Data protection

Data protection

The Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities processes applications for pharmaceutical insurance compensation in Finland.

Why do we process personal data?

Processing of personal data is essential when handling pharmaceutical insurance compensation claims. Pharmaceutical injury refers to any physical illness or injury or mental disorder that was probably caused by a medicine. Compensation claims cannot be processed without details of the damage and of the injured party.

What’s the basis for collecting data?

We only collect and process personal data on the basis of an authorisation provided by the injured party, who authorises us to obtain the details that are necessary for processing the claim by completing the notice of injury form. Consent in the case of minor children is given by a parent or guardian.

What is the source of the personal data that we collect?

The details necessary for processing a compensation claim are mainly obtained from health service institutions and health care professionals that have treated the injured party. Information may also be obtained where necessary from public authorities (e.g. tax authorities) and from other insurance companies or institutions (e.g. the Social Insurance Institution of Finland (Kela) and Patient Insurance). Information may also be obtained from the employer of the injured party if the insurance covers compensation for lost earnings.

What information do we collect?

We only collect information that is essential for settling the claim. Such information includes the name, date of birth and address details of the injured party. Information on the pharmaceutical product damage is required for processing a claim, meaning details of use of the pharmaceutical product and of the damage suffered, including medical records.

The information required for disbursement of compensation includes bank account details and details of taxation and earnings.

Pharmaceutical insurance is a secondary compensation system, meaning that any benefits from public funds or statutory insurance to which the injured party is evidently entitled are deducted from the compensation paid from pharmaceutical insurance. We also process information related to such benefits in order to calculate the correct entitlement to compensation.

We only collect and save the information that is necessary for processing the claim, and we endeavour to ensure that the details submitted to us are current and correct.

How long do you keep the information?

Personal data are kept for as long as is necessary for processing the claim or as long as the legislation requires.

Personal data on claimants is kept until 110 years have elapsed from the claimant’s date of birth, but for not less than 10 years after the last compensation payment.

Tax information is kept for 6 years, reckoned from the end of the tax year.

Who is authorised to process personal data?

Injury notifications and compensation claims are processed by staff working in the company’s claims department. Processing of personal data is restricted to a strictly necessary staff segment and any release of sensitive data is prohibited. Only staff working in the claims department may access the associated personal data, systems and documents. The data access of staff involved in compensation disbursement is restricted to ensure that such staff may only access information that is essential for paying compensation, such as the name and bank account number of the payee.

Are personal data released to outsiders?

Personal data may generally be released only with the express consent of the injured party, but may also be disclosed to parties outside of the Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities where so permitted or required by statute. Information may be disclosed to public authorities such as the tax administration and the Social Insurance Institution of Finland (KELA) and to other insurance institutions when the said institution has either a statutory right to the information or the express consent of the data subject.

Personal data may also be disclosed to a reinsurance company of the Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities in cases of reinsurance, i.e. when a reinsurance company is also involved in paying the compensation.

No data are released to parties outside of the European Union or the European Economic Area.

What are my rights?

The right of access to information

You are entitled to know whether we are processing your personal data.

If any personal data are processed, then you are entitled to a copy of the data and to inspect the data.

Right to rectify information

You are entitled to ask the Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities to rectify any incorrect personal data and to complete any details that may be missing. Please note that such rectification may only concern incorrect or incomplete details that the Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities has recorded. Correction and completion of any error or omission in a document originally created by some other party, such as a healthcare institution, must be requested from that party.

Right to deletion of data (right to be forgotten)

You are entitled to request the deletion of personal data. If you have submitted a notice of injury on which the Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities has not yet issued a decision, then you may withdraw this notice and we will delete your information on request. We cannot delete your information if we have already issued a decision based on your notice of injury, but will keep it as described above under the heading How long do you keep the information?

Right to restrict processing of personal data

The Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities only uses personal data to discharge the purpose for which it was released to the company. You are entitled to restrict the use of your personal data in processing a compensation claim. Any such restriction then terminates processing of the claim.

Right to transfer information between systems

The Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities processes pharmaceutical injury notifications  and compensation claims in Finland. We may release your information to another party at your request, which must be submitted in writing.

Right to object to processing of personal data

You are entitled to object to the processing of your personal data insofar as such processing is based on discharging the legitimate interests, such as a customer relationship, of the Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities or of a third party. You are also entitled, at any time, to object to the processing of your personal data for the purposes of direct marketing and for profiling.

The Finnish Mutual Insurance Company for Pharmaceutical Injury Indemnities does not release information for any marketing purposes, nor are personal data used for any kind of profiling.

Right of complaint

You may complain to the Data Protection Ombudsman if you regard any processing of personal data as contrary to current legislation.

Read more