Privacy policy

This privacy policy describes Sevas Kodit Oy’s processing of personal data for all information for which we act as the data controller.

Data controller:

SEVAS KODIT OY
Matti Visannin kuja 10
60100 SEINÄJOKI
email: vuokraus@sevas.fi
Tel. +358 (0)6 420 3311

Data Protection Officer

Ville Viitala
+358 (0)6 420 3329
ville.viitala@sevas.fi

What data do we collect and for what purpose?

The data we process about you depends on your relationship with us. Typically, you are either a tenant or a rental housing applicant, an employee or job applicant, or a visitor to our website. You may also have multiple roles. You can always find more detailed information about the processing of your personal data under the relevant section that applies to you.

Tenants and rental housing applicants

• We process identification and contact information (name, address, phone number, email address) and, for contracts and creditworthiness checks, personal identity numbers.
• In addition, we process information related to rental applications and agreements, such as address and phone number at the time of application, study information (educational institution, study programme and duration) or, for youth residents or other residents, status/occupation, income and asset information at the time of application, corresponding information of a cohabiting spouse, names and personal identity numbers of children, and the address, type, size of the rented apartment, rent, and other possible housing costs.

We collect the data from you via rental housing applications and during the tenancy. Credit information is checked from Suomen Asiakastieto Oy.

In addition to contractual obligations, there are statutory requirements that govern the processing of personal data. These include accounting legislation, housing allocation and tenancy-related legislation such as the Act on Interest Subsidy for Rental Housing and Right of Occupancy Housing Loans, the Act on Residential Leases, and ARA regulation. Personal data is stored for the duration of the contractual relationship and for two years after its termination to handle possible complaints or correction requests, unless otherwise required by law.

Job applicants and employees

• Recruitment-related and job application data: name, address, other contact details, date of birth, CV information, salary expectations, interview and test information, any other information provided by the applicant themselves, as well as information related to the processing of the application and its status.

The data is collected from you. We may contact referees, educational institutions, or previous employers mentioned in the application to verify the accuracy of the information provided.

In addition to employment contracts, we comply with statutory obligations that require the processing of personal data. These obligations are set by, among others, labour legislation, the Occupational Health Care Act, the Annual Holidays Act, and legislation concerning the private security sector.

The basis for collecting data is the potential conclusion of an employment relationship. If no employment contract is made, we generally retain the data for six months, or longer with your consent for future recruitment purposes. Certain recruitment-related personal data may be stored for up to two years.”

Website visitors

• Website usage data: cookie, IP address, device identifier, and customer identifier.

Website analytics data is generated based on the user’s actions during their visit to the website. You can block the use of cookies and still access all the information on our site that would otherwise be available with cookies. However, some website functions may not work as intended if cookies are disabled.

Our website uses cookies for the following purposes:

• Visitor statistics (Google Analytics, etc.)
• Storing user-selected preferences (such as language settings)

We do not disclose any other information you submit through the website to third parties.

For visitor statistics, we collect data from the user’s device, IP address, and software and its versions. This data allows us to identify and count different users visiting our website, what information is being searched for, and how the site is being used. The purpose is to anonymously analyse visitor volumes, for example for marketing campaign effectiveness. At the same time, we learn what information is most commonly sought on our site and can improve the structure of the website so that users can easily find what they are looking for.

Regarding user-selected settings, cookies store information such as the language the user prefers. The same cookie may also store other user preferences. This allows, for example, the website language to be correctly set on the user’s next visit.

We store the data for 14 months.

For more information about online advertising, you can visit the Your Online Choices website.

You can delete cookies stored in your browser via browser settings. If you choose not to use cookies, you may not be able to fully use all website features, but this will not prevent access to our services entirely.

Below are links for deleting cookies in different browsers:
Internet Explorer
Firefox
Google Chrome
Safari

What rights do you have and how can you use them?

In typical customer service situations, such as changes to contact or billing information and billing inquiries, you can contact Sevas Kodit Oy’s customer service by visiting our office, by mail, or electronically at www.omasevas.fi. For more extensive data requests, please contact our Data Protection Officer (contact details are provided at the beginning of this policy).

As a rule, these rights can be exercised free of charge once per calendar year. If requests are made by the same person more than once per calendar year, an administrative fee based on the scope of the request may be charged. An estimate of the cost will be provided in advance.

You have the following rights:

Right of access to personal data

You have the right to access the personal data stored about you and held by Sevas Kodit Oy. You may also request a copy of this data. However, access may need to be restricted due to legislation or the protection of other individuals’ privacy. For example, the disclosure of email messages always requires the consent of both parties involved in the communication.

Right to rectification

You have the right to request correction of inaccurate or incomplete data. An exception may apply if previously provided information is relevant, for example, to a contract or delivery. In such cases, we may not replace the old information but instead add the new information alongside it.

Right to erasure

You have the right to request the deletion of your personal data. We will also delete personal data without a request if we no longer have a legal basis for processing it and the need for processing has ended.

Right to restriction of processing

You have the right to restrict the processing of your personal data, for example if you believe the processing is unlawful or you have objected to the processing and the matter is still under review.

Right to object

You have the right to object to the processing of your data where it is based on consent (e.g. newsletters or job applications) or legitimate interest (e.g. direct marketing).

Right to data portability

The right to data portability does not apply to professional contact data processed in business relationships where processing is not based on the data subject’s consent or a contract to which the person is a party. We also do not transfer your personal data automatically anywhere—even upon request. Each case is individual, and manual transfer methods are used to ensure the security of all parties.

However, you have the right to receive the personal data you have provided in a machine-readable format. This right applies to data processed automatically based on a contract or consent.

Right to withdraw consent

You have the right to withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal. Withdrawing consent does not place you in any disadvantage compared to others in using our services, and you do not lose any rights.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the supervisory authority if you believe your personal data is being processed improperly or unlawfully. However, we hope you will first contact us so we can try to resolve any issues before they escalate. Contact details are provided at the beginning of this policy.

Office of the Data Protection Commissioner

Visiting address: Ratapihantie 9, 6th floor, 00520 Helsinki
Postal address: PL 800, 00521 Helsinki
Switchboard: 029 56 66700
Fax: 029 56 66735
Email: tietosuoja@om.fi

Transfers of personal data and transfers to third countries

Our data is not combined with other registers and is not disclosed to third parties unless required by law.

What risks are associated with data processing and how do we protect the data?

The purpose of Sevas Kodit Oy’s security measures is to ensure the availability of data and information systems, guarantee their confidentiality and integrity, and minimize any damage caused by possible incidents. Security measures are based on a risk assessment of the operations and are proportionate to managing risks related to the protected assets. Applicable data protection legislation is taken into account in all personal data processing and security measures.

Changes to the privacy policy

Data protection practices may be updated. Changes will be published on this page. Any changes required by regulations and other significant updates will also be communicated through other channels, such as email.

Further information

Please contact us if any of your questions remain unanswered or if you need further clarification.”