Privacy Policy

1. General

This privacy policy (“Privacy Policy”) describes how personal data are processed and protected at KH Tax Services Oy in accordance with the applicable legislation and good data processing practices.

We process personal data when we are contacted regarding an assignment, when a person takes part in marketing campaigns or survey polls, or when we receive contact information through another party.

Personal data are also processed in carrying out and developing our services, in marketing and client communications, and in customer service.

2. Data controller and contact information

KH Tax Services Oy
Company ID 3237849-7

c/o Ever Clever Oy
Annankatu 2 A 2
FI-00120 Helsinki
Finland

info@kh.tax
www.kh.tax

Kirsi Hiltunen
Tel. +358 40 831 4344

3. Personal data that we process

We process personal data as necessary for the purposes described below. The purpose of use determines what type of data we collect and process. Moreover, the data that we process may vary depending on which of our services are used and how they are used. Thus one can himself or herself affect what data we process.

We may process data such as the following:

  • Name and contact information, such as first name and surname, address, phone number and email.

  • Demographic information, such as social security/identification number of private individuals.

  • Client relationship information, such as information about assignments, invoicing and payment information, and client communications, including feedback and cancellation information.

  • Marketing bans.

  • Job applications and other information received in connection with recruitment.

  • Other information collected with consent.

We may also process identifiers such as name, title/profession, contact information, and subject of interest after the termination of an assignment or when that information is received through another party.

4. Sources of information

We mainly collect personal information directly from the individual, a client representative, or a third party involved in the engagement, when we prepare or handle an engagement. We collect information during the preparation and management of the assignment, from feedback and contacts, or later during the customer relationship or cooperation.

Personal data may also be collected and updated from our partners’ registers, companies’ online services and applications, as well as from authorities and companies offering services related to personal data.

5. The purposes and legal foundation for processing personal data

We process our clients’ personal data to prepare for, manage, develop and administer client accounts. We process personal data to prepare and execute contractual relationships with clients, e.g. in handling assignments and providing customer service.

In addition, we process personal data in pursuit of our legitimate interests in marketing and developing our services.

We may also process personal data where applicable with consent and when we have a legal obligation to do so.

6. Regular data disclosures

We may disclose personal data when required by law, to the authorities among others.

We use subcontractors and service providers to process personal data and to technically maintain our systems. We disclose information to such partners for use only for the purposes we specify, and in addition, we oblige our partners to ensure, through contractual arrangements, an adequate level of data security and otherwise comply with applicable data protection laws.

We store personal data in the European Union (EU) and the European Economic Area (EEA). If the execution of the assignment requires the transfer of data outside the EU or the EEA, we will only use partners who process personal data on a similar basis as we do.

7. Retention period of personal data

We retain personal data for as long as is necessary to fulfill the defined uses in accordance with the legislation in force at the time.

For example, we retain information related to assignments for at least 10 years after the end of the assignment.

8. The rights of a data subject

A data subject has various rights concerning his/her personal data.

The data subject has access to his data with certain restrictions, the right to have the errors in our register corrected, a limited right to have personal data deleted and the right to restrict or object to the processing of the data. The data subject also has the right to withdraw his or her consent, the right to opt-out from future marketing and, in certain situations, the right to have the data transferred to himself or herself, or to a third party. A data transfer request may be refused in certain circumstances, such as if it is technically infeasible. In addition, the data subject has the right to lodge a complaint about the processing of personal data with the supervisory authority (https://tietosuoja.fi/en).

Please send questions and requests concerning the data subject's rights to the e-mail address info@kh.tax or by post to KH Tax Services Oy / Data Protection, c/o Ever Clever Oy, Annankatu 2 A 2, FI-00120 Helsinki, Finland.

9. Protecting personal data

We use the necessary technical security measures to protect personal information against unauthorized access, disclosure, destruction or other unauthorized processing. Such means include, e.g., firewalls, encryption technologies, controlled licensing and access control, and careful selection and guidance of subcontractors.

10. Modification of the Privacy Policy

We are constantly developing our services and privacy policies and reserve the right to change this Privacy Policy as necessary. Changes in the law and its interpretation may also necessitate changes.

Our up-to-date privacy statement can be found on our website.