Privacy Policy

Prepared 5 October 2026

This policy explains how Pysyvä Isännöinti processes personal data on its website and through its contact and quote request forms. The policy does not cover the processing of personal data in connection with the resident portal or property management services; separate information is provided on those.

1. Controller and contact details

Controller: Pysyvä Isännöinti Oy Business ID: 3657903-4 Postal address: Kampinkuja 2, 00100 Helsinki, Finland Email: asiakaspalvelu@pysyva.fi Phone: 040 505 2565

Requests and questions concerning data protection can be sent to the email address above.

2. Purposes and legal bases of processing

We process data received through the website for the following purposes:

• Responding to contact requests and maintaining communication. The legal basis is our legitimate interest in handling messages sent to us and responding to them (GDPR Article 6(1)(f)). If the contact concerns a contract or its conclusion, the processing may also be based on taking steps prior to entering into a contract (Article 6(1)(b)).
• Processing quote requests and preparing quotes. The legal basis is taking steps prior to entering into a contract at the data subject’s request (Article 6(1)(b)).
• Measuring and developing the use of the website. The purpose and legal basis of this processing depend on the analytics solution in use and its settings. See section 5.

We do not make automated decisions or profiling based on this data that would have legal effects concerning you or similarly significantly affect you.

3. Personal data processed and their sources

Contact request

We may process your name, email address, phone number, housing company name or address, and the content of your message and any information contained in it. These fields are marked as mandatory in the website’s contact form. Verify the mandatory nature of the fields before publishing this policy. The data is provided by you when you fill in the form or otherwise contact us.

Quote request

We may process your first and last name, email address, optional phone number, housing company name and address, requested quote deadline, and a free-form message and any attachments. The data is provided by you or the quote’s contact person. Do not send unnecessary personal data or sensitive data via the form.

Website technical data and visitor measurement

In the technical use of the website, the server or service provider may process, for example, the IP address, the timing of requests and technical log data in order to deliver and secure the service and to investigate disturbances. In visitor measurement, we may process, for example, pages viewed, referring website, device and browser data, and coarse location data. The exact content and identifiability of the data depend on the tools used and their settings.

4. Retention periods

We retain contact and quote request data for as long as the handling of the matter requires. Thereafter, we delete the data or retain it only if there is a statutory obligation to do so or if retention is necessary for establishing, exercising or defending legal claims. The precise maximum retention period must be confirmed based on the controller’s practices and statutory obligations before publishing this policy.

The retention period of server logs and visitor measurement data depends on the services and settings in use. Add the confirmed retention period or the criteria for determining it here.

5. Cookies and visitor measurement

The website may use technically necessary cookies. The use of cookies or similar technologies other than strictly necessary ones requires the user’s consent, as applicable.

The website’s current privacy policy describes anonymous visitor tracking. Before publishing this policy, the website’s actual cookies, analytics tools and settings must be verified. Add here the name of the measurement service used, the data collected, the legal basis, retention period, possible recipients and transfers, and information on how the user can manage their consent. Do not describe data as anonymous if it can be linked to a person or device.

6. Recipients and processors of data

Data is processed only by those employees of the controller whose duties so require. In addition, providers of website maintenance, form, email, analytics and hosting services may process personal data on behalf of the controller. Identify the service providers or recipient groups in use and their roles before publishing. Service providers may process data only for the purpose of delivering the service and in accordance with agreed instructions.

Data is not disclosed to other parties, except where required by law or necessary for handling a legal claim.

7. Transfer of data outside the EU and EEA

Any possible transfer of data outside the EU or EEA depends on the service providers used and their subcontractors. Confirm service by service whether data is transferred outside the EU/EEA. If it is, describe the transfer basis and appropriate safeguards.

8. Security of data

We protect personal data with appropriate technical and organisational measures. Access to the data is limited to those persons and service providers who need the data for their duties or for the agreed service. Persons processing the data are bound by a confidentiality obligation.

9. Rights of the data subject

Under the GDPR, you may have the right to:

• obtain access to personal data concerning you and receive a copy of it;
• request the rectification of inaccurate or incomplete data;
• request the erasure of data or the restriction of processing within the limits set by law;
• object to processing based on legitimate interest;
• receive data you have provided in a structured, commonly used and machine-readable format and transfer the data to another controller, where the conditions for portability are met;
• withdraw your consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before it;
• lodge a complaint with a supervisory authority.

The application of these rights depends on the legal basis of the processing and the situation at hand. You can exercise your rights by sending a request to the controller at the email address above. We may, where necessary, request additional information to verify your identity. We usually respond to requests within one month.

10. Supervisory authority

If you believe that your personal data has been processed in breach of data protection regulations, you may lodge a complaint with the Office of the Data Protection Ombudsman:

Office of the Data Protection Ombudsman P.O. Box 800, FI-00531 Helsinki, Finland tietosuoja@om.fi tietosuoja.fi

11. Changes to this policy

We may update this policy, for example, when our services, the processing of personal data or legislation changes. The up-to-date version is published on this page.