Privacy Policy

Last updated: September 2026

The data controller for OwnRise is Bibha Gupta, Ylismäenkuja 8 A13, 02100 Espoo, Finland, contactable at privacy@myownrise.com. This policy explains what data we collect, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR), enforced in Finland by the Office of the Data Protection Ombudsman (TSV).

1. What data we collect

  • 🔑 Account info — name and email (via secure Keycloak login)
  • 📋 Listings — title, description, price, photos, city
  • 📦 Orders — items ordered, seller/buyer info, delivery address
  • 📍 Location — approximate GPS coordinates, only when you use "Near me" search, only for that session

We follow the principle of data minimisation — we only collect what is strictly necessary.

2. Why we use it (Lawful basis)

  • ✅ Contract — to process and fulfil orders between buyers and sellers
  • ✅ Legitimate interest — to show relevant listings to buyers nearby
  • ✅ Consent — for GPS location, requested explicitly in the browser

3. Who we share it with

  • 🤝 Between buyers and sellers — only what is needed to complete an order
  • 🔐 Keycloak — handles authentication securely; we never store your password
  • 🗺️ Nominatim / OpenStreetMap — used to geocode city names; no personal data is sent

We do not sell your data to anyone, ever.

4. Your GDPR rights

As a user in Finland / the EU, you have the following rights:

Access

Request a copy of all personal data we hold about you.

Rectification

Correct any inaccurate or incomplete information.

Erasure

"Right to be forgotten" — delete your login, profile, and listings. Order records are kept only as long as Finnish accounting law requires, then deleted.

Portability

Export your data in a machine-readable format.

Objection

Opt out of certain types of data processing at any time.

To exercise any of these rights, contact us at privacy@myownrise.com. We will respond within 30 days as required by GDPR.

5. Data storage & security

  • 🇫🇮 All data is stored in Finland within the EU
  • 🔒 All connections are encrypted via HTTPS
  • 🔑 Passwords are never stored by OwnRise — managed securely by Keycloak
  • ⚠️ In the event of a data breach, we will notify TSV within 72 hours as required by GDPR Article 33

6. How long we keep your data

  • 👤 Account, profile & listings — removed when you delete your account
  • 🧾 Order records — retained for up to 6 years as required by Finnish accounting law (Kirjanpitolaki), including any addresses or notes they contain, then deleted
  • 📍 Location — never stored; used only for the duration of a "Near me" search

7. Cookies

OwnRise uses only functional cookies strictly necessary for login sessions (set by our authentication provider, Keycloak, and the sign-in flow). We do not use tracking, analytics, or advertising cookies, and load no third-party scripts. Under the EU ePrivacy Directive and Finnish law, strictly necessary cookies do not require consent, so OwnRise shows only a brief informational notice rather than a consent banner.

8. Contact & complaints

For privacy questions or requests: privacy@myownrise.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Finnish data protection authority: tietosuoja.fi