Privacy Policy

Privacy Policy, May 24, 2018

Privacy Policy - how we process
your personal data

Who we are and what this page is for

This Privacy Policy explains the privacy protection practices at Visma AI Works Oy (later referred to as "we"). We operate in Finland under Business ID 1856723-2 and our registered headquarters is located at Itsehallintokuja 6, 02600 Espoo.

Your privacy is important to us, which is why we are committed to protecting it. Below we will explain the principles that dictate how we process the data collected when you visit the site or otherwise communicate with us.

At the beginning of the application of the EU General Data Protection
Regulation ("Regulation"), this Privacy Policy replaces our previous privacy policy statement. In accordance with the Regulation, we wish to
inform our site users, customers and prospective customers (hereinafter referred to as "customer") of our personal data processing practices in a concise, transparent, easy-to-understand format, presented in clear and simple language.

We ask that you read the text carefully to understand our perspective and practices as they relate to the collection and processing of your data. If any questions arise about our data protection practices that are not answered by the information below, please feel free to contact us.

Contact Person for Data Protection

Any questions about this Privacy Policy may be directed to our Contact
Person for Data Protection, Jyrki Narvanto, see https://aiworks.visma.com/contact

Our Personal Data Register

We process our customers' personal data for various purposes and
therefore this is done in part in different registers.

Purposes and legal grounds for our processing of personal data

We process personal data in accordance with this Privacy Policy primarily for the purpose of managing the customer relationship, but also for reporting/statistics/development, as well as to provide information and market our products and services. We process data on the basis of the following legal grounds: to fulfil the agreement, to fulfil our legal obligations, and on the basis of legitimate interest and consent.

To sum up, it can be said that our legitimate interest is particularly concerned with raising awareness of our products and services, developing our operations, obtaining additional sales and maintaining effective partnership networks.

E.g. on legal grounds, we use the data we collect from our site as
follows:

  • to ensure that the content of the site is presented to you
    and your computer in the most effective form possible
  • to provide you with the information, products and services
    you have ordered from us (or from third parties, depending
    on the situation)
  • to fulfil our obligations in accordance with our mutual
    agreements
  • to allow you access to interactive features of our service, if
    you wish
  • to notify you of changes to our service
  • for customer service and marketing purposes.

What data we collect and
process (types of personal data)

(a) from you

We collect and process personal data about you when you provide it to us by filling in forms on the site, when we communicate in some other way or as we fulfil our contractual obligations. The data you provide to us includes, for example, the information you provide when you fill out a contact request, when ordering services, e.g. newsletters, when adding your own material to the site, for example when commenting on articles or when we otherwise cooperate. Our registers process, among other things, the information contained in the following data groups: basic personal data such as name, contact information, email address and company information. In addition, we process data
information related to our website and services, such as the interest information you provide; your username and password; direct marketing permissions and prohibitions.

(b) using cookies

In addition, we use “cookies” to collect information about your internet
use in general. These data may include, for example, IP addresses, browser versions, number of visits, and corresponding information about internet usage and site visits. "Cookies"; are small text files that are stored on your computer's hard drive. Cookies allow us to improve our site and provide services that are more accurately adapted to your needs, for example by storing your favorites and identifying you whenever you return to our website. You can prevent cookies from being saved by activating those settings on your internet browser.
Please note, however, that not accepting cookies may prevent you from accessing certain features of our website.

(c) otherwise

We also use public sources where necessary to ensure, for example, that your data are accurate and up-to-date. In our marketing, we also use reliable partners who may provide us with information.

To whom we disclose your data

In accordance with this Privacy Policy and within the limits of applicable law, we may disclose your personal data to companies within our group around the world and to service providers (including HubSpot), which are third-party partners of ours. We ensure that these partners share our views on privacy and are committed to practices equivalent to our own.

Transferring your data on the internet by other means

Unfortunately, transferring data over the internet is not completely safe. That's why you're responsible for the data transfer you make yourself. Upon receipt of your information, we will apply strict procedures and security measures to prevent any unauthorized access to your data. However, we cannot guarantee that the information you provide to us is completely protected from third-party misconduct. Once you have received (or selected) a password to gain access to
certain functions of the site, you are responsible for keeping the password secret. We require that you do not reveal the password to anyone.

We will not transfer your data outside the EU or the European Economic Area.

Our marketing principles

Please note that our products and services are intended for business and/or professional use. Therefore, for example, when you leave your contact information or download material from our site, you understand that we may also contact you later to provide more information about the benefits of our products and services to the organization/company you represent.

Storage of personal data

We process personal data in accordance with the purpose and time of use. We would like to remind you that factors including legal obligations may require us to retain data, for example even after the termination of an agreement between us. In addition, it is worth noting that we may retain essential data for the production of statistics if necessary, in such a way that the customer is not directly or indirectly identifiable.

Your rights as a data subject

You have

  • the right to access your personal data
    - you can contact us to see what data has been saved
    about you
  • the right to rectification of data
    - although we strive to have complete and up-to-
    information, you can contact us and request that incorrect
    information be corrected
  • the right to delete data
    - if the purpose of use has ended and you have, for
    example, withdrawn your consent for a particular type of
    data processing, we will delete your data. You have the right
    to require this from us, as well
  • the right to restrict processing
    - you can contact us and, for example, limit the
    permissions you gave previously
  • the right to object
    - we have created mechanisms for our customers to object
    to the processing of their personal data and we also remind
    you of this in our newsletters, for example
    - to the extent that the processing is based on consent, you
    always have the right to freely withdraw your consent
  • the right to transfer data from one system to another
    - you can contact us if you need your data on systems
    other than ours and we will try to provide the data in such a
    way that they can be transferred to another system.

Other things to consider

Although we strive to act in accordance with the Regulation, if necessary, you can be in touch with our Contact Person for Data Protection, or lodge a complaint with the relevant supervisory authority.


When collecting data, we aim to inform you of which are voluntary and which are mandatory data. In principle, at least the data listed above are necessary for the provision of services (and thus, for example, for the fulfilment of obligations under the agreement/act).


We also use your personal data automatically to ensure the quality of our operations (e.g. targeting our information). However, we do not make individual decisions based on your personal data.