Finanssitaito Oy
Business ID: 2301610-1
Address: Tekniikantie 14, PL 77, 02101 Espoo, Finland
Telephone: +358 41 501 5290
Email: info@finanssitaito.fi
Finanssitaito’s clients are not private individuals but companies and other organisations. We therefore primarily collect company information, which as such does not qualify as personal data.
However, information about individuals connected to companies, such as persons in charge, owners and key persons, is classified as personal data. This information is collected from public registers or from companies providing credit information services, and partly directly from the individuals themselves.
The personal data we collect can be categorised as follows:
· Contact details, such as the names, telephone numbers and email addresses of company owners, persons in charge or employees
· Identification data: For example, when assisting corporate clients with financing applications, we typically collect identification data by taking a copy of a passport, driving licence or similar document showing, among other things, the personal identity code and photograph. We process the personal identity code only when it is necessary to uniquely identify a person, for example in connection with a financing application or a guarantee commitment (section 29 of the Finnish Data Protection Act).
· Ownership data and other financial data: In connection with companies’ basic information, we collect information on their shareholder base and, for example in connection with personal guarantees for financing arrangements, we collect information on the guarantors’ other holdings, credit information, income and loans. With regard to other collateral, we collect information on, for example, the ownership of assets offered as security.
Personal data we may collect from you
Some of the personal data collected by Finanssitaito has been obtained directly from you. For example, we collect identification data directly from you. As a rule, we also collect ownership and financial data directly from you.
Providing the data is a prerequisite for carrying out the assignment. Financiers require certain information in applications, and a financing application cannot be prepared or submitted without it.
Personal data we may collect from third parties:
· Publicly available information and information from other external sources: registers maintained by authorities (e.g. trade registers, the Population Information System, tax administration registers and supervisory authorities’ registers).
· Marketing registers, credit information registers and other commercial data providers.
· Other persons in charge, owners or contact persons of the company you represent or own who participate in our assignment as contact persons
· The accounting firm, bank or similar party of the company you represent or own that holds information relevant to our service and in respect of which we have been authorised to collect the information
· Other companies with which we cooperate.
We use your personal data to fulfil our statutory and contractual obligations and to market, sell and provide services.
Performance of contractual obligations or pre-contractual measures
The main purpose of processing personal data is to collect, process and verify personal data before making an offer or entering into a contract, and to document, manage and perform the tasks under the contract.
Examples of tasks related to the performance of a contract:
· assisting in the preparation and submission of financing applications
· customer service during the contract period
· the possible establishment, exercise or defence of legal claims
Processing of personal data based on law
In addition to the performance of contracts, compliance with obligations laid down in laws, regulations and decisions of authorities requires us to process personal data.
Examples of processing based on law
· verification of identity to the extent required of us by law
· accounting regulations
· reporting to authorities
Legitimate interest
Our legitimate interests relate to conducting and managing our business so that we can offer our clients the best possible service, while also taking into account the interests of the parties involved in providing our services and the public interest.
On the basis of legitimate interest, we may, for example, send direct marketing about suitable products and services to persons in charge of companies and record customer service calls to ensure and develop the quality of our customer service. On the basis of legitimate interest, we may also, for example, collect and retain information or offers provided by the financing applicant and the financier for the purpose of establishing, exercising or defending any subsequent legal claims.
Use of artificial intelligence and automated decision-making
We use AI-based tools to assist us in carrying out client assignments. The processing is based on a contract or on pre-contractual measures, and AI is used for the same purposes for which personal data is otherwise processed in connection with the assignment.
We use AI, for example, for the following tasks:
· analysis of financial statements, credit information reports and other financial information
· drafting financing applications and the related company and financial descriptions
· analysing and processing client communications and preparing responses
Only information necessary for the assignments is provided to AI for processing.
We do not make decisions concerning data subjects that produce legal effects or similarly significantly affect them based solely on automated processing, such as AI. Financing decisions are always made by the financiers in accordance with their own procedures.
Third parties
Providing services and complying with contracts requires the disclosure of your personal data to third parties. We have entered into agreements with selected service providers (“processors”) that set out the terms for processing personal data on our behalf. Such agreements have been concluded, for example, with suppliers of invoicing, maintenance, server, IT support and AI services. We only use processors that provide sufficient guarantees and implement appropriate safeguards to meet the requirements of the General Data Protection Regulation.
Providers of AI services process personal data only on our behalf and in accordance with our instructions. Under the contractual terms, the service provider does not use our clients’ data for its own purposes, such as training AI models.
Transfers of data to third countries
In some cases, we may also transfer personal data to organisations operating outside the European Economic Area, i.e. in so-called third countries. Such a transfer is only possible if one of the following conditions is met:
the European Commission has decided that the country in question ensures an adequate level of data protection;
standard contractual clauses approved by the European Commission are used for the transfer; or
the recipient is certified under the EU–U.S. Data Privacy Framework, in respect of which the European Commission has adopted an adequacy decision.
Some of the providers of the AI, email and analytics services we use are based in the United States, and data may therefore be transferred to the United States in connection with the use of these services on the basis of the safeguards described above.
We also disclose personal data to subcontractors and business partners involved in marketing, selling and providing our services. For example, when assisting a corporate client in seeking suitable financing, we disclose the ownership information of the company seeking financing and, where applicable, information on guarantors or owners of collateral to suitable companies providing financing services.
We also disclose personal data to authorities to the extent required by law. These authorities include, for example, tax, police and supervisory authorities.
We retain your data for as long as it is needed for the purpose for which it was collected and processed, or for as long as required by laws and regulations. For example, under the Finnish Accounting Act, financial statements and accounting books must be retained for ten years and vouchers for six years.
Protecting personal data is a key part of maintaining our business. We have appropriate technical, organisational and administrative security procedures in place to protect all data in our possession against loss, misuse, unauthorised use, alteration and destruction.
We protect personal data by, among other things, the following measures:
· personal data and its backups are located in secure premises,
· equipment is protected by firewalls and anti-virus software
· our websites use an SSL-secured connection,
· systems are protected by user IDs and passwords.
· Only persons who are authorised to do so by virtue of their duties have access to the personal data register, and they are also bound by a duty of confidentiality regarding the data in the register
AI services are used only under business-level agreements that exclude the use of data for training AI models. Only information necessary for the assignment is provided to AI for processing, and, for example, copies of identity documents or personal identity codes are not provided to the AI service for processing unless this is necessary.
As a data subject, you have rights in relation to the personal data held by Finanssitaito. You have the following rights:
A) Right of access to your personal data
You have the right to access the personal data we hold about you. However, the right of access may be restricted on the basis of legislation, the protection of the privacy of other persons or the protection of trade secrets, to the extent permitted by law.
B) Right to request rectification of inaccurate or incomplete data
If the data is inaccurate or incomplete, you have the right to request that it be rectified, unless restricted by law.
C) Right to request erasure of data
You have the right to request the erasure of your data in the following cases:
· You withdraw your consent to the processing and there is no other legitimate ground for the processing.
· You object to the processing and there are no overriding legitimate grounds for continuing the processing.
· You object to the processing for direct marketing purposes.
· The processing is unlawful.
In many cases we are required by law to retain your personal data for the duration of the client relationship and even thereafter if the processing is necessary, for example, for compliance with legal obligations or for handling legal claims.
D) Right to restrict the processing of personal data
If you contest the accuracy of the data we have registered or the lawfulness of the processing, or if you have objected to the processing in accordance with your rights, you may ask us to restrict the processing of your personal data to storage only. The processing will then be restricted to storage only until the accuracy of the data has been verified or it has been possible to verify whether our legitimate interests override your interests.
If you are not entitled to request the erasure of data from our registers, you may instead request that we restrict the processing of that data to storage only. If the processing of registered data concerning you is necessary solely for the establishment of a legal claim, you may also require that any other processing of the data be restricted to storage only. We may process your data for other purposes if this is required for the establishment of a legal claim or if you have given your consent.
E) Right to object to processing based on our legitimate interest
You have the right to object, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interest. In that case we will stop the processing unless we have compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
You always have the right to object to the processing of your personal data for direct marketing purposes or for profiling related to direct marketing.
F) Right to data portability
You have the right to receive the personal data you have provided to us in a machine-readable format. This right applies to personal data that has been processed solely by automated means and on the basis of consent or the performance of a contract. The data may also be transferred from us to another controller where this is secure and technically feasible.
If you wish to exercise the rights listed above, requests will be assessed case by case. Please note that we may also retain and use your data if this is necessary to comply with legal obligations, resolve disputes or enforce contracts. In many cases we have legal grounds to retain your personal data for the duration of the client relationship and even thereafter if the processing is necessary, for example, for compliance with legal obligations or for handling legal claims. You can exercise your rights by contacting us by email at info@finanssitaito.fi. We will respond to your request within one month of receiving it at the latest. We may ask you to verify your identity before processing the request.
We use cookies on our websites. A cookie is a small text file that a computer, phone or tablet stores on the website user’s device. We use strictly necessary cookies to ensure the functioning of the website. We use other cookies, such as analytics and marketing cookies, only if you have given your consent to them via the cookie notice displayed on the website. You can withdraw or change your consent at any time in the website’s cookie settings. The use of cookies is common practice on most website.
We use cookies:
· to improve the user experience of our website,
· to remember your personal settings,
· to provide relevant content and information,
· to ensure the security of our website, and
· to collect statistical data on the use of our websites and to measure the effectiveness of advertising.
You can clear cookies in the browser settings of the device you use. This will change the identifier by which information about you is collected. You can also block the use of cookies entirely by changing the browser settings of your device. Blocking cookies may affect the functionality of our services. If you choose to block cookies, you may not be able to make full use of the online services we offer.
Our websites use the Google Analytics tracking tool, which provides us with information about how you move around our websites. For this purpose, Google Analytics uses cookies, whereby the information generated by the cookies about the use of the website is transferred to and stored by Google. Google Analytics cookies are used only if you have accepted analytics cookies. Google Analytics 4 does not store IP addresses. Data may be transferred to the United States, and the transfer is based on the EU–U.S. Data Privacy Framework.
We aim to resolve disputes concerning the processing of personal data directly with the data subject. However, if you are dissatisfied with the processing of your personal data, you have the right to refer the matter to the data protection authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (www.tietosuoja.fi, tietosuoja@om.fi).
We may update this privacy notice, for example, when our services, the systems we use or legislation change. The current version is always available on our website.
This privacy notice was last updated on 30 September 2026
Våra experter berättar gärna mer om vår verksamhet och diskuterar tjänster som är anpassade efter just era behov.
Our experts will be pleased to provide further information about our services and discuss solutions tailored to your specific needs.
Asiantuntijamme kertovat mielellään lisää toiminnastamme ja keskustelevat kanssanne juuri teidän tarpeitanne vastaavista palveluista
