This Privacy Notice explains how DHS Oy Audit Partners processes personal data on its website, in client relationships and in connection with enquiries. Personal data is processed in accordance with the EU General Data Protection Regulation, Finnish data protection legislation and other applicable laws.

1. Controller

DHS Oy Audit Partners
Tekniikantie 12
02150 Espoo
Y-tunnus: 2483529-9
Email: tapani.vuopala@dhsaudit.fi
Telephone: 020 700 7200

For questions concerning the processing of personal data, you may contact us using the contact details above.

2. Name of the register

DHS Oy Audit Partners’ client, enquiry and marketing register.

3. Purposes of processing personal dataet

We process personal data for the following purposes:

• responding to enquiries
• managing and maintaining client relationships
• providing, carrying out and developing our services
• preparing, managing and documenting assignments
• invoicing and client administration
• fulfilling statutory obligations
• ensuring the functionality and security of the website
• communication and possible client or stakeholder marketing
• preventing misuse and handling legal claims

Personal data is processed only to the extent necessary for the purposes described above

4. Legal bases for processing

Depending on the situation, the processing of personal data may be based on:

• the data subject’s consent
• the preparation or performance of a contract
• compliance with a legal obligation
• the controller’s legitimate interest, such as managing client relationships, responding to enquiries, developing services and organising business operations appropriately

Where processing is based on consent, the data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Personal data processed

We may process, for example, the following personal data:

• name
• company or organisation
• position or job title
• email address
• telephone number
• address details
• content of enquiries and communication-related information
• information related to client relationships and assignments
• information related to invoicing and contracts
• marketing consents and objections
• technical data generated by the use of the website, such as data related to cookies and analytics, if such tools are used

As a rule, we do not request sensitive personal data through the website contact forms. We ask that unnecessary personal data or confidential documents are not submitted through the contact form.

6. Regular sources of personal data

Personal data is primarily obtained from:

• the data subject in connection with an enquiry, form submission, email, phone call or meeting
• the client relationship or assignment public sources, such as company websites, the Trade Register or other official registers
• use of the website through technical identifiers and cookies, if cookies or analytics tools are used

7. Disclosures and recipients of personal data

Personal data is processed by DHS Oy Audit Partners’ employees and representatives only to the extent required by their duties.

We may use trusted service providers in the processing of personal data, such as providers related to website maintenance, email, IT systems, client management, accounting or other technical services. In such cases, the service providers process personal data on behalf of DHS Oy Audit Partners and in accordance with our instructions.

Personal data may be disclosed to authorities or other parties where required by law, an official order, a legal obligation or the handling of legal claims.

We do not sell personal data to third parties.

8. Transfers of personal data outside the EU or EEA

We aim to process personal data primarily within the EU and EEA. If personal data is transferred outside the EU or EEA, for example due to a service provider we use, we ensure that the transfer has a lawful basis under the General Data Protection Regulation, such as the European Commission’s standard contractual clauses or another applicable safeguard.

9. Retention period

We retain personal data only for as long as necessary for the purposes described in this Privacy Notice or as required by law.

Retention periods may vary depending on the category of data. For example:

• data related to enquiries is retained for as long as necessary to handle the matter
• data related to client relationships and assignments is retained for the duration of the client relationship and thereafter to the extent necessary due to statutory obligations, documentation obligations or legal claims
• data related to accounting and invoicing is retained for the period required by accounting legislation
• data related to marketing is retained until the data subject withdraws their consent or objects to marketing, unless longer retention is justified on another lawful basis

Unnecessary and outdated data is deleted or anonymised appropriately.

10. Protection of personal data

Personal data is protected by appropriate technical and organisational measures. Data is processed only on the basis of access rights, and access to the data is restricted to persons whose duties require the processing of such data.

Where necessary, we use measures such as user IDs, passwords, access control, backups, system protection and confidentiality obligations to protect personal data.

11. Rights of the data subject

Under data protection legislation, the data subject has the right to:

• receive information about the processing of their personal data
• request access to personal data concerning them
• request rectification of inaccurate or incomplete data
• request erasure of data in situations where there is no longer a lawful basis for processing
• request restriction of processing object to the processing of personal data where processing is based on legitimate interest object to direct marketing
• request the transfer of data provided by them from one system to another, where the applicable conditions are met withdraw consent where processing is based on consent

Requests concerning the exercise of these rights may be submitted to the controller using the contact details provided above. Where necessary, we may request additional information to verify the identity of the person making the request.

If you consider that the processing of your personal data infringes data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

12. Cookies

Our website may use cookies and similar technologies to ensure the functionality of the website, improve user experience, analyse website traffic and, where applicable, for marketing purposes.

Necessary cookies are required for the functioning of the website. The use of cookies other than necessary cookies is based on consent where required by applicable legislation.

Further information about the use of cookies is provided, where necessary, in a separate cookie policy or cookie banner.

13. Changes to this Privacy Notice

We may update this Privacy Notice from time to time, for example due to changes in legislation, services, the website or personal data processing practices.

The current Privacy Notice is available on our website.