Privacy Policy
We process your personal data in accordance with the EU General Data Protection Regulation (GDPR). This policy explains what data we collect, why, and how to exercise your rights.
Last updated November 1, 2026
1. Data controller
Immodan Oy (Business ID 3378728-4)
Email: hello@immodan.fi
Phone: +358 10 517 6010
For data protection questions, please contact hello@immodan.fi.
2. Personal data we process
- Contact data: company name, contact person name, email, phone
- Housing request details: number of people, start date, estimated duration, preferred cities, furnishing level, free-text message
- Customer relationship data: contracts, billing, communication history
- Technical data: form submission timing (for bot protection)
3. Purpose and legal basis
- Preparing a quote and contract — legal basis: pre-contractual steps (GDPR Art. 6(1)(b))
- Customer relationship management and communication — legal basis: contract (GDPR Art. 6(1)(b))
- Compliance with legal obligations (accounting, invoicing) — legal basis: legal obligation (GDPR Art. 6(1)(c))
- Service development and marketing to existing customers — legal basis: legitimate interest (GDPR Art. 6(1)(f))
4. Retention period
- Quote requests not leading to a customer relationship: up to 24 months
- Customer relationship data: for the duration of the relationship and the period required by the Finnish Accounting Act (typically 10 years from the end of the accounting period)
- Contracts: for the term of the contract and 10 years thereafter
5. Recipients and processors
We rely on trusted service providers that act as data processors on our behalf:
- Supabase (database and application platform, EU data residency)
- Resend (transactional email for quote request notifications)
- Accounting partner (invoicing and bookkeeping)
We do not sell personal data. With marketing-cookie consent, visitor data is shared with Meta for advertising measurement and optimisation as described below.
6. International transfers
Our cloud and advertising providers, including Meta, may process data outside the EU/EEA. Transfers are subject to the provider's applicable GDPR transfer safeguards, such as European Commission Standard Contractual Clauses or an applicable adequacy decision.
7. Security
We protect personal data with technical and organizational measures: encrypted connections (TLS), access controls, role-based access, and regular backups.
8. Your rights
You have the right to:
- access the personal data we hold about you
- request correction of inaccurate data
- request deletion (right to be forgotten)
- restrict or object to processing
- data portability
- lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman, tietosuoja.fi/en)
To exercise your rights, contact hello@immodan.fi. We will respond within one month.
9. Cookies
In addition to essential cookies, we use Google Analytics and the Meta Pixel (Facebook and Instagram) with your consent. Meta receives page views, booking starts and registration events, browser technical data, IP addresses and cookie identifiers for advertising measurement and optimisation. Booking starts include the public apartment identifier; form names, email addresses, company details and free-text messages are not sent as event parameters.
Marketing tracking starts only after acceptance. Your choices and their timestamp are saved in your browser. You can withdraw consent at any time through Cookie settings in the footer; withdrawal blocks new events. Meta may process data outside the EU/EEA under its own privacy policies.
10. Updates
We may update this privacy policy, for example when legislation changes or as our services evolve. We will communicate material changes on our website.