Privacy statement
Privacy statement
This is the privacy statement of 24 Pesula Oy in accordance with the EU General Data Protection Regulation (GDPR).
Prepared on 27.10.2021. Last updated on 1.4.2025.
1. Data Controller and Contact Details
24 Pesula Oy (hereinafter “24 Pesula” / “data controller”)
Business ID: 1562325-1
010 292 7799
Contact for data protection matters:
2. General Information
This privacy statement explains how 24 Pesula processes personal data of its customers, representatives/contact persons of partners, individuals visiting laundries and premises, and users of its website.
3. Purposes and Legal Grounds for Processing Personal Data
Customers:
Purpose: Collected personal data of customers is used to deliver services, manage, maintain, and develop customer relationships, for customer communication and service, for marketing 24 Pesula’s services, and for handling complaints/feedback.
Legal Ground: Fulfillment of the agreement between 24 Pesula and the data subject and the legitimate interest of the data controller (business operations). Marketing is based on the consent of the data subject. Processing of personal data included in accounting materials is based on a legal obligation (Accounting Act, 1336/1997).
Representatives/contact persons of partner companies:
Purpose: Personal data is used for building, maintaining, and developing partnership relations and for communication.
Legal Ground: Legitimate interest of the data controller (business operations) and legal obligation as required by the Act on the Contractor’s Obligations and Liability (1233/2006) or the Accounting Act (1336/1997).
Individuals visiting laundries and 24 Pesula premises:
Purpose: Camera surveillance is conducted at 24 Pesula’s laundries and premises to protect personal safety and 24 Pesula’s property, monitor proper operation of laundries, and prevent and investigate situations endangering safety, property, or operations.
Legal Ground: Legitimate interest of the data controller (protecting safety and property, monitoring operations, and preventing/investigating such situations).
Website users:
Purpose: Ensuring and maintaining the functionality of the website, development and analysis of visitors and site usage, and targeted advertising. Legal Ground: Consent of the data subject for non-essential cookies. Legitimate interest of the data controller for essential cookies (ensuring communication via networks and ensuring information security).
Personal data may also be processed when necessary to establish, exercise, or defend legal claims. Personal data is not used for automated decision-making, including profiling.
4. Processed Personal Data
- Customers: Name, contact details (such as phone number, email address), details of purchases and receipts, card information, and other data related to the customer relationship, such as communication and feedback/complaints. The amount and scope of data depend on the customer relationship. If a laundry purchase is made with a payment card, 24 Pesula generally receives only information about the transaction and the last four digits of the card. If the customer uses the 24 Pesula app and has given consent, the app collects device-based location data.
- Representatives/contact persons of partner companies: Name, contact details (such as phone number, email address), and communication and organization-related data.
- Individuals visiting laundries and 24 Pesula premises: Video footage recorded by surveillance cameras of individuals moving within monitored areas. Surveillance is indicated with signs in each area.
- Website users: Website user data collected via cookies, such as IP address and information about time spent and behavior on the site.
Providing personal data is not a statutory or contractual requirement. However, providing/processing certain data is necessary for concluding and fulfilling the agreement between 24 Pesula and the data subject or their represented organization and for delivering services.
5. Regular Sources of Data
The processed personal data is primarily obtained directly from the data subject, such as a customer purchasing laundry services via the 24 Pesula app or contacting 24 Pesula via web form, email, phone, or social media.
Camera surveillance data is collected from individuals visiting 24 Pesula laundries and/or premises or the exterior areas of premises.
Website user data is collected via cookies used on the website.
6. Disclosures of Personal Data
Personal data is not regularly disclosed to other parties.
Personal data may be disclosed in certain cases, e.g., to authorities based on a statutory obligation or order.
24 Pesula uses external service providers (data processors) to whom personal data is disclosed as necessary when they process data on behalf of 24 Pesula for the purposes described in this statement. Such processors include software providers, accountants, website administrators, and payment service providers.
Personal data may also be disclosed within the same corporate group, e.g., for centralized functions (legal basis: legitimate interest).
Video surveillance recordings may be disclosed in case of security incidents to authorities for preliminary investigation (Act 805/2011) or to an insurance company investigating the matter.
7. Transfers of Personal Data Outside the EU or EEA
Personal data is not generally transferred outside the European Union (EU) or the European Economic Area (EEA).
Some processors or their subprocessors involved in data processing may be located outside the EU/EEA or have access to personal data from outside the EU/EEA. In such cases, protection of personal data is ensured by verifying that the European Commission has issued an adequacy decision for the target country or by requiring the processor to adopt the Commission’s standard contractual clauses as part of the agreement with 24 Pesula.
8. Data Retention Periods
24 Pesula retains personal data only as long as and to the extent necessary for the purposes described in this privacy statement:
- Customers: Personal data is retained for a maximum of 10 (+1) years from the date of receipt.
- Representatives/contact persons of partner companies: Retained for at least the duration of the partnership, and at most 10 (+1) years after the partnership ends.
- Visitors to laundries and 24 Pesula premises: Video recordings are retained for a maximum of 30 days depending on the monitored area, unless legal claims, incidents, or investigations require longer retention.
- Website users: Cookie data is retained as specified in the website’s cookie banner.
9. Data Subject Rights
9.1 Exercising Rights
If a data subject wishes to exercise the rights described here, they may contact the data controller. The controller may request additional information if needed to verify the data subject’s identity. The controller will respond within the time required by the GDPR (generally within one month).
9.2 Right of Access
The data subject may request confirmation of whether their personal data is being processed and obtain access to such data.
9.3 Right to Rectification and Erasure
The data subject may request correction or supplementation of inaccurate, incorrect, or incomplete personal data.
The data subject may request deletion of their personal data based on grounds provided by the GDPR, e.g., if the data is no longer necessary for the purposes for which it was collected. Data may not be deleted if the controller has a legal obligation to retain it or another lawful basis for retention exists.
9.4 Right to Restrict Processing
The data subject may request restriction of processing in certain situations defined by data protection laws, such as during the verification of the accuracy of contested data.
9.5 Right to Object
The data subject may object to processing based on the controller’s legitimate interest. The controller may only continue processing if there are compelling legitimate grounds that override the data subject’s rights.
9.6 Right to Withdraw Consent
Where processing is based on consent, the data subject may withdraw their consent at any time. For cookie consent, this can be done via the cookie banner/settings on the website.
9.7 Right to Data Portability
Under certain conditions defined by law, the data subject may request to receive their personal data provided to the controller and transfer it to another controller.
9.8 Right to Lodge a Complaint
The data subject may file a complaint with the national supervisory authority if they believe their personal data is not being processed properly or their rights are not being respected. In Finland, this is the Office of the Data Protection Ombudsman (www.tietosuoja.fi).
10. Changes to the Privacy Statement
This privacy statement may be updated as necessary due to changes in 24 Pesula’s operations or applicable legislation.
Significant changes to the processing of personal data will be communicated separately to data subjects.