Privacy Policy

Updated 07.05.2025

Contact Information

Intu Enterprises Oy

Hämeentie 3, 00530 Helsinki

Business ID: 3218485-2

For inquiries regarding the processing of personal data and this privacy policy, please contact us via email at vella@vellakodit.fi.

General Information

This privacy policy provides information in accordance with the European Union's General Data Protection Regulation (2016/679) (hereinafter "GDPR") on how Intu Enterprises (hereinafter "the data controller") collects, uses, discloses, and stores personal data.

We provide rental management services to our corporate clients and act as the data controller for the personal data described in this policy. The provisions in this document apply to both individuals and companies.

Processed Personal Data

The users of the Service are apartment applicants, co-applicants, and tenants ("Registered User"). Personal data concerning Registered Users is primarily collected from the Registered Users themselves, for example, when submitting a rental application or signing a lease agreement. During the rental relationship, personal data may also be collected from tenants when they interact with the data controller or its service providers.

We may also collect tenant-related information from other sources, such as publicly available registers (e.g., the population information system). Additionally, we may collect data related to access rights management in connection with the use of the locking system, such as lock event log data and access identification details (e.g., name, apartment number, and key identification information).

The following personal data may be collected and processed about Registered Users:

• Basic information such as name, age, gender, and personal identification number
• Contact details such as phone number and email address
• Lease-related information such as rented apartment, rental period, and rent amount
• Customer service data, including the Registered User's inquiries to customer service
• Apartment-related information, such as fault reports, completed repairs, and water consumption
• Billing information
• Registered User's credit information, within the limits permitted and required by law
• Debt collection data, including payment records and accounts transferred to debt collection

Legal Basis and Purpose of Processing

We process your personal data to:

• Fulfill our contractual obligations as your contract partner (performance of a contract)
• Comply with mandatory legal obligations (legal obligation)

Additionally, we may process personal data based on our legitimate interest in conducting, maintaining, and developing our business, managing customer relationships, and handling potential legal claims. In some cases, we may request your consent for processing your personal data. In such cases, you have the right to withdraw your consent at any time.

We process personal data for the following purposes:

• Providing our services and fulfilling contractual obligations
• We process personal data to manage lease agreements and fulfill related obligations.
• Data is also processed for providing housing-related services, managing access rights, and protecting the property and residents of the housing company.
• Complying with legal obligations
• We process personal data to fulfill our legal obligations, such as accounting requirements and providing information to competent authorities, such as tax authorities.
• Customer service and communication
• We process personal data for handling and responding to customer feedback and service requests.
• We may also contact you regarding our services and any changes to them.
• If you contact our customer service, we use the provided data to respond to your inquiries and resolve any issues you encounter.
• Handling claims and legal proceedings
• Personal data may be processed in connection with handling compensation claims and legal proceedings.

Retention of Personal Data

We retain your personal data as long as you have a user account in our service. You can request account deletion by emailing us at vella@vellakodit.fi. Personal data related to a rental application may be retained for five years from the date of the last submitted application.

Lease agreement-related data may be retained for ten years after the lease ends and all obligations have been fulfilled by both parties. The same retention period applies to all individuals currently living or who have lived in the apartment, as well as to any dialogue and communication with them.

Disclosure of Personal Data to Third Parties

We share your personal data within the data controller's organization only to the extent reasonably necessary for the purposes described in this privacy policy. Your personal data may only be disclosed to individuals who need to process personal data due to their job duties or role. Personal data may be shared with third parties to a limited extent whenever the provision of service requires it. These parties include SMS and email aggregators, authorities, billing services, debt collection agencies, locksmith, maintenance, security, repair and renovation companies, accountants, consultants, and third-party partners for implementing apartment viewings and inspections. Your personal data will not be disclosed to third parties for marketing purposes without separate consent.

Personal data may be shared with third parties only when necessary for service provision, including: SMS and email aggregators, authorities, billing services, locksmith, maintenance, security, repair, and renovation companies, accountants and consultants. Your personal data will not be shared with third parties for marketing purposes without separate consent.

Principles of Personal Data Protection

Access to databases containing personal data is restricted to individuals who need it for their work or duties. The processing of personal data is confidential. Servers are maintained only by a trusted service provider that ensures the use of modern security and protection mechanisms. Access to the application is restricted based on user needs.

International Data Transfers Outside the EU/EEA

We primarily process personal data within the European Union (EU) and European Economic Area (EEA). However, some service providers we use may process personal data on servers located outside the EU/EEA. If personal data is transferred outside the EU/EEA, we ensure that such transfers comply with the GDPR's appropriate safeguards, such as the European Commission's standard contractual clauses.

Rights of the Data Subject

Right to Rectification

You can correct inaccurate or incorrect personal data by editing it in our services or contacting us via email.

Right to Erasure ("Right to be Forgotten")

Upon request, we will delete all personal data concerning you from our user database, unless we have a legal basis to retain it.

If you exercise this right, your user account will also be closed.

Right to Restriction of Processing

You may restrict the processing of your personal data if you have a legal basis for doing so.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes.

Right to Lodge a Complaint

You have the right to file a complaint with the supervisory authority if you believe that your personal data is being processed in violation of applicable laws.

A Registered User must submit a request concerning the above-mentioned rights to the data controller in writing. The data controller has the right to ask the Registered User to specify the request and to verify their identity before processing the request. The data controller may justifiably refuse to implement the request if permitted by applicable legislation.

The Registered User also has the right to file a complaint with the competent data protection authority regarding the processing of their personal data. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman, but a complaint can also be made to the supervisory authority of another European Union member state if the Registered User's permanent residence or place of work is located in that member state. The grounds for the complaint may be a suspicion that personal data has been processed in violation of applicable data protection legislation.

Contact information:

Office of the Data Protection Ombudsman

Visiting address: Lintulahdenkuja 4, 00530 Helsinki

Postal address: P.O. Box 800, 00531 Helsinki

Phone: 029 566 6700

Email (registry): tietosuoja@om.fi

Anonymously Collected Data

We continuously develop our services to provide the best possible user experience. To support this development, we collect information on how various functionalities of the application are used. All such data is collected anonymously, meaning that the data cannot be used to identify individual users.