Data protection

We collect the personal data of policyholders, i.e. employers and self-employed persons, the insured and pension applicants and recipients, and from official registers that Varma is legally entitled to use. We may also collect your personal information for different purposes based on your consent. You have the right to cancel your consent at any time. The cancellation of consent does not affect the legality of consent-based processing that took place prior to the consent being cancelled.

As part of its investment operations, Varma is a developer of rental properties and grants customer credit. In rental operations, personal data is gathered in order to manage the premises lease. In addition to the information provided by the credit applicants themselves, Varma verifies their credit information. Personal data on private customers and guarantors is compiled in the loan register.

We gather personal data expressly for the above-mentioned purposes and only to the extent that is necessary. We try to ensure that the data is accurate, complete and up-to-date.

The personal identity code is used as an identifier in Varma’s pension insurance operations, rental operations and granting of credit. When making pension decisions, we may also deal with sensitive data such as data concerning a person’s state of health.

Our customer phone calls are recorded, including our return phone calls. The recordings are used to ensure quality, verify transactions and develop our services. We use artificial intelligence to support the drafting of customer service call summaries and to convert automatic responses from speech to text. AI functions as an assistive tool, and the content it produces is reviewed. The person’s identification information is removed from telephone calls intended for training purposes. Discussions that take place in our Chat service are saved for to improve quality.

Phone call and Chat information is saved securely and in accordance with the data protection legislation. The information is processed in accordance with regulations that are binding on Varma and is not used for any other purpose.

Prosessing of your personal data at Varma

Everyone who has personal data in the registers maintained by the company has the right to check the data pertaining to themselves and to request that any erroneous data be corrected.

Read the descriptions of file for Varma’s personal data files

You can submit a review request to Varma by using the personal data request form.

The personal data in our registers can be disclosed to, for example, the Finnish Centre for Pensions and other parties implementing statutory pension cover and social security. Data is disclosed to authorities in accordance with the law. Data is not disclosed to outside parties. Unless expressly prohibited by the data subject, this information can be used for direct marketing purposes, in accordance with the regulations concerning the protection and processing of personal data valid at any given time. Varma may use subcontractors to process data.Subcontractors are required to sign a non-disclosure agreement, and personal data protection is secured through contractual arrangements. Varma can disclose personal data to the authorities of other social security agreement countries also outside the European Union when carrying out tasks related to earnings-related pension cover.