Privacy policy

2. Data Subjects Persons who have filled out a request for a quote. Customers who order our services.

3. Purpose and Legal Basis for Processing Personal data is processed only to the extent necessary for the conduct of our business operations. Personal data is processed based on the person’s consent (consent collected via the quote request form and, on a case-by-case basis, by other written means). The data subject may withdraw their consent at any time.

4. Data Stored in the Register The register may process data necessary for the purpose of the register, including but not limited to the following categories:

• First and last name

• Address details

• Phone number

• Email address

• Personal identity code (only if the customer requests credit)

• Information requested in the quote request form

• Data collected through cookies

5. Rights of the Data Subject The data subject has the following rights:

• Right of access: The data subject has the right to check the personal data we have stored. This right can be exercised free of charge once per year. A reasonable fee based on actual costs may be charged for additional requests.

• Right to rectification: The data subject may request the correction of inaccurate or incomplete data concerning them.

• Right to object: The data subject may object to the processing of personal data if they feel the data has been processed unlawfully.

• Right to data portability: In accordance with applicable law, the data subject has the right in certain cases to transfer the data they provided to the controller from one system to another (i.e., the right to receive the data in a structured, commonly used, machine-readable format and transfer it to another controller).

• Right to prohibit direct marketing: The data subject has the right to forbid the use of their data for direct marketing purposes.

• Right to erasure: The data subject has the right to request the deletion of data if its processing is not necessary. We will process the request and either delete the data or provide a justified reason why the data cannot be deleted. Please note that the controller may have a legal or other right not to delete the requested data. Data is not deleted to the extent it is necessary for complying with legal obligations, for the establishment, exercise, or defense of legal claims, or for the fulfillment of a contract between the data subject and the controller.

• Withdrawal of consent: If the processing of personal data is based solely on consent (and not, for example, on a customer relationship or membership), the data subject may withdraw their consent.

   

• Right to lodge a complaint: The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they feel we are violating current data protection legislation.

   

• Verification of identity: We verify identity before disclosing data.

• Right to restriction: The data subject has the right to demand that we restrict the processing of disputed data until the matter is resolved.

6. Regular Sources of Information Information concerning the data subject is regularly obtained from the individual themselves.

7. Transfers and Disclosures of Personal Data As a rule, we do not disclose data to third parties. Our website also contains links to other sites. We take no responsibility for the privacy practices of other websites. We disclose contact information to our partners when necessary if the service ordered by the customer requires it.

8. Data Retention Period Personal data is retained only for as long as necessary to fulfill the purposes defined in this policy or to comply with legal obligations (such as the Accounting Act). Personal identity codes are processed only to the extent necessary for making a credit decision or creating an installment agreement. Our company removes the personal identity code from our active customer registers as soon as it is no longer necessary for billing or contractual purposes. Please note that our partners (such as InnoVoice) may retain data longer in accordance with their legal obligations.

9. Data Processors Personal data is processed by employees responsible for customer service at KunnonMuutto / Proper Ventures Oy.

Data may be disclosed to third parties in the following cases:

• Financing and Billing: We offer installment options in cooperation with InnoVoice (Inno-Finance Oy). We disclose the information required for the installment agreement, such as the personal identity code, for credit decisions and billing purposes. InnoVoice acts as an independent data controller in this regard.

• Technical Partners: We use trusted service providers (such as Google, Jotform, Monday.com, and Stripe) for data storage, communication, and payment processing.

10. Transfer of Data Outside the EU Personal data is primarily stored within the EU/EEA. However, due to our use of service providers (such as Google, Jotform, Monday.com), data may be processed outside the EU/EEA, such as in the United States. In such cases, we ensure that the transfer is lawful and that data protection is secured, for example, through EU Standard Contractual Clauses or other appropriate safeguards.

11. Automated Decision-Making and Profiling We do not use data for automated decision-making or profiling.

12. Security of the Register Personal data is stored securely in cloud services that utilize up-to-date technical and organizational security measures, such as encrypted data transmission, access control, and two-factor authentication (2FA). Access to data is restricted only to KunnonMuutto employees whose duties require the processing of personal data. In assignments related to international moves, physical documents, such as copies of passports, may be collected from customers. These physical documents are kept in a locked space at KunnonMuutto’s premises and are securely destroyed as soon as they are no longer needed for the matter.

13. Changes to the Privacy Policy The controller has the right to change this privacy policy. We will notify of changes on our website.