This is the data file and privacy notice of Hansavest Työvoima Oy in accordance with the EU General Data Protection Regulation (GDPR). Drawn up on 8 April 2026.
1. Data controller
Hansavest Työvoima Oy, Business ID 2788957-5, Brahenkatu 4, 53100 Lappeenranta, Finland
2. Contact person for the register
Hansavest Työvoima Oy’s contact person for data protection matters is Tapio Vehviläinen.
Please send all enquiries relating to the register and this privacy notice by email to: tapio@hansavest.com
3. Name of the register
Company customer register
4. Legal basis and purpose of processing personal data
Under the EU General Data Protection Regulation, the legal basis for processing personal data is:
– the data subject’s consent (documented, freely given, specific, informed and unambiguous)
The purpose of processing personal data is to maintain the customer relationship.
The data is not used for automated decision-making or profiling.
5. Data content of the register
The data stored in the register includes: the person’s name, position, company/organisation, contact details (telephone number, email address, postal address), information on ordered services and changes to them, billing information and other information relating to the customer relationship and ordered services.
The IP addresses of website visitors and cookies essential for the operation of the service are processed on the basis of legitimate interest to ensure information security. Analytics and marketing cookies (Google Analytics, Meta Pixel) are used only if the visitor gives their consent in the cookie banner. Consent can be changed or withdrawn at any time via the “Cookie settings” link at the bottom of the page.
6. Regular sources of data
The data stored in the register is obtained from the customer, for example through messages sent via web forms, by email, by telephone, from contracts, at customer meetings and in other situations where the customer discloses their information.
Data on contact persons of companies and other organisations may also be collected from public sources such as websites, directory services and other companies.
7. Regular disclosures of data and transfers of data outside the EU or EEA
Data is not regularly disclosed to other parties. Data may be published to the extent agreed with the customer.
Data may also be transferred outside the EU or EEA by the data controller. Data is not transferred to the United States without the explicit consent of the data subjects.
8. Principles of register security
The register is handled with due care, and data processed by means of information systems is appropriately protected. When register data is stored on internet servers, the physical and digital security of the hardware is properly ensured. The data controller ensures that stored data, server access rights and other information critical to the security of personal data are handled confidentially and only by those employees whose job description includes it.
9. Right of access and right to request rectification
Every person in the register has the right to check the data stored about them in the register and to request the rectification of any inaccurate data or the completion of incomplete data. If a person wishes to check the data stored about them or request its rectification, the request must be sent by email to tapio@hansavest.com. Where necessary, the data controller may ask the person making the request to prove their identity. The data controller will respond to the customer within the time limit laid down in the EU General Data Protection Regulation, as a rule within one month.
10. Other rights relating to the processing of personal data
A person in the register has the right to request the erasure of their personal data from the register (“right to be forgotten”). Data subjects also have the other rights provided under the EU General Data Protection Regulation, such as the restriction of processing of personal data in certain situations. Requests must be sent by email to tapio@hansavest.com. Where necessary, the data controller may ask the person making the request to prove their identity. The data controller will respond to the customer within the time limit laid down in the EU General Data Protection Regulation, as a rule within one month.