Privacy Policy

Register and privacy policy in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR).
Drafted on December 20, 2025
Latest update 29.5.2026

1. Data Protection Statement Controller
Uhkua Ltd.

2. Contact person responsible for the register
Asta Aalto
Tel. +358 40 744 7631
E-mail: asta@uhkua.fi

3. Name of the register
Uhkua Oy’s customer register

4. Purpose of personal data processing
The information collected through contact forms is used to respond to customer enquiries.

5. Content of the register
The information to be stored in the register includes: Contact person’s name, company/organization, contact details (phone number, email address, address), website addresses, usernames/profiles in social media services, information about ordered services and their changes, billing information, and other information related to the customer relationship and ordered services.

6. Regular data sources
The information stored in the register is obtained from the customer, for example, through messages sent via web forms, email, phone calls, social media services, contracts, customer meetings, and other situations where the customer provides their information.

7. Regular disclosures of information and transfer of data outside the EU or EEA
Information is not regularly disclosed to other parties. Information may be published to the extent agreed upon with the customer. Data may also be transferred outside the EU or EEA by the data controller only with the written consent of the customer.

8. Principles of Register Protection
Access to the customer register is granted only to those employees of the data controller and other designated individuals who need the information for their duties. These include employees involved with customer relationships. Uhkua Oy ensures that personal data is processed only by individuals who are authorised to handle personal data and who are committed to maintaining confidentiality or are subject to appropriate statutory confidentiality obligations. Uhkua Oy implements the necessary technical and organisational measures in the processing of personal data, such as instructing its personnel and ensuring the security of the systems used, protecting them with passwords.

9. Data retention period
Communication data processed based on consent will be retained until the customer withdraws their consent. Accounting materials are stored for six years in accordance with the Accounting Act. However, Uhkua Oy may, for the purpose of fulfilling its own rights and obligations (for example, to demonstrate its duty of care), retain personal data thereafter to the extent necessary.

10. General Rights of the Data Subject
An existing registered Customer can modify, delete, or forget their information by making a written request to the data controller. If a person wants to check the information stored about them or request corrections, the request must be sent in writing to the data controller. The data controller may, if necessary, request the requester to verify their identity. The data controller will respond to the customer within the timeframe stipulated by the EU General Data Protection Regulation (generally within one month).

11. Other rights of the data subject
The data subject has the right to restrict processing, to be forgotten, and the right not to be subject to automated decision-making or profiling.