Legal

Privacy Policy

This privacy policy describes how HR-Group Oy collects, uses and stores personal data in accordance with the EU General Data Protection Regulation (GDPR, 2016/679) and Finnish data protection legislation.

Last updated: March 2025

1. Controller

HR-Group Oy
Business ID: FI31976145
Olarinluoma 7, 02200 Espoo, Finland
Postal address: PL 287, 00151 Helsinki, Finland
Email: info@hr-group.com
Phone: 09 2535 0511

2. Personal data collected

HR-Group Oy collects only the personal data that is necessary for the purposes described below. This may include:

• Name and contact details (email address, phone number, postal address)
• Company name and business ID (for corporate contacts)
• Communication history (emails and messages sent to us)
• Data required for accounting and financial services (for clients of our financial services)

This website does not use cookies, tracking pixels or analytics services. No personal data is collected by visiting this website.

3. Purposes and legal bases for processing

We process personal data for the following purposes:

• Responding to enquiries — legal basis: legitimate interest (Article 6(1)(f) GDPR)
• Providing financial and accounting services — legal basis: performance of a contract (Article 6(1)(b) GDPR) and legal obligation (Article 6(1)(c) GDPR)
• Warehouse rental arrangements — legal basis: performance of a contract (Article 6(1)(b) GDPR)
• Compliance with Finnish accounting and tax legislation — legal basis: legal obligation (Article 6(1)(c) GDPR)

4. Retention periods

Personal data is retained only for as long as necessary for the purpose for which it was collected:

• Contact and enquiry data: up to 2 years from last contact
• Accounting and financial services data: 10 years as required by Finnish accounting law (Kirjanpitolaki 1336/1997)
• Contractual data (warehouse rental etc.): duration of contract plus 5 years

5. Recipients of personal data

HR-Group Oy does not sell or share personal data with third parties for marketing purposes. Data may be shared with:

• Authorities (e.g. Finnish Tax Administration) when required by law
• IT service providers acting as data processors under appropriate agreements
• Other HR-Group companies within the group where required for the provision of services

Where data is transferred outside the EU/EEA, we ensure adequate safeguards are in place in accordance with GDPR Chapter V.

6. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may request correction of inaccurate data
• Right to erasure — you may request deletion of your data where there is no legal basis for its continued processing
• Right to restriction — you may request that we restrict processing in certain circumstances
• Right to object — you may object to processing based on legitimate interest
• Right to data portability — you may request your data in a structured, machine-readable format where technically feasible

To exercise any of these rights, please contact us at info@hr-group.com. We will respond within 30 days.

7. Right to lodge a complaint

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu):

Office of the Data Protection Ombudsman
PO Box 800, 00531 Helsinki
tietosuoja.fi

8. Changes to this policy

We may update this privacy policy from time to time. The current version is always available on this page. Material changes will be communicated to affected parties directly.