5.3.2018

New IT2018 General Terms and Conditions Published – Key Update, GDPR-Compliant Special Terms and Conditions Processing Personal Data

The new IT2018 general terms and conditions have just be published to replace the IT2015 general terms and conditions. The update is motivated by the EU’s General Data Protection Regulation (GDPR), which will be applied starting on 25 May 2018. The IT2018 general terms and conditions are meant to be applied in small and mid-size IT procurements between businesses.

The largest change is that special terms and conditions for the processing of personal data (EHK) have been added to help meet the GDPR’s requirements in IT deliveries. These special terms and conditions will be a welcome aid both in future IT projects and in updating existing agreements. The general terms and conditions and cloud service terms and conditions have also been updated.

The GDPR requires that the outsourcing of personal data processing must be agreed in writing between the data controller and the data processor. This means that when a supplier processes personal data on behalf of its client as part of an IT delivery, this processing requires a written agreement fulfilling certain minimum requirements. This applies to both new and existing agreements, which means that existing agreements will have to be reviewed and updated to meet the GDPR’s requirements. The GDPR sets the minimum requirements for such agreements, such as commitments to comply with the data controller’s instructions and implementing sufficient data security.

The IT2018 EHK terms and conditions meet the GDPR’s minimum requirements and can be used as a base for data processing agreements. However, when drafting an agreement, it is important to account for the nature of the product or service being delivered and to ensure that the obligations concerning, for example, data security are sufficient with respect to the risk of the processing being outsourced. The IT2018 general terms and condition assume that the EHK terms and conditions take precedence over the other IT2018 terms and conditions.

The IT 2018 general terms and conditions have been drafted in cooperation by the Finland Chamber of Commerce, Ohjelmistoyrittäjät ry, the Finnish Association of Purchasing and Logistics LOGY, Technology Industries of Finland and the Finnish Information Processing Association, TIVIA.

Read more about outsourcing personal data processing on out blog.

For more information, please contact:

Pia Ek 

Mikko-Pekka Partanen 

Kimmo Rekola

Latest references

We advised Jolt Capital and Tesi in connection with their investment in VEV, a leading provider of commercial fleet electrification solutions. The investment, led by Jolt Capital with Tesi as co-investor, will support VEV’s next phase of growth and expansion across Europe. As part of the transaction, VEV became an independent company following the acquisition of Vitol’s stake in the business. Founded by Vitol, VEV provides integrated fleet electrification solutions combining fleet strategy, charging infrastructure, energy supply and operational services. Through its VEV IQ platform, the company supports more than 6,000 commercial electric vehicles across Europe and has been deployed across more than 600 sites spanning the transport, logistics and waste sectors. Jolt Capital is a private equity firm focused on growth investments in European deeptech companies. Tesi is a Finnish state-owned investment company that promotes Finnish business and economic growth through investments. We advised Jolt Capital and Tesi on the equity financing and structuring aspects of the transaction. International law firm Goodwin advised the investors on the acquisition of VEV.
Case published 10.9.2026
VR-Group Plc is a transport and logistics group owned by the Finnish State, operating passenger and freight rail transport in Finland with activities also in the Swedish market. VR Group provides passenger, logistics and maintenance services with over 160 years’ experience in developing responsible transport of the future. We advise VR Group in intellectual property matters as part of the company’s wider brand protection efforts. Our assignments have included advice on copyright, design rights and trademarks, focusing on the protection of the company’s visual identity – including its distinctive green colour – in connection with transport services as part of a comprehensive IP protection strategy. VR Group’s consistent brand building has also received recognition, including the Finland Chamber of Commerce’s Brand of the Year award in 2026. In the competition, brands were viewed comprehensively from various perspectives, including their story, strategic role, brand renewal ability and intellectual property protection. The jury found that VR had understood the importance of the protection of its brand as part of a comprehensive business strategy. 
Case published 9.9.2026
We advised NoHo Partners Plc on the issuance of EUR 50 million senior secured floating rate notes. The notes have a tenor of four years and mature on 10 September 2030. The notes bear interest at a rate of three-month EURIBOR plus a margin of 4.375 per cent. per annum. The notes were allocated to a mix of domestic and international investors. We also advised NoHo Partners on the negotiation of its new senior facilities agreement. The facilities agreement comprises a EUR 60,000,000 term loan facility, a EUR 10,000,000 capex facility and a EUR 27,000,000 revolving credit facility. “We are delighted by the interest investors have shown in the company’s Notes, which reflects confidence in our strategy. The successful issuance of the Notes, together with the new loan agreement, extends the maturity profile of our financing and enables the company to continue executing its growth strategy going forward. I would like to thank all investors for their participation, as well as our partner bank for the excellent execution of the Notes issuance”, says Jarno Suominen, CEO of NoHo Partners. OP Corporate Bank plc acted as the sole lead manager and bookrunner for the issue of the notes. NoHo Partners Plc is a Finnish group established in 1996, and it specialises in restaurant services being the creative innovator of the Northern European restaurant market. The company was listed in Nasdaq Helsinki in 2013 becoming the first Finnish listed restaurant company, and it has continued to grow strongly throughout its history. NoHo Partners’ vision is to be the leading restaurant operator in Northern Europe.
Case published 4.9.2026
We advised Topfoods Oy, a Triton-backed Geia Group company, on its acquisition of Oy Delice Plus Ab, a Finnish supplier of cakes and pastries. Through the acquisition, Topfoods strengthens its retail business and further reinforces its position in the cakes and pastries segment. Founded in 2008, Topfoods supplies selected food products to professional kitchens, the retail sector, and the food industry. 
Case published 4.9.2026