Frequently Asked Questions on Data protection

How do we process your personal data?

It is important to us that personal data is processed carefully and in accordance with legislation. We use your personal data only for pre-defined purposes or for purposes that are compatible with the original purposes.

Data protection notices (links in the right-hand column on this page) provide further information on how we process personal data.

Access to your personal data is restricted to persons whose duties require access. We provide regular training and carry out evaluations to ensure the competence of our employees participating in the processing of your personal data. We take actions regarding any detected irregularities related to the processing of personal data.

Which sources are used to collect personal data?

Usually, we collect personal data directly from you when you use our services—for example, in connection with registration.

Additionally, we collect data on you, for example, in connection with various marketing campaigns and surveys. In addition, we may obtain data from filing systems maintained by public authorities and from other reliable sources.

What kind of personal data do we collect?

We only collect data that is relevant for the related purpose.

Personal data collected on the customers of the passenger service includes, for example, the following:

• basic information on the customer, such as name and date of birth
• contact details, such as address, email address and phone number
• data related to service production and travelling, such as service, sales, payment and travel transaction details
• data on service use through various transaction channels, such as online services, ticket vending machines and mobile services
• consent and prohibitions related to direct marketing

We collect the following information on the customers and cooperation partners of VR Transpoint:

• names and contact details, such as address, email address and phone numbers

Why do we collect your personal data?

We use your personal data in order to develop our services so that they are more personal and useful. We use your personal data primarily for service production, development and monitoring and for the purpose of providing customer service.

In addition, we use your personal data in order to carry out, develop and monitor sales, customer communication and marketing. Our customer communication can also include informing customers in the event that disruptions occur. Furthermore, we can process your personal data in connection with customer feedback processing.

To whom do we disclose your personal data?

We disclose personal data only to the extent permitted by law. For example, we can transfer data to trusted subcontractors with whom we have agreements in place. In addition, we can transfer your personal data to third parties provided that you have given your consent for us to do so. We disclose personal data to public authorities at their request and to the extent permitted by law.

Who can process your personal data?

Your personal data is only processed by such VR Group employees and the employees of our subcontractors whose responsibilities require that they process personal data. Our subcontractors process your personal data only in accordance with our instructions. We use appropriate contractual arrangements to obligate our subcontractors to ensure that data security is at an adequate level to protect your personal data. We only select trustworthy subcontractors who take data protection requirements into account.

Do we transfer your personal data to countries outside the EU or EEA ( so-called third countries)?

As a rule, we process your personal data within the EU/EEA. If we transfer your personal data to countries outside the EEA, we will ensure that data protection is at an adequate level in accordance with legislation. For example, we agree on the transfer by using the standard contractual clauses of the European Commission.

How do we protect your personal data?

Personal data is protected against unauthorised access and illegal or accidental processing. We provide data protection training and guidance to our employees who process customer information.

For how long do we retain your personal data?

We retain personal data only for as long as necessary for the related purposes in accordance with the legislation applicable at the given time. After this, your personal data will be either erased or anonymised.

How and where can you access your own data?

If you have a VR account, you can easily check and edit the majority of your own data by logging in at vr.fi.

Other customers using passenger servicescan check and edit their data by contacting VR’s customer service.

VR Transpoint customers can check their personal data by contacting VR Transpoint through the online form. 

Reviewed 23 July 2019