Privacy notice
Updated 20 October 2026
Provider
Contact details that are not listed here are available on request by email, from the contact on the front page.
1. Who is responsible for the data
The provider is the controller for the account, sign-in, subscription and payment data. For the content of the housing company (announcements, issues, discussions, messages, documents and the marketplace), the housing company is the controller and the provider processes the data on its behalf.
2. Which data we process
Email address or phone number and the way of signing in (Google, Facebook, email or phone), the name if the user gives it, the apartment number, the role in the building, content and messages that the user adds, settings, and the details of the subscription (name, address and business ID of the building, size and payment method). Payment card details are not stored in Asukasportaali. Stripe processes them.
3. What the data is used for, and the basis
To provide the service (contract): sign-in, building communication, notices by email and subscription management. For the security of the service and to prevent abuse (legitimate interest). For accounting and invoicing (legal obligation).
4. Who sees the data
Only members of the same building, by role. A resident shows to others as “Resident” until the person allows the name. There is no list of residents. Messages in the marketplace and discussions are seen only by members of the building. A fault report can be forwarded to the maintenance company that the housing company chooses, if the housing company has allowed it. The report then has the title, the description, the category and the apartment.
5. Processors and transfers
Supabase (database and sign-in), Microsoft Azure (website), Resend (email), Bird (text messages), Stripe (payments and invoicing), and Google and Meta (sign-in, if the user chooses it). Data is transferred outside the EU and the EEA only when the law gives a basis for it, for example the standard contractual clauses of the EU.
6. How long the data is kept
Data is kept as long as the account and the subscription of the building are valid. After the subscription ends, the data of the building is kept for 90 days and then deleted. Accounting records are kept for 6 years from the end of the financial year, as the Finnish Accounting Act requires. A set-up that is not finished is deleted after seven days.
7. Cookies and tracking
The portal uses the storage of the browser only for sign-in and to remember the language. There is no tracking and no advertising. If analytics is turned on, consent is asked first.
8. Your rights
You can ask to see, correct or delete your data or to limit its processing, object to the processing, and ask for your data to be transferred. You can complain to the Data Protection Ombudsman (tietosuoja.fi). For requests about the content of the housing company, first contact the administrator of the building.