Privacy notice: Rental and accommodation activities
Rental and accommodation activities
Privacy notice: Rental and accommodation activities: joint informative document for data subjects (Articles 13 and 14 of the General Data Protection Regulation [2016/679]).
Purposes of processing personal data
Personal data is processed for managing rental and accommodation activities. In addition, KELA requires personal data processing in order for it to grant benefits, aids and allowances.
Legal basis for processing
The basis for processing personal data contained in the register is a contract. Main legal instruments include the Finnish Act on Residential Leases (481/1995) and Act on Commercial Leases (482/1995)
Personal data content and retention periods of the register
|Data category name||Retention period|
|Name||2 years from the end of the lease term|
|Personal identity code||2 years from the end of the lease term|
|Contact details||2 years from the end of the lease term|
|Rental/accommodation details||2 years from the end of the lease term|
The register contains information on tenants and short-time visitors.
Regular sources of data
From data subjects themselves.
Regular disclosures of data
No data is disclosed to third parties.
Principles of data protection of the register
A Manual material
Signed contracts are archived and stored in a locked space for the set period.
B Data processed through automated data processing
Data is stored in an information system. Access is granted only to those persons working for the data controller who are entitled to access and use the data in the system in order to perform their duties.
The lawful processing of personal data is ensured by categorisation of data and with operating methods that are in compliance with the data handling rules concerning data set.
No automated decision-making is performed on the recorded data.
Transfer of data outside the EU or EEA
No data is transferred outside the EU or EEA.