Data Protection / GDPR

In this page we have gathered information on how Rantalainen’s data protection policies regarding GPDR (General Data Protection Regulation), which came into force on 25.05.2018. The GDPR contains obligations to companies who process personal data.

Updated at 9.8.2022

GDPR in a nutshell

The GDPR contains new obligations regarding processing of personal data and data protection. Integral in the new regulation is the risk-based approach and data controller’s obligation to demonstrate that its processing activities are compliant with the requirements of the GDPR. The Data controller is required to handle sensitive data with caution. Additionally, the data controller must be able to demonstrate that it is operating according to the regulation.
Additional information about the GDPR can be found from:
Data Protection Ombudsman

Rantalainen’s contractual reform

Rantalainen is updating existing service agreements with its customers to be compliant with the General Data Protection Regulation. Simultaneously Rantalainen will update the accounting firm conditions (KL2004), which have been in use since 2004. In the new conditions (TAL2018), which are widely applied in the accounting industry, various matters are taken into consideration regarding the development and shift of accounting services. Simultaneously the understandability and readability of the terms have been improved.

We at Rantalainen have also taken the EU General Data Protection Regulation (GDPR) into account in the new conditions by composing a separate data protection agreement. In the renewed terms, the requirements that electronic services and electronic communication with authorities constitute, are also considered. Additionally, the contract responsibilities are defined more precisely than earlier, due to the development of information technology.

Simultaneously with the renewal of the conditions, we at Rantalainen have expanded our liability insurance to answer to the requirements of our new services and increased the accounting firm’s contractual liability limit in the event of damage. The limit has been raised from the industry standard 10.000 euros to 100.000 euros this applies to each of our customers.

Customer-specific exceptions from the contract terms, which have been specifically agreed upon, will stay in effect unless otherwise agreed upon.

The contracts will be updated digitally. The contact persons of our clients will receive a link through which they can digitally sign and accept the new conditions. If the client wishes, the contract update can be delivered and signed in paper form.

Updated service agreements

The updated service agreements consist of the documents below

Attachment	Description	Download
Accounting services contract	Customer specific contract regarding the production of services	–
General conditions	Taloushallintoliitto’s general conditions (TAL2018)
RAN GDPR 2018	Rantalainen’s modified conditions based on Taloushallintoliitto’s general conditions
Attachment 1-A	Record of Processing Activities
Attachment 1-B	The Accounting Firm’s Data Security of Personal Data
Attachment 1-C	A record and instructions on personal data processing provided by the client	–
Attachment 2-B	Information security of personal data in software

Rantalainen as a personal data processor

Information security in ensured by both technical and organizational measures. Personal data processing is executed in a appropriate and secure manner. Personal data processing and data security is illustrated in the documents above attachment 1-A and 1-B.

Software and subcontractors used by Rantalainen

Software used by Rantalainen, software providers and subcontractors who are responsible for them are for their part personal data processors. Below we have listed links to the software providers and subcontractors data security web sites. Additionally, the data security of different softwares is illustrated in the attachment 2-B.

• Visma Privacy page, Visma Solutionsin Privacy page, Visma security and privacy (Visma Fivaldi, Autoinvoice, Entry, Expense, L7, Netvisor, Escan, Financial Overview, Visma Sign)
• Procountor Security pages, Finago Privacy page, Mepco Privacy page (Accountor Procountor, Mepco, Etasku)
• SD Worx gdpr pages(SD Worx VIRA, SD Worx W)
• Espina Privacy Page (Espina Kasperi)
• Bezala Privacy page (Bezala)
• Lemonsoft Oy Privacy page, Lemonsoft Oy Privacy page attachment (Lemonsoft)
• Suomi.fi Privacy Page (Suomi.fi)
• Admicom Privacy Page (Admicom, Nomentia)
• Heeros GDPR (Heeros)
• Netbaron Privacy page (Netbaron)
• Telia Inmics-Nebula (IT)
• Fuusor (Rantalainen BI)
• FabricAI (FabricAI)
• Fennoa (Fennoa)
• Koho (Rantalainen Portaali)
• Zendesk (tuki.rantalainen.fi)
• Profit Software (Profit Hunter)
• eTasku Solutions (eTasku)
• Doks (Doks)
• Cerberus (Rantalainen SFTP)

Data Protection Officer

Rantalainen’s acting data protection officer is director of legal affairs Kimmo Martikainen (kimmo.martikainen@rantalainen.fi, 040 555 8081)

Your contact person in contractual issues

Primarily service managers, service executives and your personal contact person will address your questions. However, if you prefer you may also contact the persons below.