The EU's General Data Protection Regulation (2016/679) defines citizens' rights regarding the processing of personal data. Aarnik has different data protection obligations depending on its role in the processing activities. Please read our General Privacy Statement and Privacy Statement for Customers and Stakeholders carefully before You start using our services or doing business with us.
Aarnik as a service provider is a processor of personal data
As a processor of personal data, Aarnik Advisory & Accounting Oy processes personal data on behalf of its customers as part of the delivery of the service. In this role, we only process personal data to fulfil contractual obligations towards customers. In this case, Aarnik's customers are data controllers who are responsible for the lawfulness of the processing.
Aarnik as a data controller
Aarnik is the controller when we process personal data for our own benefit and decide how and for what purposes the data is processed. In such cases, we collect and process, for example, the personal data of our customers and stakeholder representatives. As the data controller, Aarnik Advisory & Accounting Oy is responsible for the lawfulness of the processing.