Privacy notice

Updated 16 October 2026

This notice explains how Day 2 Group Oy processes personal data on the Tasan website, on the waitlist, in the service and when we contact companies.

Controller

Day 2 Group Oy (Business ID 2740735-3)
PL 1188, 00101 Helsinki, Finland
Contact: hei@tasan.fi

What we process and why

Situation	Data	Purpose and legal basis
Waitlist	Work email, company, number of employees, payroll and HR systems in use, page language, campaign tag and time of sign-up	To tell you when the service opens and agree on getting started. We use the totals to gauge demand and decide which systems to build direct connections to. Legal basis: legitimate interest in answering your request for information (GDPR Article 6(1)(f)).
Service users	Email, organisation, user role, sign-in and audit logs, agreement acceptances (name, email, time and version) and billing details (company name, business ID, billing or e-invoice address and contact person)	To provide the service, manage access, keep it secure, invoice and document agreements. Legal basis: contract (Article 6(1)(b)), obligations under the Finnish Accounting Act (6(1)(c)) and legitimate interest in security and legal claims (6(1)(f)).
Business contacts	Name, role, work email or phone and company	To tell companies covered by pay transparency obligations about the service. The data comes from public sources such as company websites and the Trade Register. Legal basis: legitimate interest (Article 6(1)(f)).
Website use	IP address, browser details and time of request in server logs	To deliver the pages and keep them secure. Legal basis: legitimate interest (Article 6(1)(f)).

Customers' pay data

The customer is the controller of the employee data it brings into the service, and we process it on the customer's behalf under the data processing agreement (in Finnish). The service does not store names or personal identity codes. If a file contains identity codes, they are only used in the browser to derive gender. Employees can ask their own employer about their data.

Demo mode and your own files without an account

The demo company and any files you load into demo mode or drop on the front page stay in your browser's storage. They are not sent to us. You can clear them in the service settings or in your browser.

Cookies

We do not use analytics, tracking or advertising cookies. The pages do not load content from other companies' servers. Demo data and a signed-in user's session are saved in your browser's local storage because the service does not work without it.

Processors and transfers

Supabase Inc. stores the waitlist and the service data in a database located in the EU (Stockholm) and sends the sign-in links. Supabase may also access data from the United States. These transfers rely on the European Commission's Standard Contractual Clauses.
Vercel Inc. delivers the website. Vercel participates in the EU-U.S. Data Privacy Framework.

We do not sell personal data or share it with anyone else.

Retention

We keep waitlist data until you ask us to delete it, or until the service has opened and we have been in touch, and for no longer than two years from sign-up.
We keep user data while the account is in use. Agreement acceptances are kept while the agreement is in force and for three years after it ends.
Invoices and other accounting records are kept for the period required by the Finnish Accounting Act.
We delete business contact data when we no longer need it or when you object to being contacted.

Your rights

You can ask for access to your data and for it to be corrected, deleted or restricted. You can object to the processing, and you can opt out of direct marketing at any time. Send your request to hei@tasan.fi.

If you believe we process your data unlawfully, you can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

Automated decisions

We do not make automated decisions or create profiles.

Changes

We update this notice when our processing changes. The date of the latest update is shown at the top.