Privacy Policy

Barmo (Business ID: 3111862-6) is the data controller for all personal data processed in connection with Barmo Books services.

Contact: Barmo Vantaa, Finland Email: barmo.fin@gmail.com

If you have any questions or requests regarding your personal data, please contact us at the email address above.

We collect only the personal data that is necessary to provide our bookkeeping and VAT filing service. This includes:

• Full name and contact details (phone number, email address)
• Business identity information (Y-tunnus / Business ID, VAT registration number)
• Financial records: Wolt and other platform earnings PDFs, self-billing invoices, and expense receipts
• Bank account details where required for VAT refund processing
• Suomi.fi authorisation records confirming the mandate you grant us to act on your behalf in OmaVero
• Correspondence sent via WhatsApp, email, or our upload portal

We do not collect special categories of personal data (e.g. health, political opinions, biometric data).

We process your personal data on the following legal bases under GDPR Article 6:

• Article 6(1)(b) — Performance of a contract: processing is necessary to deliver the bookkeeping and VAT filing services you have engaged us to provide.
• Article 6(1)(c) — Legal obligation: we are required to maintain accounting records under Kirjanpitolaki (Accounting Act) 1336/1997 and to file accurate tax returns and VAT declarations with Verohallinto (Finnish Tax Administration) on your behalf.
• Article 6(1)(f) — Legitimate interests: we may process contact data to send you service-related communications, deadline reminders, and updates material to your obligations as a self-employed person in Finland.

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Accounting records (invoices, receipts, VAT filings, tax returns): 6 years from the end of the relevant financial year, in accordance with Kirjanpitolaki 1336/1997 § 10.
• Financial statements, ledgers, annual summaries, and chart of accounts: 10 years from the end of the relevant financial year, in accordance with Kirjanpitolaki 1336/1997.
• Contact information and service correspondence: 2 years from the end of the service relationship, unless a longer retention period is required by applicable law.
• Suomi.fi authorisation records: retained for the duration of the mandate and for a reasonable period thereafter for audit purposes.

When the applicable retention period expires, we securely delete or anonymise the data.

We share your personal data only where necessary and with appropriate safeguards in place:

• Verohallinto (Finnish Tax Administration): We submit VAT returns and tax information on your behalf as required by Finnish law. This transfer is mandatory and based on our legal obligation.
• Bookkeeping software providers: We use cloud-based accounting tools to prepare and store your financial records. These providers act as data processors under a data processing agreement.
• WhatsApp / Meta Platforms: You may communicate with us via WhatsApp. Please be aware that WhatsApp is operated by Meta Platforms, Inc. Messages sent via WhatsApp are processed under Meta's own privacy policy. We recommend sending sensitive documents via our secure upload portal where available.
• Professional advisors: We may share data with auditors or legal advisors where strictly necessary, under confidentiality obligations.

We do not sell, rent, or otherwise disclose your personal data to third parties for marketing purposes.

Most of the personal data we process is stored and handled within the European Economic Area (EEA).

Where data is transferred outside the EEA — for example, via WhatsApp/Meta infrastructure or certain cloud-based tools with non-EEA data centres — we ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or an adequacy decision, in accordance with GDPR Chapter V.

If you would like more information about the specific safeguards applied to any international transfer, please contact us at barmo.fin@gmail.com.

We apply reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Access controls: only personnel who need access to your data for service delivery can access it.
• Encrypted communications where supported.
• Secure cloud storage with password protection and, where available, multi-factor authentication.
• Prompt deletion of data once retention periods expire.

No method of transmission over the internet or electronic storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Finnish Data Protection Ombudsman within 72 hours as required by GDPR Article 33. Where the breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay, as required by GDPR Article 34.

Under the General Data Protection Regulation you have the following rights in relation to your personal data:

• Right of access (Article 15): You may request a copy of the personal data we hold about you.
• Right to rectification (Article 16): You may ask us to correct inaccurate or incomplete data.
• Right to erasure (Article 17): You may ask us to delete your data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to restriction of processing (Article 18): You may ask us to restrict how we use your data in certain circumstances.
• Right to data portability (Article 20): You may request your data in a structured, commonly used, machine-readable format.
• Right to object (Article 21): You may object to processing based on our legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at barmo.fin@gmail.com. We will respond within one month. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (see Section 10).

This website does not use non-essential cookies, tracking pixels, analytics scripts, or advertising identifiers. We do not run Google Analytics, Google Tag Manager, Meta Pixel, Hotjar, or any equivalent third-party tracking tool.

The only cookies or browser storage that may be set are strictly necessary technical cookies required for the website to function (for example, session state on authenticated pages within the Barmo Books client portal). These do not track you across websites and do not require your consent under the Finnish Act on Electronic Communications Services.

Not legal or tax advice. The information and materials provided on this website and through Barmo Books services are for general informational purposes only. Nothing on this website, or in any communication from Barmo, constitutes legal advice, tax advice, or the establishment of a solicitor–client or accountant–client relationship of a kind that creates professional liability beyond the scope described below. You should seek independent professional advice for matters specific to your circumstances.

Scope of service. Barmo Books provides bookkeeping support and VAT filing assistance to self-employed individuals and toiminimi operators in Finland, specifically gig economy workers such as Wolt courier partners. Our service is limited to preparing and submitting periodic VAT returns and supporting annual income tax return preparation based on the documents and information you provide. We do not provide legal representation, insolvency advice, pension planning, or regulated financial advice.

Client responsibility for accurate information. You are responsible for providing accurate, complete, and timely documents and information. Barmo acts in good faith on the basis of the records you supply. If you provide incorrect, incomplete, or misleading information — whether intentionally or otherwise — Barmo accepts no liability for any resulting tax assessment, penalty, interest charge, or other consequence. You remain the taxpayer of record and are personally responsible for the accuracy of filings submitted to Verohallinto on your behalf.

Regulatory status. Barmo provides bookkeeping services in accordance with Kirjanpitolaki (Accounting Act) 1336/1997. Barmo is not a licensed auditor (KHT/HT), a licensed tax consultant, or a member of a regulated professional body.

Limitation of liability. To the maximum extent permitted by Finnish law, Barmo's aggregate liability to you for any claim arising from or in connection with the services — whether in contract, tort, or otherwise — is limited to the total fees paid by you to Barmo in the three calendar months immediately preceding the event giving rise to the claim. This limitation does not apply to liability arising from Barmo's own gross negligence or wilful misconduct.

For questions about this Privacy Policy or to exercise your data rights, please contact us:

Email: barmo.fin@gmail.com Barmo, Vantaa, Finland

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) Website: tietosuoja.fi Telephone: +358 29 566 6700