Privacy notice – ATP Palvelut

Updated 17.9.2026

1. Data controller

ATP Palvelut, Business ID 3656206-4, Syvänsalmenkatu 8 A 37, 02260 Espoo. Contact person: Aapo Pasma, [email protected].

2. What data we process

We process only the data you provide yourself when contacting us:

name and e-mail address
company name and contact details, if you provide them
the content of your message and related correspondence
material you supply in connection with an engagement

We do not collect data automatically. The website has no cookies, analytics, ad tracking or third-party embeds.

3. Legal basis and purpose of processing

We process the data in order to respond to enquiries, prepare quotes and provide the agreed services. The legal basis is the preparation or performance of a contract and our legitimate interest in responding to incoming enquiries.

3 a. Technical implementation work

If the engagement concerns an automation, a tool or other technical implementation, the work may require access to the customer's systems or materials. In that case we follow these principles:

Access is limited to what the engagement strictly requires, and it ends when the work is completed.
Access rights and credentials are created by the customer – we do not request or store personal passwords.
Testing primarily uses synthetic or anonymised data.
The tool built and its source code become the property of the customer.
If the work requires processing personal data on the customer's behalf, a separate written data processing agreement is made before work begins.

4. Use of AI in providing the services

We use AI tools as part of delivering the services. In practice, this means the following:

Material related to an engagement may be processed in an AI service in order to carry out the work.
We primarily use services in which customer material is not used to train models.
A human reviews the result before it is delivered to the customer.
We do not enter data belonging to special categories of personal data into AI services without a separate agreement.
If the engagement requires processing personal data on the customer's behalf, a separate written agreement is made.

You can always ask that your material not be processed with AI tools. Let us know in connection with the engagement.

5. Disclosure and transfers of data

We do not sell or disclose data for marketing purposes. Data is processed in the systems of service providers (e-mail and the software used to carry out the work). Some service providers may process data outside the EU, in which case the transfer is based on standard contractual clauses approved by the European Commission or an equivalent safeguard.

6. Retention period

We keep enquiries for as long as handling the matter requires. Material related to completed engagements is kept for the period required by the Finnish Accounting Act (kirjanpitolaki). Material that is no longer needed is deleted.

7. Your rights

You have the right to know what data is held about you and to request its rectification or erasure. You can also object to the processing or request its restriction, and have your data transferred. Requests should be sent to the e-mail address above.

If you consider that your data has been processed incorrectly, you can lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

8. Data security

Material is processed on password-protected devices and accounts that use two-factor authentication. Access to customer material is limited to the persons involved in handling the engagement.

9. Changes

This notice is updated as the business develops. The current version is always available on this page.

10. Image licences

The website's background images are under the Unsplash licence and may also be used commercially. Photographers: Peter Gargiulo (stone surface) and Boris Stefanik (staircase). The images have been downloaded to our server and edited to match the site's colours – they are not fetched from external servers, so displaying the images does not pass your data to third parties.