Privacy and Data Protection Statement

​This is the privacy and data protection statement of Taatecs, in accordance with the EU General Data Protection Regulation (GDPR). This statement was last updated on 30 June 2025 and remains valid until further notice.

​1. Data Collector

​Taatecs

Siilipuistontie 16, 01450 VANTAA
Business ID: 1907944-1

​2. Contact Person for Registry Matters

K. Eboreime
​Email: taatecs@gmail.com
Phone: +358 50 5011262

​3. Name of the Register

​Customer and Marketing Register of Taatecs

4. Legal Basis and Purpose of Processing Personal Data

Customer and employment relationship

Consent of the individual

The purpose of processing personal data is to manage customer relationships, maintain communication, and conduct marketing activities. The data is used to provide accounting services to Taatecs’ clients and to fulfill the client’s legal obligations.

The marketing register is used to reach potential new clients and to process contact requests submitted via the Taatecs website.


5. Data Content of the Register

​Only relevant and necessary personal data is collected. This includes:

- Name, position, business ID, company/organization
- Contact details (phone number, email address, postal address)
- Information about ordered services and changes
- Billing information
- Other data necessary for the customer relationship and services

Data is processed throughout the contract period and retained as long as necessary to fulfill contractual and legal obligations. Payroll and accounting data is stored in accordance with the Finnish Accounting Act (Chapter 2, Section 10). After the retention period, data is deleted or anonymized regularly, at least once a year.

Website visitors’ IP addresses and essential cookies are processed based on legitimate interest for security and statistical purposes. Consent is requested for third-party cookies when required.

6. Regular Sources of Data

Data is collected from customers via:

- Online forms
- Email, phone, social media
- Contracts, meetings, and other interactions


Contact information of company representatives may also be collected from public sources such as websites, directories, and other companies.

7. Regular Disclosures and Transfers Outside the EU / EEA

Data is not regularly disclosed to third parties. Data may be published only with the customer’s consent.

​8. Principles of Register Protection

Data is handled with care and protected appropriately. Internet servers are secured both physically and digitally. Access to data is limited to employees whose duties require it, and all data is treated confidentially.

9. Right to Access and Correct Data

​Individuals have the right to access their personal data and request corrections or additions. Requests must be submitted in writing to the data controller. Identity verification may be required. Responses will be provided within the timeframe set by the GDPR (typically within one month).

​10. Other Rights Related to Personal Data

​Individuals have the right to request the deletion of their data (“right to be forgotten”) and to restrict processing in certain situations. Requests must be submitted in writing. Identity verification may be required. Responses will be provided within the timeframe set by the GDPR.