Susiluoto Law Office Oy
Uusimaankatu 16 A
00120 Helsinki

Contact person in matters concerning the register

Mari Lampenius
Uudenmaankatu 16 A, 00120 Helsinki

Registry name

Susiluoto Oy’s customer and assignment register

Basis and purpose of personal data processing

The processing of personal data is based on the customer relationship between Asiajotoimisto Susiluoto Oy and the customer and the customer’s consent. In addition, personal data is processed in order to fulfill a task assigned by the court or other authority, to comply with the obligations set forth in the law, and for the realization of a legitimate interest.

Personal data stored in the register is processed for the following purposes

  • Dealing with the assignments of Susiluoto Oy
  • Managing, monitoring and developing the customer relationship, implementing communication and marketing related to the customer relationship
  • Monitoring the customer’s payment behavior and work orders
  • Fulfillment of storage, reporting and query obligations based on law and in accordance with regulations and instructions of the authorities

Data content of the register

The main information of the register depends on whether the individual customer is a business customer.

  • Company
  • Business ID
  • The name of the person
  • Address information of the person
  • Email address
  • Personal identification number
  • Information related to the identification of the client required by legislation, such as a copy of the identity document
  • The quality of the assignment
  • Personal information about the customer’s counterparty and counterparty
  • Information related to payment and invoicing, including insurance information
  • Other personal information received in connection with the handling of the assignment, necessary for the handling of the assignment, regarding e.g. the customer’s marital status, family relationships, workplace, wealth, debts, state of health

Regular sources of information

The main source of information is the Customer himself and, in the case of the Company, the company’s contact person.

Information can also be collected from authorities or other third parties within the limits permitted by the applicable legislation for the purposes described in this register extract.

Data retention periods

The information stored in the client and assignment register is kept as long as it is necessary for the operation of the Law Firm and according to the legislation that obliges us and the instructions of the Bar Association. Material related to assignments is kept for at least 10 years after the end of the assignment. After that, we will keep the information to the extent necessary to clarify the obstacles and in terms of the legal protection of our employees.

Regular transfers of information

The information in the register is only used by Asiajatoimisto Susiluoto Oy.

As a general rule, the information in the register is not disclosed to external parties, except when required by law. Our office has contracts with certain service providers who, as part of the service they offer, can process personal data on our behalf. Appropriate agreements have been made with the service providers to ensure appropriate processing of personal data also in these situations.

The registrant’s personal data will be destroyed at the user’s request, unless legislation, a contractual matter or the provision of services to the person prevents the data from being deleted.

Data transfer outside the EU or EEA

The data in the register will not be transferred outside the EU or the European Economic Area.

Principles of registry protection

Personal data in electronic form is protected by generally accepted and reasonable technical means in the industry, such as firewalls and passwords. Materials containing personal data of the register, other than those in electronic form, are located in locked rooms, to which unauthorized persons are prevented from accessing.

Only the Registrar or a service provider involved in the processing of the data acting on behalf of the staff of Asiajotoimisto Susiluoto Oy, or acting on behalf of the Registrar, has access to the personal data processed in the register in accordance with the access rights granted by Asiajotoimisto Susiluoto Oy.

Asianajotoimisto Susiluoto Oy takes into account the regulations of the applicable legislation and authorities and the instructions of industry associations on ensuring the confidential processing of personal data.

The customer’s rights related to the processing of personal data

The customer has the right to check what information has been stored about him. This request can be denied on the basis of the law. The use of the right is free of charge.

The customer has the right to request that incorrect information about him be corrected. In addition, the customer has the right to request the deletion of information concerning him or to request the restriction of processing on the basis of the law.

To the extent that the customer has provided us with information himself, the customer has the right to receive such information in a machine-readable format and the right to transfer this information to another data controller.

The customer has the right to file a complaint with the competent supervisory authority if the Registrar has not followed the applicable