eID and consent

What is Electronic ID? 

Electronic ID (eID) is the digital secure solution that is used to sign digital documents and for strong authentication to online services. Admincontrol, through our supplier Signicat, supports the most common eIDs in the Nordics. Depending on the type of portal and your portal’s settings, and the type of eID you have, you can use your eID for strong authentication when logging into and signing documents within Admincontrol. 

Why do I need to provide consent to use Electronic ID in Admincontrol? 

When you use your eID for strong authentication or eSigning in Admincontrol, personal information related to the eID is stored by Admincontrol and processed by our supplier Signicat. This is done so that Admincontrol know the identity of the user and to let Signicat know which eID provider to check your identity with. 

In some cases, the data that is sent contains personal identifiers that is specifically protected under the General Data Protection Regulation (GDPR), and it requires your consent before we can store or process that information. This applies to Social Security Numbers (SSN) (also known as birth numbers or person/personal numbers) which is used to identify users of certain eIDs. Before you can add (or use) an eID that relies on your SSN, you will need to consent to Admincontrol storing your personal information and processing it through Signicat for these purposes. 

What happens if I don’t consent? 

If you don’t provide your consent, you cannot connect your eID to your profile or use it for strong authentication or sign documents with your personal eID in Admincontrol. If you do not provide your consent and later change your mind, you can reconnect your eID, provide your consent, and then start using your eID for authentication and eSigning in Admincontrol. 

What are the different roles? 

Controller: Defines purpose and means, and responsible for the collection of personal data​ 

Processor: Processes personal data on behalf of the Controller 

More information about Finnish BankID  

Your personal data connected with Finnish BankID will be processed by our identity broker Signicat AS, approved by Traficom (Finnish Transport and Communications Agency). 

In identification processes, Signicat acts as Data Processor according to EU data protection regulations. Signicat transmits the Personal ID number (Henkilötunnus, HETU), first name, last name and date of birth (extracted from HETU) according to Traficom’s decree 72. 

You can read more details at Signicat here.