1. Data controller
Wacasa Oy
Business ID: 3362866-2
Rantakatu 3 B 1, 65100 Vaasa, Finland
Privacy enquiries: per.hannuksela@wacasa.fi and joni.uusipaikka@wacasa.fi
2. Scope and data processed
This Notice covers personal data processed on wacasa.fi, through the contact form and in website analytics. Contact data may include name, email address, telephone number, message, other voluntarily supplied information, time of contact and technical security information. Analytics may include page views, visit time, pages and links used, browser, device type and technical logs. IP addresses are anonymised.
Users should not submit unnecessary sensitive personal data through the contact form.
3. Sources, purposes and legal basis
Contact information is obtained from the data subject; analytics information is generated through website use. Data is processed to respond to contact requests, assess service needs, prepare quotations and agreements, manage customer relationships, provide customer service, and maintain, secure and develop the website.
The legal basis may be pre-contractual steps, performance of a contract or Wacasa Oy’s legitimate interests. Website operation, security and analytics are based on legitimate interests. Form acceptance confirms the Terms for Contact Requests and reading this Notice; it is not direct-marketing consent.
4. TietoWare App, processors and recipients
The form uses TietoWare Forms and TietoWare App provided by TietoWare Oy. Submitted information is sent through a protected server-side connection, may be stored in TietoWare App and forwarded by email to recipients designated by Wacasa. TietoWare Oy acts as processor on Wacasa’s behalf.
TietoWare Oy also provides technical website maintenance and Matomo analytics. Microsoft 365 and Microsoft Graph may be used to forward contact form content. Access within Wacasa is restricted to authorised persons.
5. Transfers, retention and security
Data is primarily processed within the EEA. Any transfer outside the EEA uses a valid transfer mechanism and appropriate safeguards.
Data is retained only as long as necessary for its purpose, including the handling of an enquiry, any resulting quotation, customer relationship or agreement, legal claims and statutory duties. Analytics follow Matomo retention settings. Appropriate technical and organisational safeguards, including access controls, protected connections, server-side processing and abuse prevention, are used.
6. Rights and changes
Subject to applicable law, data subjects may access, correct, erase, restrict, object to processing, and where applicable receive portable data. Requests may be sent to the privacy contacts above. Data subjects may also complain to the competent supervisory authority.
Wacasa may update this Notice when services, processing or law change. The current version is published on this page.