Privacy policy

Huoneistokeskus Oy’s (“Huoneistokeskus”) operations require that the company collect certain personal data concerning its customers. In such cases, Huoneistokeskus serves as a data controller as defined in data protection legislation. The purpose of this document is to inform data subjects about the processing of their personal data.

DATA CONTROLLER
Huoneistokeskus Oy (Business ID 1831315-2)

Customer register

Huoneistokeskus maintains a customer register, and the information it contains is used to manage the contractual relationship with each customer and to provide services. Customer registers contain the contact information for customers, including name, email address and phone number. The legal basis for the processing of personal data in this case is the performance of the contract.

Personal data may also be processed for the purpose of processing complaints, in which case the processing is based on Huoneistokeskus’ legitimate interest. Huoneistokeskus considers that it has a legitimate interest to process personal data in order to handle complaints and to contact the customer in the event of a complaint.

Broker assignment register

Huoneistokeskus is a property brokerage company. The management of brokerage assignments and the laws regulating brokerage operations (including the Act on Detecting and Preventing Money Laundering and Terrorist Financing) require the collection and processing of the personal data specified below. The data subjects are sellers, buyers and buyer candidates, as well as landlords, tenants and tenant applicants. In such cases, the processing of personal data is based on the contractual relationship between the customer and Huoneistokeskus, and the company’s statutory obligations.

Name, date of birth, personal identity code, current and previous address, phone number, email address, language of contact, information on political influence (politically exposed person, PEP), information on whether the customer is on an international or national list of sanctions (a public list of sanction decisions maintained by the National Bureau of Investigation), identifying information of the document used for identity verification or a copy of it, information about guardianship or supervision of interests, other information included in the agreement concerning the property being brokered, profession, length of employment relationship, form of household, information on pets, information about income, other information in the rental housing application, credit history information, information on purchase offers and the approval thereof, information in the rental agreement or deed, report on funding sources, and any other information provided by the customer necessary to complete the brokerage assignment.

Brokerage assignment registers also include personal data related to the brokered property, such as the names of, and possibly contact information for, the limited liability housing company’s property manager and board members. In such cases, the processing of personal data is based on statutory obligations. The registers also contain information about any complaints related to brokerage assignments, including personal data. In such cases, the processing is based on Huoneistokeskus’ legitimate interest. Huoneistokeskus considers that it has a legitimate interest to process personal data in order to handle complaints and to contact the customer in the event of a complaint.

The brokerage assignment register also includes a pre-booking register of new properties, and the personal data in this register is used in the process of selling new properties. Pre-booking registers for new destinations contain the personal data of customers, including name, email address and phone number. The registry may also contain other information necessary to identify the customer. The processing of personal data is based on an agreement between Huoneistokeskus and the customer.

In targeted marketing communications, we carry out profiling based on your online behaviour, but we do not target you with automated decision making measures based on personal data.

Retta Group marketing privacy register

Retta Group – marketing privacy policy

Where does Huoneistokeskus obtain personal data from?

Data is mainly collected from data subjects. Data may also be collected from sources related to the authorities, such as the Trade Register. In addition, information concerning company contact persons is obtained from public sources, such as corporate websites.

Clients provide personal data when entering into an agreement on an assignment. Personal data concerning applicants for rental apartments is obtained from their applications. Personal data concerning tenants is obtained when they enter into a rental agreement. Personal information concerning buyers is obtained from their purchase offer or when preparing the deed. In addition, information concerning brokered properties is obtained, for example, from representatives of limited liability housing companies (e.g. a property manager’s certificate, financial statement information) or from registers maintained by the authorities (e.g. land register). Credit history may be obtained from the registers of third-party service providers (e.g. Suomen Asiakastieto Oy).

Personal data may also be collected or updated from other systems maintained by Retta Group, from the registers of partners, from companies selling personal data, and from the authorities.

Data processors and disclosure to third parties

Huoneistokeskus uses various service providers and thus personal data processors when providing services to its customers, for example, a customer relationship management and sales system.

Personal data may be disclosed within the Retta Group to develop its business. 

Personal data may also be disclosed to debt collection agencies. In addition, establishing or defending a legal claim may require the disclosure of personal data to an insurance company or legal adviser.

Data contained in brokerage assignment registers may be disclosed to the authorities supervising brokerage operations (Regional State Administrative Agencies) or other authorities as required by law. The management of brokerage assignments also requires the disclosure of data to the counterparty of the assignment in accordance with the applicable legislation and good brokerage practices. In real estate transactions, Huoneistokeskus also discloses information to the National Land Survey of Finland.

Data on sales that have been realised may be disclosed to the Central Federation of Finnish Real Estate Agencies (KVKL), which stores the data in its HSP price monitoring service.

Data is not disclosed to parties outside the European Union or the European Economic Area.

How long is personal data stored?

Personal data contained in customer registers is retained for the duration of the contractual relationship, and after its termination for as long as is necessary to fulfil a statutory requirement or due to possible legal measures and handling of the customer account, for a period of no longer than seven years.

We are required by law to store the personal data included in the brokerage assignment registers for five years after the end of the assignment. After this time, the data is stored for as long as necessary for any legal procedures.

Customer feedback and complaints are stored until they have been processed, or for as long as is necessary for any legal procedures.

How is the data protected?

The data is protected by means of appropriate technical and organisational measures. Paper documents are stored in a locked facility. Digital material is protected through technical measures, and access rights are only granted to people who need to access the material because of their job or assignment. The employees of Huoneistokeskus are bound by a confidentiality obligation. Employees are provided with training and instructions on the lawful processing of personal data.

Processors of personal data outside the Retta Group are also required to implement sufficient technical and organisational protection measures and commit to a confidentiality obligation.

What are the data subject’s rights?

Data subjects have the right to know whether a data controller is processing personal data concerning them. If the data controller processes such personal data, the data subject has the right to receive a copy of the personal data concerning them. If the personal data is deficient, erroneous, inaccurate or outdated, the data subject has the right to request that the data controller correct the data.

If the processing of personal data is based on the data subject’s consent or a contractual relationship, the data subject has the right to receive the personal data concerning them in a structured, commonly used, machine-readable and interoperable format, and to transmit it to another controller. This right only applies to personal data that the data subject has provided to the data controller and that is processed automatically.

In certain circumstances, the data subject has the right to restrict the processing of their personal data. This is the case when, for example, the accuracy of personal data is contested by the data subject. In such cases, processing will be restricted until it has been confirmed that the data is accurate and its processing is lawful.

The data subject has the right to request that the personal data concerning them be erased. This right is only applicable when the personal data is no longer needed for the purposes for which it was collected, there are no other legal grounds for its processing and it does not need to be stored to meet the requirements of the law. In other words, data cannot be erased while there is a valid legal basis for its storage.

If the processing of personal data is based on the data subject’s consent, they have the right to withdraw their consent at any time. In addition, the data subject has the right to object to the processing of their personal data if its processing is based on the data controller’s legitimate interest.

The data subject has the right to file a complaint with the Data Protection Ombudsman(www.tietosuoja.fi) if the data subject believes that the data controller fails to meet their obligations or otherwise fails to comply with the applicable data protection laws.

If you have any questions about personal data processing and data subjects’ rights, please contact us by email. We verify your identify before you submit your information.

This privacy statement was last updated on 1 September 2024.