Updated 15 June 2026
1. Controller
JTT Audit Oy
Business ID: 0712332-9
Siltakatu 18, 4th floor, 80100 Joensuu, Finland
2. Data protection contact
Data protection matters are handled by the CEO. You can contact us on matters relating to data protection or the processing of personal data as follows:
Antti Pekkarinen
CEO, JTT Audit Oy
Phone: 040 701 6640
Email: antti.pekkarinen@jtt.fi
3. Personal data processed
We process the following personal data:
- Contact details: name, email, phone number, company and position
- Information submitted via the contact form and the content of messages
- Information related to the client relationship and engagement materials
- Technical information related to use of the site, such as IP address, browser type and visit times (via cookies, see section 9)
- Job applicants' application information in recruitment processes
4. Purposes and legal basis of processing
We process personal data for the following purposes:
- Managing client relationships and performing engagements – legal basis: contract and legitimate interest
- Responding to enquiries and providing quotes – legal basis: legitimate interest and consent
- Compliance with statutory obligations (e.g. Auditing Act, Accounting Act, Anti-Money Laundering Act) – legal basis: legal obligation
- Recruitment – legal basis: consent and steps prior to entering into a contract
- Site analytics and development – legal basis: consent (cookies)
5. Retention period
We retain personal data only for as long as necessary for the purpose of processing or for the period required by law. Audit and accounting materials are retained for the period required by law (e.g. audit materials for at least 10 years). Information related to enquiries is deleted when no longer needed.
6. Disclosures and transfers
We do not disclose personal data to third parties for marketing purposes. Data may be disclosed to authorities to comply with statutory obligations. We use trusted subprocessors (e.g. IT and cloud services) that process data on our behalf under data processing agreements (DPA).
As a rule, data is processed within the EU/EEA. Any transfers outside the EU/EEA are protected by the Commission's Standard Contractual Clauses (SCC) or other safeguards required by the GDPR.
7. Data security
Personal data is processed confidentially. Data is protected with appropriate technical and organisational measures: access control, user-permission levels, encryption, backups and staff training and confidentiality obligations.
8. Data subject rights
You have the right to:
- Be informed about what personal data we process
- Request correction of inaccurate data
- Request erasure of data ("right to be forgotten")
- Request restriction of processing or object to processing
- Receive your data in a machine-readable format (right to portability)
- Withdraw your consent at any time
- Lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman, tietosuoja.fi)
To exercise these rights, please contact the person named in section 2.
9. Cookies
Our site uses cookies to ensure the site works correctly and to measure visitor numbers and behaviour. Cookies are split into three categories:
- Essential – basic functions of the site. No consent required.
- Analytics – e.g. Google Analytics (Google Tag Manager). Set only after consent.
- Marketing – used for targeted advertising and measurement. Set only after consent.
We use Google Consent Mode v2, so analytics and marketing cookies are denied by default until you give your consent. You can change your choices at any time:
10. Changes to this policy
We may update this privacy policy from time to time. The current version is always available on this page.