Privacy policy

Controller

Davere Oy (Business ID 3662265-3), Salomonkatu 17 A 40, 00100 Helsinki, Finland.

Data protection enquiries: hello@davere.fi.

Davere’s role

Davere is the controller for its own customer relationships: data on customer contact persons, software users and customer due diligence, invoicing and quote requests.

For a client company’s accounting and payroll material, the client company is the controller and Davere is the processor. We process this material only on the client’s behalf and according to its instructions, and the processing is based on the customer agreement and its data processing annex.

Whose data we process

• Customer contact persons and software users: name and contact details, user IDs and log data.
• Representatives and beneficial owners of client companies: identification data required by the Anti-Money Laundering Act, such as name and personal identity code.
• Employees of client companies (payroll, Davere as processor): name, personal identity code, bank account number, salary data, tax card data and absences.
• People submitting a quote request: name, company, email address, phone number, Business ID, revenue range, what the company currently handles itself, a free-form message and whether a call is requested.

We process personal identity codes only when required by law or when necessary to identify a person unambiguously, such as in customer due diligence and payroll.

In customer due diligence, the client company’s representative is identified using strong electronic identification (online banking credentials or mobile certificate). Beneficial owners are identified from the Trade Register and with the customer.

Purpose and legal basis

• Contract: providing the service, managing the customer relationship, use of the software and invoicing. For quote requests, the basis is taking steps at the data subject’s request prior to entering into a contract.
• Legal obligation: customer due diligence and identifying beneficial owners under the Anti-Money Laundering Act, and retaining invoicing and accounting data under the Accounting Act.
• Legitimate interest: responding to enquiries from business customers and the security of the software and data, such as usage logs.

For a client company’s accounting and payroll material, the legal basis is determined by the client company as the controller.

Sources of data

• The customer and its contact persons, including the quote request form.
• The strong electronic identification service: the representative’s name and personal identity code when they identify themselves.
• Banks: account statements and payment data.
• The Finnish Tax Administration and the Incomes Register, for example tax card data.
• Public registers, such as the Trade Register (including the beneficial owners reported to it) and the Business Information System (YTJ).

Recipients

We do not sell personal data. The data is processed by or disclosed to:

• IT and identification service providers processing data on our behalf.
• Banks and e-invoicing operators, to transmit payments and invoices.
• Authorities and other parties to which data must be reported by law: the Finnish Tax Administration, the Incomes Register and earnings-related pension insurers.

If a service provider processes data outside the EU or EEA, the transfer is based on the standard contractual clauses approved by the European Commission.

AI

In bookkeeping, AI proposes entries and an expert reviews and approves them. We do not make decisions about individuals based solely on automated processing.

Retention

• Customer due diligence data: 5 years from the end of the customer relationship.
• Invoicing data: under the Accounting Act, 6 years from the end of the year in which the financial year ended.
• Client companies’ accounting and payroll material: for the duration of the engagement, after which it is returned to the client or deleted in accordance with the customer agreement.
• Quote requests: 6 months if no customer relationship is formed.

Cookies

The website does not use cookies or analytics or tracking tools.

Security

Data is transmitted encrypted. Only the people who need it for their work have access to it.

Your rights

You have the right to access your data and to request its rectification or erasure and the restriction of processing. You may also object to the processing and, where the processing is based on a contract, request that your data be transferred to another system. Please send your request to hello@davere.fi.

If your data is part of a client company’s accounting or payroll material, for example as its employee, please address your request to the client company as the controller. We assist it in handling the request.

You have the right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi) if you consider that the processing of your data infringes data protection legislation.