Privacy Policy

Published / Updated: 11.9.2026 

This privacy policy is drawn up in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act. It concerns the customer, marketing, stakeholder, and assignment registers of Tilinviilaaja. 

 

  1. DATA CONTROLLER
  • Company: Tilinviilaaja Oy (3625067-7) 
  • Address: Kelantie 2, 93600 Kuusamo 
  • Phone number: 041 319 0119 
  • Email: piritta@tilinviilaaja.fi 
  • Website: www.tilinviilaaja.fi 

 

  1. CONTACT PERSON FOR DATA PROTECTION MATTERS
  • Name: Piritta Peltoniemi 
  • Email: piritta@tilinviilaaja.fi 

 

  1. NAME OF THE REGISTER

Tilinviilaaja’s Customer, Marketing, Stakeholder, and Assignment Processing Register. 

 

  1. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

Personal data is processed for the following purposes: 

  • Execution of Contract and Customer Relationship Management: Establishing customer relationships, communication, delivery of services, and invoicing. 
  • Performance of Assignments (Legal Obligation / Contract): Providing accounting, taxation, payroll, and HR services to client companies. In this role, Tilinviilaaja primarily acts as a Data Processor on behalf of the client company (the Data Controller). 
  • Legitimate Interest: Direct marketing of our services, newsletters, and responding to contact requests. 

 

  1. DATA CONTENT OF THE REGISTER

The following data may be stored in the register: 

  • Clients and Contact Persons: Name, company name, business ID (Y-tunnus), phone number, email address, postal address, invoicing details, and communication history related to the customer relationship. 
  • Assignment-related Data (Employees and stakeholders of client companies): For payroll and HR services: names, personal identity codes (SSN), bank account numbers, salary details, tax cards, trade union memberships (special categories of data regarding union memberships and sickness absences), and time-tracking data. 

 

  1. REGULAR SOURCES OF DATA

Data is collected: 

  • Directly from the data subject via email, phone, website forms, or when entering into agreements. 
  • From the client company (the employer) regarding their employees' payroll and HR data. 
  •  From public registers, such as the Finnish Business Information System (YTJ/PRH). 

 

  1. REGULAR DISCLOSURES AND TRANSFERS OF DATA

Data is not disclosed to third parties for commercial purposes. Data is regularly disclosed only to: 

  • Authorities: The Finnish Tax Administration and the Incomes Register (Tulorekisteri) to fulfill statutory obligations. 
  • Software Partners (Data Processors): We use secure, cloud-based financial management software Fennoa ja Procountor, where data is stored. 
  • Data is not routinely transferred outside the European Union (EU) or the European Economic Area (EEA). If a transfer occurs due to the technical implementation of software services (e.g., secure cloud storage), data protection is guaranteed using EU Standard Contractual Clauses (SCC). 

 

  1. DATA SECURITY AND RETENTION PERIOD
  • Manual Material: Paper material is generally not maintained. Any temporary physical material is kept in locked premises accessible only by the data controller. 
  • Digital Material: Information systems, computers, and software are secured with personal user IDs, strong passwords, two-factor authentication (2FA), and firewalls. 
  • Retention Period: Personal data is retained only as long as necessary to manage the customer relationship or assignment, or as required by applicable laws (e.g., the Finnish Accounting Act or labor legislation). 

 

  1. RIGHTS OF THE DATA SUBJECT

Data subjects have the right to: 

  1. Access the personal data stored about them. 
  1. Request the rectification of inaccurate outdate or incomplete data. 
  1. Request the restriction of processing or object to the processing of their data. 
  1. Withdraw their consent at any time (if processing is based on consent). 
  1. Lodge a complaint with the Data Protection Ombudsman (www.tietosuoja.fi) if they believe their data has been processed in violation of valid data protection legislation. 

All requests regarding these rights must be submitted in writing to the contact person listed in Section 2 via email. 

 

  1. COOKIES

Our website www.tilinviilaaja.fi may use cookies to improve user experience and monitor site traffic. Users can disable cookies through their browser settings if they wish.