Privacy Notice
Privacy Notice for Saku Service
(updated 29.05.2026)
This Privacy Notice explains what personal data is processed in the Saku service, how the data is processed, and for what purposes the collected data is used. We also explain your rights as a consumer under EU data protection legislation.
1. Data Controllers
Savon Voima Plc
PO Box 1024, FI-70901 Toivala, Finland
Telephone: 017 223 111
Website: www.savonvoima.fi
Savon Voima Verkko Ltd
PO Box 1024, FI-70901 Toivala, Finland
Telephone: 017 223 111
Website: www.savonvoima.fi
Kuopion Energia Ltd
PO Box 105, FI-70101 Kuopio, Finland
Telephone: 020 520 01
Website: www.kuopionenergia.fi
Kuopion Sähköverkko Ldt
PO Box 105, FI-70101 Kuopio, Finland
Telephone: 020 520 01
Website: www.kuopionenergia.fi
Further information about the processing of personal data by each controller outside the Saku service is available at:
Savon Voima Plc and Savon Voima Verkko Ltd: www.savonvoima.fi/tietosuojaseloste
Kuopion Energia Ltd and Kuopion Sähköverkko Ltd: www.kuopionenergia.fi/tietosuoja
Savon Voima Plc (hereinafter “Savon Voima”) also acts as the operator and processor of personal data on behalf of the other above-mentioned controllers using the Saku service, to the extent that personal data is processed for the provision of the service.
2. What kind of data is processed in the Saku Service
Personal data processed in the Saku service is obtained either directly from you when you register for and use the service, or from the systems of the energy company whose customer you are.
Data retrieved from background systems
Saku service is primarily designed to retrieve users’ personal data from the systems of the relevant controller, i.e., the energy company whose customer the user is. Saku service is therefore not the primary storage location for this data. Instead, the data is retrieved from the systems of the energy companies listed above so that it can be displayed to the user. Customer, electricity consumption point, and contract information is retrieved through a database operated by Savon Voima, which receives the data from the controllers’ background systems. This database functions as a technical intermediary storage solution for the provision of the service.
The following categories of data may be processed in the Saku service:
- customer information, such as name, personal identity code, Business ID, customer number, contact details, preferred service language, and contact person or representative information.
- electricity consumption point and site information, such as address, purpose of use, estimated energy consumption, grid connection status, distribution interruptions, and measurement and control data from smart devices connected to the property.
- contract information, such as contract subject matter, duration, prices, billing address, and authorization or representative information.
- measurement data, such as energy consumption, production, and energy quality information.
- billing information, such as billing details, invoice status, and invoice documents.
- information related to fault reports, feedback, and monitoring services.
Data Collected by Saku Service
Saku service also processes information relating to service usage, identification, authentication, and technical operation:
- user information, such as email address, customer number, social security number provided during activation (not retained in identifiable form) or Business ID, and cookie and analytics consent preferences.
- service usage information, such as usage events, browser, operating system and device information, and IP address.
- technical service operation information, such as session and identification data, log data, and cache-related information.
Cookies and Analytics
Saku service uses cookies and similar technologies to ensure the functionality of the service and to analyze and improve its use.
The service uses:
- cookies that are necessary for the operation of the service
- analytics cookies that collect information about the use of the service
Analytics-related processing may include:
- statistical information collected regarding service usage
- technical identifiers and usage event data
- user consents and opt-out preferences
The use of analytics cookies is based on the user's consent. Consent is collected during the first login. Users may later manage and modify their preferences through the Privacy Settings section of the service.
3. For What Purposes and on What Legal Grounds Do We Process Your Data
We use your personal data to provide you with secure and efficient customer service experience and to manage our customer relationship with you.
We use your data for:
- Identification and secure authentication: to ensure that only you can access your own information.
- Customer relationship and contract management: for example, to provide services and display contract information.
- Displaying consumption and metering data: so that you can monitor your energy usage.
- Compliance with legal obligations: such as providing information required under energy sector legislation.
- Customer communications and notification services: for example, regarding contract changes, service interruptions, and new services.
- Service development and improvement of customer experience: for example, through analytics.
We only process your personal data to the extent necessary for the purposes described above.
The legal basis for processing personal data depends on the specific processing activity:
- contract, where processing is necessary for managing the customer relationship, performing a contract, or providing the service.
- legal obligation, where processing is necessary to comply with laws applicable to the controller, such as obligations arising under energy sector legislation.
- legitimate interests, where processing is necessary for the technical operation of the service, information security, incident management, customer communications, or service development and does not override the rights and freedoms of the data subject.
- consent, where processing relates, for example, to analytics cookies that require user consent.
4. Disclosure of Data and Data Processors
Personal Data Disclosures
Your personal data won’t be disclosed between the controllers (energy companies) mentioned in this Privacy Notice unless such disclosure has been separately agreed by a contract. Data may be disclosed to public authorities where required by applicable legislation.
Data Processors
Savon Voima acts as a processor of personal data for other controllers using the Saku service. Data processing has also been partially outsourced to partners under contractual arrangements ensuring that personal data is processed in accordance with this Privacy Notice.
5. Is Data Transferred Outside the EU or EEA
Data may be located outside the EEA due to the support services or data storage services of cloud service providers and technology suppliers used by us (for example, the Microsoft Azure platform). For such transfers, we rely on the European Commission’s Standard Contractual Clauses and the European Commission’s adequacy decision regarding the EU-US Data Privacy Framework, under which the relevant companies have been certified.
6. How Long Is Your Data Retained
The retention period depends on where the data is processed and the purpose for which it is used.
In the Saku Service
Saku Service does not generally store your personal data permanently. Instead, it functions primarily as a service that displays information stored in background systems. User information is retained as long as you remain a user of the service. Technical data is retained only for as long as technically necessary.
In Background Systems (Energy Companies’ Systems)
Most information is stored in the energy companies’ background systems and retained for the periods specified in the respective companies’ privacy notices, where the data is used for customer relationship management and service provision. Links to those notices can be found above (point 2).
7. How Is Your Data Protected
We protect your personal data through both technical and organizational security measures.
Data is stored in secured systems with restricted access. Security measures include:
- restricting access rights
- strong authentication methods
- firewalls and other technical security controls
- data minimization principles (processing only necessary data)
Each energy company providing the Saku service can access only the information for which it acts as the controller. Savon Voima, as the service operator, has limited access to data only when required to provide the service.
8. What Kind of Rights Do You Have
You have the rights listed below. Requests relating to these rights should be directed to the energy company whose customer you are. Requests for rectification, erasure, or restriction of processing will primarily be implemented in the controller’s background systems, from which the information is also updated in the Saku service. Rights may be exercised using the contact channels listed below (point 9).
Right of Access
You have the right to receive a copy of your data in paper or electronic form and to access your personal data. Most contract and consumption data can be viewed directly in the Saku service.
Right to Rectification
You have the right to have inaccurate or incomplete personal data corrected.
Right to Erasure and Restriction of Processing
You have the right to request the deletion of your personal data. We will also delete data when there is no longer a legal basis for processing it. However, not all information can necessarily be deleted at the end of a contract or upon request where a legal or contractual obligation requires continued retention.
You also have the right to request restriction of processing, for example where you contest the lawfulness of processing or have objected to processing while the matter is being investigated.
Right to Data Portability
In certain circumstances, you have the right to transfer the personal data you have provided to another system. This right may apply where processing is based on consent or a contract.
Right to Object
You have the right to object to processing based on legitimate interests, for example where personal data is processed for service development purposes.
Right to Lodge a Complaint with the Competent Supervisory Authority
If you believe that your personal data has been processed improperly or unlawfully, you have the right to lodge a complaint with the competent supervisory authority. We nevertheless encourage you to contact us first so that we may attempt to resolve the issue.
Office of the Data Protection Ombudsman (Finland):
- visiting address: Lintulahdenkuja 4, FI-00530 Helsinki
- postal address: PO Box 800, FI-00521 Helsinki
- telephone: +358 29 566 6700
- email: tietosuoja@om.fi
More information about your rights is available at the website of the Office of the Data Protection Ombudsman: https://tietosuoja.fi/
9. Contact Information
For enquiries concerning the processing of personal data or requests relating to data subject rights, please contact the energy company whose customer you are.
Savon Voima Plc and Savon Voima Verkko Ltd
You can contact us via:
- telephone: +358 17 224 400
- electronic contact form: https://savonvoima.fi/tietosuojaseloste/
- postal address: PO Box 1024, FI-70901 Toivala, Finland
- visiting address: Kapteeninväylä 5, FI-70900 Toivala, Finland
Kuopion Energia Ltd and Kuopion Sähköverkko Ltd
- email: asiakaspalvelu@kuopionenergia.fi
- telephone: +358 20 520 01
- electronic contact form: https://www.kuopionenergia.fi/tietosuoja/
- postal address: PO Box 105, FI-70101 Kuopio, Finland
- visiting address: Haapaniementie 30, FI-70100 Kuopio, Finland
We will respond to your request as soon as possible and no later than one month after receiving your request. Where there is a specific reason, the response period may be extended, in which case you will be informed of the extension. If the request cannot be fulfilled, you will be informed within the same time limit.