Privacy

This page explains how UKKO.fi processes personal data, where to find the privacy notices for our different activities, and how we use and process the personal data we collect about you as a user of our website.

Processing of personal data at UKKO.fi

We protect the personal data of our customers, partners, job applicants, and website users in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation. We process personal data only for specified purposes, only to the extent necessary, and only for as long as necessary.

Who processes the data?

The companies of the UKKO.fi Group:

• SPL Company Oy (Business ID 2871479-3)
• UKKO Yrittäjyyspalvelut Oy (Business ID 2485076-3)
• SLP Wallet Oy (Business ID 3184032-8)

The controller for each processing activity is stated in the privacy notice for that activity. For some activities, the Group companies act as joint controllers. Their respective responsibilities are described in the notice on joint controllership (see below).

For matters concerning data protection and the exercise of your rights, you can contact us via email at [email protected].

Privacy notices

We provide more detailed information about the processing of personal data in the following privacy notices:

Website privacy policy

This UKKO.fi Group privacy policy describes how we use and process the personal data we collect from visitors to our website.

Controller

SPL Company Oy, UKKO Yrittäjyyspalvelut Oy, and SLP Wallet Oy as joint controllers.

What data do we process, and for what purpose?

We may process the following data about you:

• Website operation and security: IP address, technical information about your device and browser, log data
• Handling of inquiries: information you provide via a form or chat, such as your name, email address, phone number, company, and message
• Analytics and website development: data concerning your use of the website and services
• Marketing and ad targeting: data collected using cookies and similar technologies

On what legal basis do we process the data?

The legal basis for processing data collected for website operation and security is legitimate interest.

The legal basis for processing website usage data collected for analytics and website development, as well as data collected for any marketing and ad targeting, is consent.

For inquiries received through the website, the legal basis is legitimate interest or steps taken prior to entering into a contract.

Where do we get the data?

We obtain data related to the use of the website mainly:

• directly from you, for example through a form you fill out;
• automatically from your device when you use the website; and
• from the website, analytics, and other service providers we use, in accordance with your cookie choices.

To whom is the data disclosed?

The data is processed on our behalf by service providers who provide us with services such as website, hosting, analytics, customer relationship management, and advertising services. Some of them may be located outside the EU or EEA, in which case transfers are carried out with appropriate safeguards. With advertising services such as Google and Meta, data is processed only on the basis of your cookie consent.

How long is the data retained?

• Technical log data: up to 12 months.
• Inquiries: for as long as needed to handle the matter, up to 12 months, unless they result in a customer relationship.
• Data collected through cookies: for the period stated in the cookie policy.

Cookies

We use strictly necessary cookies to enable the website to function. We use other cookies, such as analytics and marketing cookies, only with your consent. You can change your choices at any time in the website’s cookie settings. For more information, see our cookie policy.

Last updated: October 29, 2026