Privacy Policy Details

Date Created: 07 May 2025
Last Updated: 14 September 2026

1. Data Controller

Elekti Oy
Business ID: 3513145-7
Address: Länsituuli 6, 02100 Espoo
Email: info@elekti.fi

This Privacy Policy explains what personal data Elekti Oy collects from individuals who use its service (hereinafter referred to as the “User”) and how this data is processed and stored. The “Service” refers to Elekti Oy’s loan provider comparison service.

If necessary, you can contact Elekti’s Data Protection Officer by email: dpo@elekti.fi

2. Legal Basis for Data Protection

The applicable legislation includes the EU General Data Protection Regulation (GDPR), the Finnish Data Protection Act, and the provisions of the Act on Electronic Communications Services.

3. Data Collected and Sources of Information

Personal data collected:

  • Name
  • Personal identity code
  • Date of birth
  • Nationality
  • PEP (Politically Exposed Person) status
  • Address
  • Email
  • Phone number
  • Income
  • Debts
  • Housing type
  • Marital status
  • Employment and education details
  • Customer feedback and inquiries
  • Technical data obtained from cookies, such as IP address

Internal sources of information:

  • Application forms
  • Customer service communications

External sources of information:

  • Population Information System
  • Cookies and analytics tools
  • Credit information systems
  • Electronic identification services

4. Purpose and Legal Basis for Processing

Performance of a Contract

  • Customer service
  • Service delivery – including comparisons, processing applications, and forwarding applications to banks based on the performance of a contract.
  • Automated decision-making and profiling – selecting suitable partners related to the application.

Legal obligations

In addition to fulfilling contractual obligations, Elekti complies with duties defined in laws, regulations, and official decisions, as well as general regulatory requirements for the financial sector.

Legitimate interest

  • Direct Marketing – We may process your personal data for the direct marketing of Elekti’s services and other financial and related services that may be of interest to you, if you are our customer or have used our services. Direct marketing may be carried out through channels permitted by applicable law, including by telephone.
  • Analytics – Personal data may be processed for monitoring, analysing, compiling statistics on and developing the quality of our services. For these purposes, Elekti Oy may also anonymise personal data so that individual users can no longer be identified.

When we process personal data on the basis of our legitimate interests, we take into account the impact of such processing on the user’s privacy and data protection rights. Users have the right to object at any time to the processing of their personal data for direct marketing purposes.

Consent

Where direct marketing requires the user’s prior consent, such as in connection with electronic direct marketing where required by applicable law, the processing is based on the user’s consent. The user may withdraw their consent at any time.

5. Automated Decision-Making and Profiling

Our service uses profiling to assess a customer’s eligibility to use the service. Profiling is based on information provided by the user, such as date of birth and monthly income.

Practical implications
Only individuals who meet the following criteria are accepted as users of the service:

  • Are at least 20 years old, and
  • Report a minimum monthly income of €1,000

If the user does not meet these conditions, the system will automatically prevent the use of the service.

Right to object
The user has the right to request not to be subject to a decision based solely on automated processing that significantly affects them. In such cases, the user may contact the Data Protection Officer and request a manual review of the matter.

Legal basis
Profiling is based on the user’s consent and is necessary for the conclusion of a contract, to ensure that the service requirements are met.

6. Cookies and Web Technologies

We use both technically necessary cookies and analytics/advertising cookies, which can be managed through your browser settings. The use of cookies is related to enabling features such as visitor tracking, device analytics, and personalization.

7. Data Disclosure and Transfers

Data may be disclosed to:

  • Banks, financial institutions, and insurance companies for the purpose of comparison services
  • IT services for system development and support
  • Analytics services for service improvement
  • Marketing purposes for service development
  • Authorities, where required by law
  • Corporate transactions – personal data may be disclosed in connection with a merger, acquisition, transfer of a business or part thereof, or other similar corporate transaction to the parties involved in the transaction and their advisers to the extent necessary to evaluate or complete the transaction.

Data may be transferred outside the EU/EEA area only with the user’s explicit consent.

8. Data Retention

Personal data will be retained for as long as necessary for the purposes for which it was collected, or for as long as required by applicable laws and regulations. When a comparison service is carried out for a user through our service, an active customer relationship is established. The customer relationship remains active for 24 months from the completion of the comparison, after which the data will be processed for an additional 12 months following the end of the customer relationship. The processing of personal data will cease no later than 36 months after the completion of the comparison.

With respect to personal data disclosed to Partners, the applicable retention period is determined in accordance with each Partner’s own privacy practices. In particular, if the user accepts an offer, the Partner may have a legal obligation to retain certain application data for an extended period.

9. Data Subject Rights

As a data subject, you have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request the deletion of your data (“right to be forgotten”)
  • Restrict or object to the processing of your data
  • Request the transfer of your data to another data controller
  • Lodge a complaint with the Data Protection Ombudsman

Contact: dpo@elekti.fi

10. Data Security Practices

  • TLS/SSL connections
  • Firewalls and access control
  • Segregation of access rights
  • Regular audits and staff training

11. Changes to This Privacy Policy

Any updated policy will be published on our website and communicated to users in accordance with the agreement.

12. Contact Information

Elekti Oy
Länsituuli 6, 02100 Espoo
Email: dpo@elekti.fi