1. Data controller
ARVOLUOTTO
Address: Malmin kauppatie 18, 00700 Helsinki, Finland
2. Privacy contact
For any questions about this privacy notice or the processing of your personal data, contact:
ARVOLUOTTO — Privacy
Email: contact@arvoluotto.com
3. Purposes and legal basis of processing
We process personal data for the following purposes:
- Receiving and processing loan applications
- Assessing creditworthiness and affordability
- Managing customer relationships and providing customer service, including contact by email and WhatsApp
- Complying with legal obligations, including consumer protection and anti-money-laundering rules
- Marketing communications where consent has been given
The main legal bases are steps taken before entering into and performing a contract, compliance with the controller’s legal obligations and, where applicable, your consent, such as for marketing.
4. Personal data processed
Depending on how you contact us, we process information including:
| Contact method | Data collected |
|---|---|
| Contact form | First name, last name, email, optional phone number, message subject and content |
| Loan application | First name, last name, email, phone number, country, occupation, loan type, amount, term and purpose |
| WhatsApp contact | Your phone number and messages, in accordance with WhatsApp’s own privacy policy |
To make a lending decision, we may also obtain your credit information from an authorised credit information provider in accordance with applicable law.
5. Sources of data
Most data comes directly from you when you complete a contact form or loan application, or contact us by email or WhatsApp. We may also obtain information from a credit register to support a lending decision.
6. Disclosure and transfer of data
We do not sell your personal data. Where necessary, we may disclose it to:
- Authorities to comply with legal obligations
- A credit information provider to assess creditworthiness
- Service providers processing data on our behalf, such as hosting and email providers, under data-protection agreements
Some services we use, such as Meta-owned WhatsApp, may process data outside the European Economic Area. In such cases, we ensure the transfer is protected in accordance with applicable data-protection law.
7. Retention period
We retain personal data only as long as necessary for the purposes described here or as required by law, such as accounting legislation. If an application does not result in an agreement, we delete your data within a reasonable period.
8. Data security
We protect personal data using appropriate technical and organisational measures, including:
- All transfers through our website and forms are protected by SSL encryption
- Access is restricted to people who need the data for their work
- Systems and practices are updated regularly to maintain security
9. Cookies
Our website may use cookies to improve your experience and analyse site operation. Read more about the cookies we use in our cookie policy.
10. Your data protection rights
Under data-protection law, your rights include:
- Right of access — to know what personal data is stored about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure — to request deletion of your data under certain conditions
- Restriction of processing — to request restricted processing in certain situations
- Right to object — to object to processing in certain situations, including direct marketing
- Right to data portability — to receive data you provided in a structured format for transfer to another controller
- Withdrawal of consent — to withdraw consent at any time, including for marketing
You can exercise these rights by contacting contact@arvoluotto.com.
11. Right to lodge a complaint
If you believe your data has been processed in breach of data-protection law, you may complain to the competent supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (tietosuoja.fi).
12. Changes to this notice
We may update this notice when legislation changes or our services develop. We recommend checking this page periodically and will seek to communicate significant changes separately.