Privacy Policy and Cookies

Introduction

When you visit our website, you’re trusting us with your information. This page explains what personal data Renta Group processes through this website.

All other processing of your personal data is described in the local privacy notice of the company you deal with, whether the controller is Renta Group or the local company. See “Local privacy notices” below.

Last updated: 8.10.2026

Controller identity and contact details

Renta Yhtiöt Oy
Äyritie 12 B
01510 Vantaa, Finland
Business ID 2443140-3
pp. 020 33 22 11

privacy@renta.com

What data we collect

When you visit our website, we process information such as your IP address, browser and device information, and how you interact with the site, through cookies and similar technologies. See “Cookies & Tracking technologies” below for details.

This notice does not cover personal data we process about employees, job applicants, or suppliers. Where applicable, that information is provided to you separately or through the relevant local privacy notice.

Why we process your data & legal grounds of the processing

We process personal data collected through our website for the following purposes:

Analytics and marketing

We process personal data for analytics and marketing purposes, To understand how our website is used (analytics/non-essential cookies). This processing is based on your consent and you can withdraw it at any time through our cookie settings.

How long we keep your data

Retention period for cookies and analytics data

5 years, and never longer than the retention applied in the source system.

Who we share your data with

We work with a number of third parties to run our website and provide certain features. These include:

Analytics providers

We use Google Analytics to understand how visitors use our website. Data shared with Google is subject to Google’s own privacy policy available at https://www.google.com/policies/privacy/partners/.

Advertising partners

Joint controllership with Meta (Meta Pixel). We use the Meta Pixel for advertising and conversion measurement on Facebook and Instagram, including building audiences for our ads. The contracting entity for users in the EEA is Meta Platforms Ireland Limited. Processing is based on your consent (Article 6(1)(a) GDPR and section 205 of the Act on Electronic Communications Services). Nothing is collected or transmitted before you consent, and you can withdraw consent at any time via cookie settings. For the collection of this data on our website and its transmission to Meta, we and Meta Platforms Ireland Limited are joint controllers under Article 26 GDPR, on the terms of Meta’s Controller Addendum (https://www.facebook.com/legal/controller_addendum). We are responsible for obtaining your consent and informing you about the collection, and Meta is responsible for informing you about its own processing, for your rights in respect of the data it holds, for security and for breach notification. What Meta does with the data after transmission is Meta’s sole responsibility and outside our control. You may exercise your rights against either of us. See Meta’s privacy policy: https://www.facebook.com/privacy/policy

Content and media providers

Some pages include content embedded from third-party services, such as Matterport (3D content) and YouTube (video). Visiting a page with embedded content means that some of your personal data is processed by third party directly, and their own privacy policy applies. You can find more information on the processing by Matterport from https://www.costar.com/about/privacy-notice and by YouTube from https://policies.google.com/privacy .

International data transfers

Some of the third parties we use to run our website may process data outside the European Economic Area (EEA), in particular in the United States. These service providers have committed themselves to ensuring the protection of the data they process outside countries deemed to have an adequate level of protection by the European Commission through measures recognized by the applicable data protection legislation.

Google (Analytics, Ads). We use Google’s services for website analytics, advertising and conversion measurement. For users in the EEA the contracting entity is Google Ireland Limited, but data may be transferred to Google LLC in the United States. These transfers are governed by the Google Ads Data Processing Terms and, where Google acts as a controller, the corresponding Controller-Controller Data.

Meta (Meta Pixel). Data may be transferred to Meta Platforms, Inc. in the United States. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework, and transfers are additionally governed by Meta’s data transfer terms.

Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you through our website.

Cookies & Tracking technologies

Our website uses cookies and similar technologies to make the site work, understand how it’s used, and support certain features.

What is a cookie?
A cookie is a small file stored in your browser when you visit a website. It allows the site to recognise your browser on a later visit, remember settings, and collect statistics about how the site is used. You can see more details from the CookieBot cookie manager on our website.

Necessary cookies
These cookies are required for basic site functions, such as navigation and logging in. You can block them in your browser settings, but doing so may affect how parts of the site work.

Analytics and performance cookies
We use these to understand how visitors use our website, so we can improve it.

Advertising cookies
Third parties may set cookies through our website to support advertising.

Embedded content

Some pages may include content from third-party services, such as videos or 3D content. Playing or viewing this content may require cookies from that third party.

Managing your cookie preferences
You can manage your cookie choices at any time using the cookie settings tool on our website.

Your rights

Under GDPR, you have the following rights in relation to your personal data:

Right to access. You can ask us for a copy of the personal data we hold about you.

Right to rectification. You can ask us to correct data that is inaccurate or incomplete.

Right to erasure. You can ask us to delete your personal data, subject to certain legal exceptions.

Right to restrict processing. You can ask us to limit how we use your data in certain circumstances.

Right to object. You can object to processing based on our legitimate interests, including for direct marketing.

Right to data portability. Where processing is based on consent or contract, you can ask us to provide your data in a portable format, or transfer it to another provider.

Right to withdraw consent. Where processing is based on consent, such as non-essential cookies, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us using the details in “How to contact us” below.

Complaints & Supervisory authorities

If you have concerns about how we process your personal data, please contact us first using the details in “How to contact us” below, so we can try to resolve the issue directly.

You also have the right to lodge a complaint with a data protection supervisory authority at any time. You can do this in the EAA country where you live, where you work, or where the issue you’re complaining about took place.

The supervisory authority for Renta Group Oy is:

Office of the Data Protection Ombudsman

Lintulahdenkuja 4, 00530 Helsinki, Finland

tietosuoja.fi

If you’re a customer, employee, or supplier of a local Renta company, the relevant supervisory authority for that relationship is set out in that company’s local privacy notice.