Privacy and terms | HR-tilipalvelu Oy

Updated 9 September 2026.

This privacy policy document contains the types of information that is collected and recorded by HR-tilipalvelu and how we use it. If you have additional questions or require more information, do not hesitate to contact us.

This privacy policy applies only to our online activities and is valid for visitors to our website with regards to the information that they share and/or that is collected on our website. It is not applicable to any information collected offline or via channels other than this website.

By using our website, you hereby consent to our privacy policy and agree to its terms.

Service buyer and contract content

The buyer of the service is an individual or company who has accepted the terms and conditions of HR-tilipalvelu Oy. In the agreement and in HR-tilipalvelu Oy files the client is referred to as an “entrepreneur”.

A typical HR-tilipalvelu Oy service buyer is a limited company, a housing or real estate company, an association or a cooperative that has a business ID.

Information we collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide it.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an account, we may ask for your contact information, including name, company name, address, email address and telephone number.

How we use your information

We use the information we collect in various ways, including to:

provide, operate and maintain our website
improve, personalise and expand our website
understand and analyse how you use our website
develop new products, services and features
communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing purposes
send you emails
find and prevent fraud

Log files

HR-tilipalvelu follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this, and it is a part of hosting services’ analytics. The information collected by log files includes internet protocol (IP) addresses, browser type, internet service provider (ISP), date and time stamp, referring and exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site, tracking users’ movement on the website and gathering demographic information.

This site sets no tracking cookies of its own and shows no advertising. We sell data to no one.

Processing falls into three groups. You can change your choice at any time from the Cookie settings button at the foot of the page.

Necessary: always on. Spam protection on the contact form (Cloudflare Turnstile), and storing your cookie choice in your browser’s local storage. That choice stays in your own browser and is never sent to us. Turnstile sets the cookies cf_clearance and __cf_bm; the second expires after 30 minutes of inactivity.

Statistics: permission asked. Google Analytics via Google Tag Manager and Microsoft Clarity: which pages get read, where visitors come from, and how the page is used. Clarity additionally records an anonymised replay of mouse movement, scrolling and clicks and builds heatmaps from them; it does not record text you type into forms. Neither script is placed on the page before consent and no request reaches Google or Microsoft, not even a cookieless one. If you decline, no statistics are collected at all. Microsoft retains recordings for 30 days, and heatmaps and aggregated data for 9 months, after which they are deleted including from backups.

Embedded content: permission asked. The map on the contact page is loaded from Google. Until you allow it, a placeholder stands in its place; once the map loads, Google sees your IP address and may set its own cookies. You can also open the map separately in Google Maps, in which case nothing loads on this page.

The booking calendar and the Google reviews are not part of this: the calendar is an ordinary link that takes you to Google’s own page only when you click it, and the reviews are fetched from Google when the site is built, not in your browser.

You can also block cookies entirely in your browser’s settings.

Third-party privacy policies

HR-tilipalvelu’s privacy policy does not apply to other websites. We therefore advise you to consult the respective privacy policies of those third parties. They may include their own practices and instructions about how to opt out of certain options.

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access. You have the right to request copies of your personal data. We may charge you a small fee for this service.
The right to rectification. You have the right to request that we correct any information you believe is inaccurate, and that we complete information you believe is incomplete.
The right to erasure. You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing. You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing. You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability. You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman.

Children’s information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and monitor and guide their online activity.

HR-tilipalvelu does not knowingly collect any personally identifiable information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best to promptly remove such information from our records.

Website chat service

Data controller: HR-tilipalvelu Oy (business ID 2513128-5), Bulevardi 19 A, 00120 Helsinki.

What we process

Opening the chat window stores nothing. Processing begins only when you send your first message.

The content of your messages and the times of the conversation
Your name and email address, requested only when you ask to speak to a colleague. A phone number is optional.
Any files you attach, which is possible only after that handover
Your browser type and a salted hash of your IP address. We do not store the address itself. The hash is used only to prevent abuse.

Please do not send personal identity codes, banking credentials or other particularly sensitive information through the chat. Use the portal or another agreed channel for those.

AI assistant

Your questions are answered first by an AI assistant, not a person. You can ask to speak to a colleague at any time and we will hand the conversation over. The assistant uses Google’s Gemini model, and your messages are sent to Google in order to generate a reply.

The assistant does not make decisions about you, and its answers are not a binding offer.

Purpose and lawful basis

We process this data on the basis of our legitimate interest in responding to your enquiry, and where you ask about purchasing a service, on the basis of steps taken prior to entering into a contract.

Google: conversations are delivered into our Google Chat workspace, where our colleagues read and answer them. Google also processes the messages handled by the AI assistant.
Cloudflare: the technical platform for the service; conversations and attachments are stored in Cloudflare’s services.

Some processing may take place outside the EU. Such transfers rely on the European Commission’s standard contractual clauses.

Retention

Conversations and their attachments are deleted automatically once 12 months have passed without a new message.

If a conversation leads to a client relationship, related information may be retained longer as required by accounting and anti-money-laundering law.

Browser storage

The chat stores a token in your browser’s localStorage so you can return to your own conversation. It lasts 7 days, contains no personal data, and is strictly necessary for the service to work.

Technical service providers for the website

The following providers are involved in running the website.

Cloudflare: the site’s technical platform and delivery network. It processes technical request logs, including IP addresses.
Cloudflare Turnstile: bot protection on the contact form. The check runs when the form is submitted.
Resend: delivers contact form messages to our email. The sending infrastructure runs on Amazon Web Services (AWS) in Ireland, so AWS acts as a sub-processor. The name, email address, phone number and message content you enter in the form pass through this service.
Google Maps: the map on the contact page. Loads only after consent, at which point Google receives your IP address.
Google Analytics and Google Tag Manager: visitor statistics. Load only after consent.
Microsoft Clarity: visitor statistics, session replay and heatmaps. Loads only after consent.
Google Calendar: booking happens on Google’s own page, which you reach by a link. Booking details are processed in Google’s service.

Some processing may take place outside the EU. Such transfers rely on the European Commission’s standard contractual clauses.

Data controller and contact details

Data controller: HR-tilipalvelu Oy (business ID 2513128-5), Bulevardi 19 A, 00120 Helsinki, Finland.

Data protection requests and questions: konsultointi@hr-tilipalvelu.fi or +358 9 231 216 10.

Consent