The Act on Preventing Money Laundering and Terrorist Financing (28.6.2017/444, hereinafter the “AML Act”) imposes obligations on certain entities, referred to as obligated entities. Noja Rahoitus Oy is an obligated entity within the meaning of the AML Act and is therefore required to comply with the customer due diligence obligations set out in the law.
Under the AML Act, Noja Rahoitus Oy must reliably identify and know its customers. This includes, among other things, verifying the customer’s identity and obtaining the necessary information about the customer’s representatives, any politically exposed status, the customer’s beneficial owners, and the nature and extent of the customer’s business activities.
Noja Rahoitus Oy cannot establish a customer relationship, carry out an individual transaction, or maintain a customer relationship in situations where the information required by the AML Act cannot be adequately and reliably verified.
Information collected from customers
In order to fulfil its obligations under the AML Act, Noja Rahoitus Oy collects the customer due diligence information required by law from its customers before establishing a customer relationship, using a separate information request.
Noja Rahoitus Oy is also required to keep customer due diligence information up to date throughout the customer relationship. For this reason, the information request may be renewed periodically, as well as whenever changes occur in the customer’s information.
Information collected under the AML Act is retained for five (5) years from the end of the customer relationship.
Purpose of use
Information collected under the AML Act may be used to prevent, detect, and investigate money laundering and terrorist financing, as well as to support the investigation of related criminal offences.
Data protection and processing
The customer due diligence information collected is stored separately from other customer data in the secure, purpose-built Netvisor KYC system.
The information is processed confidentially in accordance with applicable legislation, including the AML Act and the EU General Data Protection Regulation (EU) 2016/679.
Contact information
Questions relating to Noja Rahoitus Oy’s anti-money laundering measures are handled by the company’s risk management team. For further information, please contact:
Customers may also contact their personal account manager if needed.
Frequently Asked Questions
Why does Noja Rahoitus Oy request this information?
Noja Rahoitus Oy is an obligated entity under the AML Act and has a statutory duty to identify and know its customers.
Why am I being asked for my personal identity number and bank account number?
The information requested is based on the requirements of the AML Act. Noja Rahoitus Oy only collects information that is necessary to fulfil its legal obligations.
The information collected is stored separately from other customer data in a secure information system and is processed confidentially in accordance with the AML Act and the EU General Data Protection Regulation.
How can I verify that the information request is genuine?
Care should be taken regarding the authenticity of messages sent by email.
All KYC information requests sent by Noja Rahoitus Oy are delivered from the address:
The validity of an information request can be confirmed by contacting your account manager or Noja Rahoitus Oy’s risk management team.
Am I required to respond to these questions?
Yes. Noja Rahoitus Oy cannot establish a customer relationship, carry out transactions, or maintain a customer relationship unless the information required by the AML Act has been reliably verified.
If a customer does not provide the requested information, Noja Rahoitus Oy cannot initiate or continue the customer relationship.
I have been a customer of Noja Rahoitus Oy for a long time. Do I still need to respond to the information request?
Yes. The AML Act requires obligated entities to keep customer due diligence information continuously up to date.
How quickly should I respond to the information request?
You should respond as soon as possible, but no later than 30 days from the date the information request was sent.
Who can respond to the information request?
The information request is primarily addressed to a person with signatory authority for the customer. If necessary, another representative of the customer may also respond, provided that the information given is confirmed by a person with signatory authority, or that the respondent has an appropriate power of attorney.
What should I do if I don’t have an email address or online banking credentials?
In this situation, the customer is asked to contact Noja Rahoitus Oy so that an alternative way of responding to the information request can be arranged.
What does KYC mean?
KYC stands for “Know Your Customer.” The term refers to the procedures required under the AML Act, the purpose of which is to identify the customer and ensure appropriate due diligence throughout the customer relationship.