Privacy policy of the user register


1. Controller

This leaflet is available in several languages. If there were a difference of interpretation between the language versions, the Finnish version is dominant.

DuuniOnline Oy (Business ID: 3020384-5)
Volttikatu 5
70150 KUOPIO

The data subject must contact PalkkaOnline's customer service in all questions related to the processing of personal data and in situations related to the exercise of the rights of data subjects.

PayOnline customer service email address: or by mail:

DuuniOnline Ltd.
Volttikatu 5
70150 KUOPIO

2. Purpose and legal basis for the processing of personal data

Personal data is processed for the following purposes:

  • Service provision, customer relationship management, management and customer communications
  • Maintain user data
  • Perform user-mandated orders, such as sending invoices and receiving payment from the customer, paying wages, managing insurance matters and collecting them
  • Queries, such as customer satisfaction surveys
  • To fulfil legal obligations under the law and in accordance with the regulations and instructions of the authorities, such as the management of tax matters
  • Business and service development, statistics, analysis and information security
  • Risk management
  • Identifying abuses
  • Marketing
  • Users are profiled and decisions based on automated processing can be made on the basis of personal data, such as the targeted provision of additional services.

The processing of personal data is based on a contract, consent to a legal obligation or a legitimate interest of PalkkaOnline. Legitimate benefits include intra-group data transfers, data processed to implement data security, investigation of abuses and direct marketing.

3. Personal data to be processed

The personal data processed may include:

  • Name
  • Contact information (phone number and email address)
  • Age
  • Sex
  • Business
  • Personal identity code
  • Nationality and information on work permits, if applicable
  • Tax information
  • Possible enforcement information
  • Information related to the payment of wages
  • Account-related information, such as information about customer authorized assignments
  • Necessary identification and technical usage data related to the transactions, such as customer service call recordings, cookies and log data, location data related to kilometre allowances
  • Copy of id if necessary
  • Documents required to check professional qualifications, e.g. the documents required for the verification of professional qualifications. certificates and certificates
  • Criminal background to determine the criminal background of those working with children. Only the presentation of the extract and its identity shall be recorded in the data subject's data. The extract will not be permanently saved.
  • Customer's assessments of the service performed with the user's consent

4. Regular data sources

As a rule, we collect personal data from the data subject himself or herself in connection with the registration and use of the service. Data can also be collected from the customer. Personal data is also collected and updated from authorities providing personal data services.

5. Disclosure

Personal data is disclosed to service providers who process personal data on behalf of PalkkaOnline in accordance with the obligation of professional secrecy and the data protection obligations of the agreement.

Personal data may also be disclosed to authorities entitled to access to the data, to the limits permitted and required by the legislation in force. In addition, personal data may be disclosed to other companies belonging to the Group for the purposes set out in the report and for the marketing of their products and services, as well as for administrative purposes, such as the processing of data in a centralised information system.

6. Retention period of personal data

Personal data will be stored for as long as its processing is necessary for the purposes of the collected personal data for a maximum period of 10 years from the person's last use, unless the data subject has withdrawn any consent he or she may have given. Personal data may be stored for a longer period of time if this is necessary in accordance with legislation or other sources of authorities, such as: to fulfil the obligation of the Accounting Act.

7. Registry protection

The register is stored in a secure system, accessed only by the controller and the technical administrators authorised by the controller.

8. Rights of the data subject

The data subject has the right to request from the controller access to personal data concerning him or her, the right to request rectification of his or her personal data, restriction of processing or erasure of personal data, and the right to object to the processing of his or her personal data. The data subject also has the right to receive the personal data provided by him or her in a commonly used, machine-readable format and the right to transfer that data to another controller. If technically possible, the data subject has the right to have the personal data transferred directly from one controller to another.

9. Right to lodge a complaint with a supervisory authority

The data subject has the right to lodge a complaint with the competent supervisory authority if DuuniOnline Oy has not complied with applicable data protection legislation in its operations.


Sign up for Palkkaonline.


Customer service:
010 319 8830