[et_pb_section fb_built=”1″ admin_label=”Header” _builder_version=”4.24.3″ _module_preset=”default” use_background_color_gradient=”on” background_color_gradient_direction=”90deg” background_color_gradient_stops=”rgba(255,255,255,0.52) 3%|rgba(0,0,0,0.2) 45%” background_color_gradient_overlays_image=”on” background_image=”https:\/\/migrate.luottoposti.fi\/wp-content\/uploads\/2024\/02\/close-up-businessman-standing-balcony-typing-message-mobile-phone-scaled.jpg” background_position=”center_left” custom_padding=”89px||8px|||” locked=”off” collapsed=”on” global_colors_info=”{}”][et_pb_row _builder_version=”4.24.2″ _module_preset=”default” custom_padding=”1px||7px|||” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.24.2″ _module_preset=”default” custom_padding=”||0px||false|false” global_colors_info=”{}”][et_pb_text _builder_version=”4.27.7″ _module_preset=”841afe49-6367-4bad-a857-ce0d1dbf4b0f” header_font=”Noto Serif|700|||||||” header_text_align=”center” header_text_color=”#FFFFFF” header_2_font=”Noto Serif|700|||||||” header_text_shadow_style=”preset3″ header_text_shadow_color=”rgba(84,84,84,0.4)” global_colors_info=”{}”]<\/p>\n
[\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ use_custom_gutter=”on” make_equal=”on” _builder_version=”4.24.2″ _module_preset=”default” custom_margin=”|auto|31px|auto||” custom_padding=”||||false|false” global_colors_info=”{}” gutter_width__hover_enabled=”off|desktop”][et_pb_column type=”1_2″ _builder_version=”4.24.2″ _module_preset=”default” custom_padding=”0px||0px||false|false” global_colors_info=”{}”][\/et_pb_column][et_pb_column type=”1_2″ _builder_version=”4.22.0″ _module_preset=”default” custom_padding=”0px||0px||false|false” global_colors_info=”{}”][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fb_built=”1″ admin_label=”Contact Info” _builder_version=”4.27.4″ background_color=”#f7f7f7″ min_height=”810.6px” custom_padding=”22px||12px|||” locked=”off” global_colors_info=”{}”][et_pb_row _builder_version=”4.22.0″ _module_preset=”default” custom_margin=”7px|auto||auto||” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.22.0″ _module_preset=”default” global_colors_info=”{}”][et_pb_cta title=”B2C Customer Register” button_text=”Click Here” _builder_version=”4.27.7″ _module_preset=”default” header_font=”Noto Serif|700|||||||” header_text_align=”left” header_font_size=”26px” header_line_height=”1.3em” body_font=”Noto Sans|300|||||||” body_font_size=”16px” background_color=”#FFFFFF” background_layout=”light” custom_padding=”||15px|||” hover_enabled=”0″ border_radii=”on|5px|5px|5px|5px” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n
Data Controller<\/strong> Contact Person for Register Matters<\/strong> Register<\/strong> Date of Preparation<\/strong> Legal Basis for Processing<\/strong> Purpose of the Processing of Personal Data<\/strong> Basis of Legitimate Interest<\/strong> Categories of Personal Data<\/strong> Recipients and Categories of Recipients<\/strong> Contents of the Register<\/strong> Regular Sources of Personal Data<\/strong> Regular Sources of Personal Data<\/strong> Retention Period for Personal Data<\/strong> Regular Disclosure of Personal Data<\/strong> Transfers of Personal Data Outside the EU or EEA<\/strong> Principles of Register Protection<\/strong> B: Electronic Records<\/strong> Cookies<\/strong> The following information may be collected through cookies: Your Rights<\/strong> Automated Decision-Making and Profiling<\/strong> Right of Access to Personal Data<\/strong> Right to Data Portability<\/strong> Right to Request Rectification of Data<\/strong> Right to Restriction of Processing<\/strong> Right to Object<\/strong> Right to Lodge a Complaint with the Supervisory Authority<\/strong> Contact Details of the National Supervisory Authority<\/strong> Other Rights Relating to the Processing of Personal Data<\/strong> [\/et_pb_cta][et_pb_image src=”https:\/\/www.luottoposti.fi\/wp-content\/uploads\/2026\/08\/GDPR-D-Fence-English.png” alt=”GDPR Compuance” title_text=”GDPR D-Fence-English” url=”https:\/\/www.d-fence.fi\/tietosuojasertifikaatti\/” url_new_window=”on” align=”center” _builder_version=”4.27.7″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":" B2C Customer RegisterData ControllerTK Talous Oy (0925979-9)Luvakuja 1621260 Raisio Contact Person for Register MattersKari Virtanenkari.virtanen(at)tktalous.fi RegisterB2C Customer Register Date of Preparation2024-10-28 Legal Basis for ProcessingContract and Legitimate Interest Purpose of the Processing of Personal DataThe purpose of the register is to maintain the organisation’s B2C customer register, administer, archive and process customer orders, and manage […]<\/p>\n","protected":false},"author":3,"featured_media":841,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","iawp_total_views":0,"footnotes":""},"class_list":["post-6949","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"\n
TK Talous Oy (0925979-9)
Luvakuja 16
21260 Raisio<\/p>\n
Kari Virtanen
kari.virtanen(at)tktalous.fi<\/p>\n
B2C Customer Register<\/p>\n
2024-10-28<\/p>\n
Contract and Legitimate Interest<\/p>\n
The purpose of the register is to maintain the organisation’s B2C customer register, administer, archive and process customer orders, and manage customer relationships. The information may be used for the development of operations, statistical purposes and the provision of more personalised targeted content within our online services. Personal data are processed within the limits permitted and required by the General Data Protection Regulation (GDPR). The information contained in the register may be used within the organisation’s own registers, for example for targeted advertising, without disclosing personal data to external parties. The organisation may use partners to maintain customer and service relationships, in which case parts of the register data may be transferred to the partners’ servers due to technical requirements. The information is processed solely for the purpose of maintaining the customer relationship with the Data Controller’s organisation through technical interfaces. The organisation has the right to publish information contained in the customer register in the form of an electronic or printed directory unless the customer specifically prohibits such publication. In this context, a directory refers, for example, to mailing labels for direct marketing or similar purposes. The customer has the right to prohibit the publication of their information by notifying the Data Controller’s customer service, by email or by contacting the contact person for the register.<\/p>\n
If the processing is based on Legitimate Interest:
The Data Controller’s Legitimate Interest in processing the collected and processed personal data is based on the freedom to conduct a business. The Data Controller must process personal data in order to carry out activities related to its business operations. In this context, the processing of personal data cannot necessarily be justified on the basis of a legal obligation or a contract concluded with the individual.
Following a Legitimate Interest Assessment (LIA), the Data Controller has concluded that Legitimate Interest is the most appropriate legal basis for processing, taking into account the nature and scope of the processing and the rights and freedoms of the data subjects. The Data Controller has assessed that processing based on Legitimate Interest does not cause significant harm to the rights and freedoms of the individuals concerned (data subjects).<\/p>\n
Personal data relating to customers.
Customer user information.<\/p>\n
The Data Controller’s personnel and, where applicable, outsourced service providers (financial administration).<\/p>\n
The personal data register contains the following information:
\u2022 First name and surname
\u2022 Email address
\u2022 Postal address
\u2022 Telephone number
\u2022 Website address
\u2022 IP address
\u2022 Information relating to previous orders
\u2022 Login information where this functionality has been made available to the customer<\/p>\n
Information is obtained from customer registrations and from notifications made by customers during the customer relationship. Updates to names and contact details are also obtained from authorities and companies providing update services.<\/p>\n
Information may also be obtained from subcontractors involved in the provision or use of the service. Information relating to customers’ activities in digital environments may also be obtained from partner websites, information systems or other digital sources accessed via electronic invitations, cookies or credentials provided to customers. The information contained in the customer register is used solely by the organisation, except where an external service provider is engaged to provide value-added services or to support credit decision-making. Personal data are not disclosed outside the organisation or to its partners, except where necessary in connection with credit applications, debt collection or invoicing, or where disclosure is required by law. The data subject’s personal data will be deleted at the request of the data subject unless legislation, outstanding invoices or debt collection procedures prevent their deletion.<\/p>\n
10 years from the termination of the customer relationship.<\/p>\n
The information contained in the customer register is used solely by the organisation, except where an external service provider is engaged to provide value-added services or to support credit decision-making. Personal data are not disclosed outside the Data Controller or to its partners, except where necessary in connection with credit applications, debt collection or invoicing, or where disclosure is required by law. The data subject’s personal data will be deleted at the request of the data subject unless legislation, outstanding invoices or debt collection procedures prevent their deletion.<\/p>\n
The information contained in the register is not regularly transferred outside the European Union (EU) or the European Economic Area (EEA).
However, it is possible that processing involves service providers located outside the EU\/EEA or that the cloud services used by service providers are located outside the EU\/EEA. In such cases, transfers are based on the European Commission’s Standard Contractual Clauses (SCCs).
Additional safeguards have also been implemented for such transfers, including internal guidance on the pseudonymisation of personal data and similar protective measures, as well as, where necessary, a Transfer Impact Assessment (TIA).
Where an organisation processing personal data has committed to the EU\u2013US Data Privacy Framework (DPF), this will be used as the legal basis for the transfer for as long as the framework remains in force.<\/p>\n
A: Manual Records<\/strong>
Contact details collected during customer interactions and other manually processed documents containing customer information are stored, following their initial processing, in locked and fire-resistant storage facilities. Only specifically authorised employees who have signed a confidentiality agreement are entitled to process manually stored customer information. The protection and processing of the information contained in the register comply with the provisions and principles of data protection legislation, the requirements of the competent authorities and good information management practice.<\/p>\n
Only specifically authorised employees of the organisation and companies acting on its behalf are entitled to access the customer owner register and customer register and to maintain the information contained therein. Each authorised user has a personal username and password. Every user has signed a confidentiality agreement. The system is protected by a firewall that safeguards it against unauthorised external access. The protection and processing of the information contained in the register comply with the provisions and principles of data protection legislation, the requirements of the competent authorities and good information management practice.<\/p>\n
We use cookies on our website. A cookie is a small text file that is sent to and stored on the user’s computer. Cookies do not damage users’ computers or files. The primary purpose of cookies is to improve and personalise the visitor’s experience of the website, as well as to analyse and improve the website’s functionality and content. Information collected through cookies may also be used to target communications and marketing activities and to optimise marketing measures. Visitors cannot be identified solely by means of cookies. However, information obtained through cookies may be linked to information that the user has provided in another context, for example when completing a form on our website.<\/p>\n
\u2022 Visitor’s IP address
\u2022 Date and time of the visit
\u2022 Pages viewed and time spent on those pages
\u2022 Visitor’s web browser<\/p>\n
Visitors to our website may prevent the use of cookies at any time by changing their preferences in the cookie banner. Some web browsers also allow cookies to be disabled and previously stored cookies to be deleted. Disabling cookies may affect the functionality of the website.<\/p>\n
The personal data processed are not subject to profiling or automated decision-making.<\/p>\n
The data subject has the right to verify what personal data relating to them are contained in the register. The request for access must be submitted in writing by contacting the Data Controller’s customer service or the contact person for the register in Finnish or English. The request must be sent from a verifiable email address. The data subject has the right to prohibit the processing and disclosure of their personal data for the purposes of direct advertising, distance selling, direct marketing, market research and opinion surveys by contacting the Data Controller’s customer service.<\/p>\n
The data subject has the right to transfer their personal data from one system to another. Requests relating to data portability may be addressed to the contact person for the register.<\/p>\n
Personal data contained in the register that are incorrect, unnecessary, incomplete or outdated in relation to the purpose of the processing must be rectified, erased or completed. A request for rectification must be submitted in writing, signed by hand, to the organisation’s customer service or the administrator of the personal data register, or sent from a verifiable email address. The request must specify which data are to be rectified and the grounds on which the rectification is requested.
The rectification shall be carried out without undue delay. The party from whom the incorrect data were obtained, or to whom the data were disclosed, shall be notified of the rectification. If a request for rectification is refused, the person responsible for the register shall provide a written certificate stating the reasons for the refusal. The data subject may refer the refusal to the Office of the Data Protection Ombudsman for consideration.<\/p>\n
The data subject has the right to request the restriction of processing, for example if the personal data contained in the register are inaccurate. Requests should be addressed to the person responsible for the register.<\/p>\n
The data subject has the right to object to the processing of personal data concerning them and to request the rectification or erasure of their personal data.
Requests may be addressed to the contact person for the register.
If you act as the contact person for a company or organisation, your personal data cannot be erased during this period.<\/p>\n
If you believe that the processing of your personal data infringes the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with the supervisory authority. You may also lodge a complaint with the supervisory authority in the Member State where you have your habitual residence or place of work.<\/p>\n
Office of the Data Protection Ombudsman
Visiting address: Lintulahdenkuja 4, FI-00530 Helsinki
Postal address: P.O. Box 800, FI-00531 Helsinki
Telephone (switchboard): +358 29 566 6700
Registry: +358 29 566 6768
(tietosuoja@om.fi)
(https:\/\/tietosuoja.fi)<\/p>\n
The data subject has the right to prohibit the disclosure and processing of their personal data for direct marketing and other marketing purposes, to request the anonymisation of their personal data where applicable, and to exercise the right to be forgotten.<\/p>\n