Privacy policy | Hämeenkyrön Tili- ja Kiinteistöpalvelu Oy

1. Controller

The controller is Hämeenkyrön Tili- ja Kiinteistöpalvelu Oy, Business ID 0398582-9, Sivutie 2, 39200 Kyröskoski, Finland. You can contact us about privacy matters by email at admin@hameenkyrontilijakiinteistopalveluoy.com, by phone on +358 45 101 8293, or by post to the address above.

2. Personal data we process

Enquiries: the name, email address, optional phone number and message you send us through the contact form, by email or by phone.
Client relationships: the names, contact details and roles of client contact persons, and the information needed to perform the agreed accounting, payroll and tax services.
Technical data: the IP address, browser type, time of visit and requested page, which the web server records in its logs when you visit the site.
Cookie choice: your cookie consent choice and the date it was made, stored in your own browser.
Advertising measurement (only with consent): cookie identifiers and information about your visit collected by Microsoft Advertising Universal Event Tracking (UET), such as the pages viewed and whether you came from one of our ads.

3. Purposes and legal bases

Purpose	Legal basis (GDPR)
Answering enquiries and preparing offers	Steps taken at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in replying to messages (Art. 6(1)(f))
Providing the agreed services and managing the client relationship	Performance of a contract (Art. 6(1)(b))
Keeping accounting records and meeting other statutory obligations	Legal obligation (Art. 6(1)(c))
Running the website securely and preventing misuse	Legitimate interest (Art. 6(1)(f))
Remembering your cookie choice	Legal obligation to record consent (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f))
Measuring our Microsoft Advertising campaigns	Your consent (Art. 6(1)(a)), which you can withdraw at any time

When we process the personal data of our clients’ employees or other persons in the course of payroll or bookkeeping, we do so on behalf of the client as a processor, under the terms agreed with that client.

4. How long we keep data

Enquiries that do not lead to an assignment are deleted no later than 24 months after the last contact.
Client relationship data is kept for the duration of the relationship and as long as necessary afterwards to handle possible claims.
Accounting records are kept for the periods required by the Finnish Accounting Act: generally 10 years for the books and financial statements and 6 years for vouchers and related material.
Web server logs are kept only as long as needed for security and troubleshooting.
Your cookie choice is stored in your browser for 12 months, after which we ask again.
Microsoft UET cookies: _uetsid 1 day, _uetvid 13 months, MUID about 1 year. See the cookie policy.

5. Recipients and processors

We do not sell personal data. We use carefully selected service providers that process data on our behalf under data processing agreements. By category, these are:

website hosting providers;
email and office software providers;
accounting and payroll software providers;
IT support and data security providers.

We also disclose data to authorities where the law requires it, for example when we submit tax returns and reports on behalf of a client.

Microsoft: if you accept advertising cookies, Microsoft Corporation and Microsoft Ireland Operations Limited receive data about your visit through the Microsoft Advertising UET tag. Microsoft uses this data to measure the performance of our ads and in accordance with its own privacy statement. The legal basis is your consent.

6. Transfers outside the EU and EEA

Data collected through Microsoft Advertising may be transferred to the United States. Microsoft Corporation is certified under the EU-US Data Privacy Framework, and transfers are based on the European Commission’s adequacy decision for that framework. Where any other service provider transfers data outside the EU or EEA, we require appropriate safeguards, such as the European Commission’s standard contractual clauses.

7. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have data erased, where there is no legal reason for us to keep it;
restrict processing in certain situations;
object to processing based on our legitimate interest;
receive data you have given us in a machine-readable format (data portability), where processing is based on consent or contract;
withdraw your consent at any time, without affecting processing carried out before the withdrawal. For cookies, use the Cookie settings link.

To use your rights, contact us at admin@hameenkyrontilijakiinteistopalveluoy.com. We reply within one month.

8. Supervisory authority

If you believe that we process your personal data unlawfully, you can lodge a complaint with the Finnish supervisory authority: the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Lintulahdenkuja 4, 00530 Helsinki, tietosuoja.fi (opens in a new tab).

9. Security

We protect personal data with appropriate technical and organisational measures, including access restrictions, user authentication and encrypted connections. Only people who need the data for their work can access it.

10. Changes

We update this policy when our practices or the law change. The date of the latest version is shown at the top of this page.