Privacy Notice

1. Information about Hehku Energia

Hehku Energia Oy is an energy company serving consumer and business customers across Finland in matters related to electricity and energy solutions. We are part of the Swedish Elify Energy Group AB group, one of the leading energy groups in the Nordic countries.

When processing personal data, we comply with the applicable data protection legislation, including the EU General Data Protection Regulation. In this Privacy Notice, we explain how we process your personal data. If you have any questions about how we process your personal data after reading this notice, please contact our customer service.

2. Electricity contracts: collection and processing of personal data

We collect and store personal data for customer identification, entering into and performing electricity contracts, ensuring and maintaining our products and services, invoicing and debt collection, marketing and communications, and fulfilling legal obligations.

Personal data is processed in accordance with data protection legislation and otherwise appropriately. The processing of personal data is based on the contract between the customer and Hehku Energia, or on Hehku Energia’s right to process certain personal data.

When you enter into an electricity contract with us, we need the following personal data to conclude and administer the contract:

- Private customers: name, personal identity code, email address, phone number, the address of the electricity consumption site, and, where applicable, a separate billing address.
- Business customers: company name, Business ID, contact person’s name, email address, phone number, the address of the electricity consumption site, and, where applicable, a separate billing address.

Hehku Energia has a statutory obligation to disclose information through the centralized data exchange service maintained by Fingrid Datahub Oy. More information on the processing of personal data in this context is available at:
https://www.fingrid.fi/tietosuojaselosteet/

In addition, we store your customer number, information on your marketing consent, and any other supplementary information, such as information on guardianship, a non-disclosure order, billing method, or additional details related to the electricity contract. Personal data may also be collected and updated from third-party registers, such as the Digital and Population Data Services Agency or another data controller.

To assess creditworthiness, we use and disclose some of this information to an external provider carrying out credit checks. We also disclose billing information to our billing partner.

The legal bases for processing personal data are your acceptance of our terms and conditions of sale when entering into the electricity contract, our right to conduct our business, and the information we are required to have in order to fulfill our statutory obligations. Personal data is not disclosed outside the Finnish companies of the Elify Energy Group AB group or to third parties beyond what is stated here. Personal data is stored only for as long as necessary for the purpose for which it is used.

3. Communications and marketing: collection and processing of personal data

We use the customer data we collect for marketing, communications, and customer surveys within Hehku Energia and together with our partners, i.e. third parties. The processing of personal data is based on the contract between the customer and Hehku Energia, or on Hehku Energia’s right to process certain personal data. Personal data is not disclosed outside the Finnish companies of the Elify Energy Group AB group or to third parties beyond what is stated here.

The personal data of consumer customers is used for electronic marketing in accordance with EU data protection legislation if you have given marketing consent. You may opt out of electronic marketing at any time. You can choose your marketing consent preferences when entering into the electricity contract, by notifying our customer service separately, or by withdrawing your consent through a marketing email.

For business customers, we carry out marketing on the basis of Hehku Energia’s legitimate interest in conducting direct marketing. Personal data may also be collected from third-party services, for example for sales purposes.

We communicate by email or letter regarding matters that are relevant to the customer relationship. Customers also have access to a personal customer portal where they can find up-to-date information related to the customer relationship. Customers and stakeholders may receive email marketing from us in addition to customer communications sent by email.

If you order, terminate, or modify an electricity contract with us by phone, we may record the conversation. The call recording is stored in accordance with Hehku Energia’s practices and processes in force at the time, for as long as necessary, until the contract has been documented or an up-to-date invoice has been issued.

You may contact us by phone, email, or letter. When you contact us by any of the above methods, you may be asked to provide your personal data if this is necessary for handling the matter in question.

If you order a contract through a form submitted on our website, your IP address may be stored.

Data may be transferred outside the EU or EEA only using appropriate safeguards, such as the European Commission’s adequacy decisions and standard contractual clauses, as well as the EU-US Data Privacy Framework.

4. Cookies: collection and processing of personal data

Our website, www.hehkuenergia.fi, uses cookies in order to develop our website, products, and services. We use an analytics tool to store and analyze cookie data. Our online advertisements may also place such cookies in your browser, among other things to measure the effectiveness of advertising. We also use other external service providers to develop our website and advertising.

However, we process your personal data only to the extent that you have consented to the use of cookies, and we will stop the processing if you withdraw your consent to their use. Cookie data is processed in accordance with data protection legislation and otherwise appropriately. Personal data is not disclosed outside the Finnish companies of the Elify Energy Group AB group or to third parties beyond what is stated here.

Data may be transferred outside the EU or EEA only using appropriate safeguards, such as the European Commission’s adequacy decisions and standard contractual clauses, as well as the EU-US Data Privacy Framework.

5. Third parties: collection and processing of personal data

Hehku Energia is responsible for processing the personal data that we collect in order to conclude an electricity contract. We disclose personal data to our partners to the extent necessary for our operations. Our partners are committed to processing personal data in the manner described in our Privacy Notice.

We use publicly available registers to verify the accuracy of data in our possession or received from third parties. These registers then function as reference sources from which personal data such as name, address, and phone number may be collected or verified.

Third parties include the electricity network operator supplying electricity, the provider of accounting services, service providers sending invoices and payment reminders, a debt collection agency handling possible collection claims, IT suppliers, marketing and communications partners, and authorities where personal data may be required under legislation, a court decision, or a legally binding decision of an authority.

Data may be transferred outside the EU or EEA only using appropriate safeguards, such as the European Commission’s adequacy decisions and standard contractual clauses, as well as the EU-US Data Privacy Framework.

6. Your rights

You have the right to request access to your personal data, rectification of your personal data, restriction of processing, transfer of your personal data to another company, or deletion of your personal data from Hehku Energia’s register. You may also lodge a complaint with the data protection supervisory authority in your area.

You have the right to know how Hehku Energia processes your personal data. You may request a copy of the personal data concerning you and information on how we process it.

You have the right to have your personal data rectified. You may correct the data you have provided to us by contacting our customer service. You also have the right to request restriction of processing to the extent permitted under applicable legislation. In accordance with your rights, we may transfer personal data to another company, i.e. from one system to another, where necessary.

You may request that we delete the personal data we hold about you. However, we will retain the data we need, for example, to fulfill statutory obligations related to accounting and financial statements. Such data will nevertheless be deleted as soon as the relevant obligations have been fulfilled.

7. Implementing changes to the Privacy Notice

If we consider it necessary to amend the Privacy Notice, updates may be made without prior notice. The Privacy Notice is available on our website. Our processing of personal data is based on the legislation and specific practices in force at the time.

Contact details
Hehku Energia Oy
Verkkosaarenkatu 5
00580 Helsinki
Business ID: 2304509-2
[email protected]
Tel. +358 9 6898 8780

Effective from: 1 July 2018
Last updated: 16 January 2025