The Financial Expertise Centre considers privacy important and would like to inform you about the processing of personal data.

Privacy Statement
Data Processing by Partnerships Act

The Financial Expertise Centre is a partnership that is regulated in the Data Processing by Partnerships Act and consists of government organizations and several private parties.

In this privacy statement, you will find information about the following topics:

The Financial Expertise Centre in brief
The legal framework for the processing of personal data
Who is responsible for the processing of personal data
Internal supervision of the processing of personal data
The purpose of processing personal data
The legal basis for processing personal data
The categories of personal data processed
The origin of personal data
Parties to whom data may be provided
Data storage periods
Your rights concerning your personal data

The Financial Expertise Centre has three forms of cooperation: regular cooperation, a terrorism financing programme, and public-private partnerships in taskforces.

In regular cooperation, seven public partners work together to address risks to the financial sector’s integrity. These partners already process personal data as part of their legal duties and are allowed to do so jointly under the applicable legislation.

In the terrorism financing programme, public participants cooperate in identifying risks related to terrorist financing within the financial sector. All processing is done within the scope of their legal responsibilities.

In taskforces addressing serious crime and terrorism financing, public partners work with private entities to prevent and combat financial and economic crime. Private parties participate under obligations from relevant laws and in pursuit of shared goals.

The legal framework for personal data processing includes the General Data Protection Regulation, its implementation act, the Data Processing by Partnerships Act, and the corresponding decree.

In regular cooperation, the joint responsibility lies with seven public authorities.

In the terrorism financing programme, additional public participants also share responsibility.

In the taskforces, specific public authorities and private financial institutions share responsibility for data processing.

Most participants have appointed a Data Protection Officer who advises and supervises data processing. A coordinating officer has been designated for the partnership.

Contact with the coordinating officer can be made via email or post. (Contact details have been removed.)

In regular cooperation, data is processed to assess risks to the integrity of individuals or entities in the financial system. This includes actions related to crime or terrorist financing.

In the terrorism financing programme, data is processed specifically to assess terrorist financing risks.

In the taskforces, data is processed to help prevent and combat criminal use of the financial system.

The legal basis for processing exists in the public tasks and powers of the participants. Private parties process data under legitimate interest aligned with their legal duties.

Personal data processed may include identifying data, financial data, information on associations and transactions, criminal records, and related intelligence.

Data is obtained only from participating entities or from other legally defined partnerships.

Participants provide the data they hold. Other partnerships may also share information under specific coordination conditions.

Data may be shared with participants, third parties, or other partnerships if it aligns with the processing purpose.

Information may be shared for identification, coordination, or intervention planning between partnerships.

Data is anonymized or deleted when it is no longer needed, or five years after processing unless legally required for longer retention or for legal claims.

You have rights to access, correct, delete, restrict, or object to the processing of your data.

Requests must be signed and include proof of identity. You may use a redacted copy of ID.

You may also file a complaint with the national data protection authority.

The website of the Financial Expertise Centre logs session data for statistical purposes. This data is anonymous and used only for website improvement.

Personal data submitted through the website is only used for its intended purpose and is not shared, except in legally required cases.

The contact details of data protection officers of the participants have been removed