authorities in statutory situations
  • In situations pertaining to a change in the company’s shareholding structure
  • To companies within the same group, located in Finland or abroad
  • For the purposes of scientific research or statistics, subject to the prerequisites stipulated under the Finnish Personal Data Act.

Personal data shall be retained within the EU region, and it shall not be disclosed or transferred outside of the EU/EEA region.

7. Protection of register

As a point of departure, employers shall themselves be responsible for protecting their registers containing the personal data of their employees.
 
Edenred Finland Oy shall for its part be responsible for the protection of the personal data of the employers’ employees, when an employer discloses the personal data of its employees for use by Edenred Finland Oy, in order for it to be able to implement a personnel benefit offered by the employer to its employees, along with the services pertaining thereto.
 
Edenred Finland Oy shall be responsible for protecting its Ticket Customer Register.  
 
In Edenred Finland Oy, personal data is maintained confidential. The use of personal data occurs in compliance with instructions, and personal data has been protected from any unauthorised use. Only employees designated in advance are able to use and process the data. All employees are bound by confidentiality obligations. All manual material is retained in a locked space, and access to same is only granted to relevant persons. Access control is in place.
 
The data network and hardware of Edenred Finland Oy and of its subcontractors (if any) housing personal data has been protected with a firewall, passwords and other technical measures. Databases and back-ups of same are located in locked spaces. Access control is in place

8. Inspection right, correction of data and carrying out of same 

Employers shall themselves be responsible for the carrying out of their employee’s inspection right in relation to their own register, as well as for the correction of the data in their register. All inspection and correction requests shall be addressed to the employer acting as the data controller.
 
Persons registered in Edenred Finland Oy’s Ticket Customer Register have the right to inspect all information concerning themselves, as well as the right to demand the correction of any erroneous data. Persons registered in the customer register have the right to have erroneous, unnecessary, deficient or outdated personal data corrected, deleted or supplemented.
 
Registered persons can have their information corrected by submitting a written information correction request to Edenred Finland Oy in the form of a document signed by them, or certified in another manner.

9. Right to prohibit and carrying out of same 

Employers shall themselves be responsible for carrying out their employees’ right to prohibit in relation to their own register.
 
A person registered in Edenred Finland Oy’s Ticket Customer Register has the right to prohibit the use of their personal data for direct marketing, market research and polls, professional registers and genealogy by contacting Edenred Finland Oy’s customer service in writing.

10. Availability of privacy policy

Employers are themselves responsible for the availability of a privacy policy relating to the register containing their employees and their personal data.
 
The privacy policy devised by Edenred Finland Oy, including the privacy policy of Edenred Finland Oy’s Ticket Customer Register is made available at each of Edenred Finland Oy’s places of business, as well as on its website at www.edenred.fi.
 

Contact Us (09) 7594 2848 (lnf/mcf)
Mon-Fri at 9.00 am to 4.00 pm

Edenred Finland Oy Elimäenkatu 15
00510 Helsinki

Ticket Lounas®/ Ticket Restaurant®, Edenred card/Ticket Duo®, Ticket Mind&Body®/Ticket Virike® and Ticket Transport® cards are issued by PrePay Technologies Ltd, a member of Edenred Group, under license from Mastercard International Incorporated. The cards are valid only in Finland within the network of merchants accepting the cards. Card programmes are managed by Edenred Finland Oy. Mastercard is a registered trademark of Mastercard International Incorporated.

We use cookies to serve you better. If you continue we assume that you consent to receive all cookies on all our websites. More information.