Why does Suomisport need my personal identity code?

Modified on Wed, 25 Mar at 12:31 PM

Suomisport is the sports community’s own digital service platform, with over 1 000,000 Finnish participants registered. Each participant creates their own Suomisport account (Sporttitili) when registering.

You register to Suomisport using an email address or mobile phone number. In addition, the service asks for your personal identity code (henkilötunnus) so that the service can uniquely identify every user.

Your personal identity code is used only once, for uniquely identifying you at the time of your first registration. Collecting the personal identity code for identification is necessary and lawful in the service.

Why the personal identity code is needed for identification

There are over 1 000,000 registered users in Suomisport. Many users share the same names.
In the service, a user manages both their own and their dependents’ matters across sports and organizations using the same Suomisport account. When duplicate accounts don’t exist, the experience is clear and straightforward. On your Suomisport account, you will always find your own personal and transaction details.
Dependents are always linked to the correct parent/guardian. It is a dependent’s right to be linked to the correct guardian.
When using Suomisport, people commit to the rules of associations (clubs, federations, and other organizations). With the purchase of a competition license/player pass, they also commit to competition rules or anti-doping regulations. It must be known exactly who they are. From the perspective of the association or event organizer (the data controller), it is important that the person who made the commitment is indeed the same person who registered in Suomisport.
Through Suomisport, various payments are made and committed to, and personal reminders and notifications about payments are sent automatically. Unambiguous identification is important for both the data subject and the data controller to ensure that payments and their reminders are directed to the right people.

How we protect your personal identity code

Providing your personal identity code is safe thanks to Suomisport’s high-quality, audited information security. The personal identity code is encrypted before it is stored in the service. The personal data requested when creating the Suomisport account—such as the personal identity code—are processed in accordance with the service’s Terms of Use. The personal identity code is processed only in accordance with the law (Data Protection Act 5.12.2018/1050, Section 29 – Processing of personal identity codes) and is not otherwise shared or processed within the Suomisport service.

The personal identity code is visible, when necessary, only to the system administrator, and only for correcting error situations.

At registration, the Suomisport service creates your Suomisport account and a Sportti ID. The Sportti ID is your identifier when using Suomisport, regardless of sport or user role. The Sports ID is not traceable to your personal identity code.

We continuously take care of the service’s information security. The Suomisport web version and mobile apps (Android, iOS) were security tested in 2024. The technical security testing was performed by WithSecure. The tested security level was OWASP ASVS Level 3. The technical provider complies with the ISO‑9001 and ISO‑27001 standards.