Privacy Policy

Last updated: May 2026

OwnRise is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR), enforced in Finland by the Office of the Data Protection Ombudsman (TSV).

1. What data we collect

  • 🔑 Account info — name and email (via secure Keycloak login)
  • 📋 Listings — title, description, price, photos, city
  • 📦 Orders — items ordered, seller/buyer info, delivery address
  • 📍 Location — approximate GPS coordinates, only when you use "Near me" search, only for that session

We follow the principle of data minimisation — we only collect what is strictly necessary.

2. Why we use it (Lawful basis)

  • ✅ Contract — to process and fulfil orders between buyers and sellers
  • ✅ Legitimate interest — to show relevant listings to buyers nearby
  • ✅ Consent — for GPS location, requested explicitly in the browser

3. Who we share it with

  • 🤝 Between buyers and sellers — only what is needed to complete an order
  • 🔐 Keycloak — handles authentication securely; we never store your password
  • 🗺️ Nominatim / OpenStreetMap — used to geocode city names; no personal data is sent

We do not sell your data to anyone, ever.

4. Your GDPR rights

As a user in Finland / the EU, you have the following rights:

Access

Request a copy of all personal data we hold about you.

Rectification

Correct any inaccurate or incomplete information.

Erasure

"Right to be forgotten" — delete your account and all associated data.

Portability

Export your data in a machine-readable format.

Objection

Opt out of certain types of data processing at any time.

To exercise any of these rights, contact us at privacy@ownrise.fi. We will respond within 30 days as required by GDPR.

5. Data storage & security

  • 🇫🇮 All data is stored in Finland within the EU
  • 🔒 All connections are encrypted via HTTPS
  • 🔑 Passwords are never stored by OwnRise — managed securely by Keycloak
  • ⚠️ In the event of a data breach, we will notify TSV within 72 hours as required by GDPR Article 33

6. Cookies

OwnRise uses only functional cookies necessary for login sessions. We do not use tracking or advertising cookies. No cookie consent banner is required for strictly necessary cookies under GDPR.

7. Contact & complaints

For privacy questions or requests: privacy@ownrise.fi

If you are not satisfied with our response, you have the right to lodge a complaint with the Finnish data protection authority: tietosuoja.fi