Updated 28 May 2025
The old privacy notice can be read via the attached link.
For the operations of Toivo Group Plc (”we”; ”Toivo”), it is essential to process personal data. We follow procedures and processes that protect personal data in accordance with the requirements of data protection legislation.
This privacy notice contains the grounds for data collection and the purposes for which the collected data is used. The principles and practices set out in this privacy notice apply to all our operations involving the processing of personal data. Examples of application situations include informing and marketing new projects to target groups or processing personal data related to the management of rental agreements. The privacy notice also applies to the processing of personal data of our employees and job applicants, as well as the personnel of other Toivo partners.
The data controller is Toivo Oyj and/or the group company with which you are dealing. The privacy notice is shared across the group.
Purposes of Personal Data Processing
Toivo collects and processes personal data in order to:
Legal Basis for Processing Personal Data
Toivo has a legitimate interest in marketing, maintaining, and developing its business. Toivo markets, informs, and communicates its services, products, and projects to potential customers and customers on the basis of legitimate interest. Toivo also has a legitimate interest in preventing, blocking, and investigating possible misuse.
When managing services, products, and various projects, Toivo processes personal data on the basis of an existing contractual relationship or a statutory obligation. If Toivo does not have a contract, Toivo processes data for this purpose on the basis of legitimate interest or to fulfill a statutory obligation.
Checking personal credit information is based on the Credit Information Act, either for debt collection planning or for entering into a residential lease agreement.
When fulfilling its contractual obligations, Toivo processes personal data on the basis of the contract.
In addition, Toivo processes personal data to fulfill its obligations arising from legislation, such as accounting and tax legislation.
The processing of personal data may also be based on consent. The processing of personal data is explained separately in connection with each consent, such as consent for direct marketing or cookies, in accordance with data protection legislation, so that the individual knows what they are consenting to.
We collect personal data from individuals belonging to marketing target groups, potential customers, customers, residents, contract contact persons, employees, and job applicants.
The personal data we collect and otherwise process can be divided into the personal data groups listed below, with examples given of the personal data included in them. The example lists are not exhaustive, as the data content processed depends on, among other things, the nature of the customer relationship or other relationship, as well as the projects, products, and services the customer or resident has:
A) Information You Provide to Toivo
B) Technical Data Observed and Derived from Service Use:
Toivo observes and derives data using cookies and similar technologies. These technologies collect information about the pages the user browses, the model of the device used for browsing, the unique device identifier, IP address, and session. Toivo uses cookies for the following purposes:
Most browser menus have a Help menu item that provides more details about the cookies used by the site and how cookie use can be managed.
C) Data Collected from Other Sources
We collect personal data from publicly available sources, such as registers maintained by authorities (e.g., population register, Tax Administration registers) and from commercial data intermediaries, such as personal credit information from credit information providers.
Automated decision-making is based solely on automated processing, such as profiling, and has legal effects concerning you or similarly affects you significantly. We do not use automated decision-making or profiling in our processing of personal data.
Toivo retains users' personal data only for as long as it is needed to provide the service or for the maximum period permitted by law. Data retention periods may vary depending on the purpose of processing, the nature of the personal data, and the requirements applicable to their processing. We delete or anonymize data at the end of their retention period.
Group Companies
We may transfer personal data to companies belonging to the group within our group. In such cases, processing on behalf of another group company takes place on the basis of a processing agreement.
Service Providers
We transfer personal data only to the extent that third parties need access to the personal data we process on the basis of a processing agreement in order to provide services to Toivo for the purposes defined in this privacy notice. Such third parties include, for example, our partners that we use, for example, to produce our IT services.
Corporate Transactions
Personal data may be transferred or disclosed in connection with corporate transactions.
For Legal Reasons
Your personal data may be disclosed in accordance with the requirements of a competent authority and the conditions based on law.
Toivo aims to implement services and process personal data using operators and services located in the EU or EEA area.
However, in some cases, services may also be implemented using operators, services, and servers located elsewhere. In such cases, your personal data may be transferred between different countries. Such transfers may include transfers of personal data outside the EU or EEA area to countries whose legislation on the processing of personal data differs from the requirements of Finnish law. Toivo then ensures an adequate level of protection of personal data, for example, by agreeing on this with the personal data processor.
Data security is ensured by appropriate administrative, technical, and physical safeguards.
This privacy notice applies only to Toivo's service and sites, and we are not responsible for the privacy practices of other sites. We recommend that users check the privacy notices of the sites they use.
Toivo may change this privacy notice. If there are changes to the privacy notice, we will always announce these changes in this privacy notice.
Right of Access
You have the right to check what data concerning you is being processed.
Right to Request Rectification of Data
You have the right to request the correction or completion of incorrect, inaccurate, incomplete, outdated, or unnecessary data.
Right to Request Erasure of Data
You can ask us to delete your personal data from our systems. We will carry out the actions according to your request, unless we have a legitimate reason not to delete the data.
Right to Restrict Processing of Data
You have the right, when separately specified conditions are met, to have us restrict the processing of your personal data.
Right to Object to Processing of Data
In addition, you have the right to object to the processing of your personal data for direct marketing purposes and otherwise to the extent that the processing is based on the implementation of our or a third party's legitimate interests, unless we have a justified reason to retain the data.
Right to Data Portability
You have the right to receive your personal data from us in a structured and commonly used format so that you can transmit the data to another data controller.
Right to Withdraw Consent
If the processing of your data is based on consent, you have the right to withdraw your consent at any time.
You can exercise your rights by contacting:
info@toivo.fi or vuokraus@toivo.fi.
Indicate in your contact which right mentioned in section 11 your request concerns. We may request additional information that is necessary to verify your identity. We may reject requests that are repeated unreasonably often, are excessive, or are unfounded.
If you feel that the processing of your personal data is in conflict with applicable legislation, you can contact the Data Protection Ombudsman: https://tietosuoja.fi/etusivu.