Privacy Policy / UKKO.fi Työtori

1. Data Controller

UKKO Yrittäjyyspalvelut Oy
Business ID: 2485076-3
Keilaniementie 1
02150 Espoo, Finland

Hereinafter referred to as “UKKO.fi” or “we.”

The technical platform for UKKO.fi Työtori is provided by Firmon Oy (Business ID: 3588687-6). With respect to requesters’ data, UKKO.fi and Firmon Oy are each independent data controllers: each is responsible for its own processing and describes that processing in its own privacy policy. This Privacy Policy describes UKKO.fi’s processing. Firmon Oy’s processing is described in its Privacy Policy at tyotori.ukko.fi/privacy.

2. Who Does This Privacy Policy Apply To?

This Privacy Policy applies to private individuals who have submitted a request for quotation to UKKO.fi Työtori, as well as contact persons of businesses that have submitted a request for quotation (the “customer”).

Work arranged through Työtori is invoiced through the UKKO.fi service. The processing of data relating to entrepreneurs registered for UKKO.fi services is described in the Privacy Policy for users of UKKO.fi services.

3. What Personal Data Do We Process?

• Contact information: first name, last name, email address and telephone number, if provided;
• Information about the work: the location of the work, such as the municipality and ZIP code, a description of the work, the requested time, and any photographs, including any personal data that may be contained in them; and
• Information relating to quotations, the accepted quotation and the performance of the work.

4. For What Purposes Is Personal Data Processed?

We process personal data for the following purposes:

• receiving, reviewing, publishing and managing requests for quotation so that entrepreneurs can review them and submit quotations;
• communicating in connection with requests for quotation, quotations and the performance of the work;
• handling customer service requests;
• detecting and removing requests for quotation that violate the terms of use or applicable law; and
• preventing misuse and investigating legal claims.

Requests for quotation are reviewed using artificial intelligence before they are published. If the artificial intelligence does not approve a request for quotation, it is reviewed by a human. Therefore, the rejection of a request for quotation is not based solely on automated processing.

5. What Is the Legal Basis for Processing Personal Data?

Contract

The processing of the customer’s data for publishing the request for quotation, forwarding quotations and handling matters related to the work is based on a contract or on steps taken at the customer’s request prior to entering into a contract.

Legitimate Interest

The review of requests for quotation, prevention of misuse and investigation of legal claims are based on our legitimate interest in carrying out the Työtori cooperation and ensuring the proper operation of the service.

6. Where Do We Obtain Personal Data?

We primarily receive the customer’s data directly from the customer when the customer completes the request-for-quotation form or otherwise communicates with us.

Providing information for a request for quotation is voluntary. However, without this information, we cannot publish the request for quotation or forward quotations.

7. To Whom Is Personal Data Disclosed?

The customer’s request-for-quotation information is transmitted to Firmon Oy, which provides the technical platform for Työtori. Firmon Oy processes the data as an independent data controller.

We also use service providers that process personal data on our behalf and in accordance with our instructions, for example in the provision of IT, cloud and artificial intelligence services. We enter into the agreements required under the General Data Protection Regulation with such processors.

The customer’s request for quotation is visible on the platform to entrepreneurs registered on the platform. When the customer accepts a quotation, the selected entrepreneur is provided with the contact information necessary to perform the work.

We may disclose information to public authorities when required by law or by a binding order issued by an authority.

We do not sell personal data or disclose it to third parties for their own marketing purposes.

8. Is Personal Data Transferred Outside the EU or EEA?

Some of the service providers we use, or their subcontractors, may process data outside the European Union or the European Economic Area.

In such cases, the transfer is based on an adequacy decision adopted by the European Commission, such as the EU–U.S. Data Privacy Framework, or on standard contractual clauses approved by the European Commission and, where necessary, supplementary safeguards.

9. How Long Is Personal Data Retained?

The customer’s request-for-quotation and quotation information is deleted or anonymized no later than 12 months after the work has been completed.

10. How Is Personal Data Protected?

We protect personal data using appropriate technical and organizational measures. Access to the data is limited to individuals who need it in order to perform their work, and these individuals are subject to a duty of confidentiality.

11. What Rights Do You Have?

You have the right to:

• access your personal data;
• request the correction of inaccurate data;
• request the deletion of your data;
• request the restriction of processing;
• transfer the data you have provided from one system to another when the processing is based on a contract; and
• lodge a complaint with a supervisory authority (see Section 13).

You also have the right to object to the processing of your personal data when the processing is based on a legitimate interest. However, we may continue processing the data if we can demonstrate compelling legitimate grounds for the processing, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

We may be required to retain some data even if you request its deletion, if required by law.

You may exercise your rights by contacting us using the contact details provided in Section 12. Where necessary, we may request additional information to verify your identity.

12. Contact Information

For matters concerning data protection and the exercise of data subject rights, you can contact us using the data protection form on the UKKO.fi website or by email at [email protected].

13. Right to Lodge a Complaint with a Supervisory Authority

If you believe that your personal data has been processed in violation of data protection legislation, you have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

14. Changes to This Privacy Policy

We may update this Privacy Policy when our operations or applicable legislation changes. The current version of the Privacy Policy is available on the UKKO.fi website.

Updated: October 27, 2026