Privacy Statement – Gift Card Service


1. Data controller / data controller’s contact information

S-Bank Plc

Postal address: S-Bank Plc,

PO Box 77, 00088 S-RYHMÄ

Visiting address: Fleminginkatu 34,

00510 HELSINKI Business ID: 2557308-3


2. Contact information for Data Protection Officer

S-Bank Group, Data Protection Officer

Postal address: S-Bank Plc,

PO Box 77, 00088 S-RYHMÄ



3. Name of register

Gift card service customer register


4. Purposes of, and legal basis for, the processing of personal data

We collect and store personal data of the contact persons of corporate customers and recipients of gift card orders for the purpose of processing, delivering and providing customer service for the order.

We process the personal data to carry out the legitimate interest of the data controller. Our legitimate interest is the execution of the agreement between the gift card service and the customer company in order to fulfil the order.


5. Personal data categories

We process the following personal data in the gift card service customer register:

  • name
  • telephone number
  • e-mail address


6. Personal data recipients

We process personal data in electronic systems and services for the purposes specified in this statement. We use subcontractors for the provision of the system and support services and may transfer personal data to them to the extent necessary to achieve the purposes of processing. We ensure that our partners provide an adequate level of protection for personal data as required by law.

We may also disclose personal data to the authorities in instances where this is legally mandated, such as when responding to requests for information from the authorities.


7. Transfer of personal data

Personal data is not transferred outside the European Union or the European Economic Area.


8. Personal data retention time, or criteria for determining retention time

The personal data provided when ordering a gift card will be removed from our register six months after the order is placed.


9. Sources and updating of personal data

We collect the personal data included in this register from the customer when they place a gift card order on our website or contacts our customer service.


10. Rights of the data subject

You have the right to obtain our confirmation as to whether your personal data is being processed or not. If we process your personal data, you have the right to receive a copy of such data. We are entitled to charge a reasonable administrative fee for additional copies requested by you.

If you make a request electronically, and have not requested any other delivery format, the data will be delivered in the electronic form that is generally in use, providing that the data can be delivered in a secure manner. We will deliver a copy of the personal data to be processed in electronic form by e-mail.

You also have the right to request that we correct or delete your personal data.

You also have the right, in certain situations, to request restrictions on the processing of your personal data, or otherwise to object to the processing of this data.

Please submit your requests related to the use of your rights by sending an e-mail to When requesting the use of your rights, please specify your name and any other information to identify the order or contact, such as the order number, the name of the company for which the order was made, or the time of the order, so that we can locate the relevant personal data in the register.

If you consider that the processing of your personal data is contrary to the law, you have the right to appeal the matter or contact the office of the Data Ombudsman, who acts as the supervisory authority (