Data Protection
Privacy Policy
How we collect, use, and protect your personal data in compliance with GDPR and EU data protection regulations.
Last updated: August 2026
1. Introduction
Sisu Rentals ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring transparency about how we handle your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.
We operate in compliance with the EU General Data Protection Regulation (GDPR) and other applicable EU data protection laws. If you are located in the European Union, you have specific rights regarding your personal data, which are detailed in this policy.
2. Data Controller & Contact Information
Sisu Rentals is the Data Controller for the personal data we collect. If you have questions about this Privacy Policy or our data practices, please contact us:
Sisu Rentals
Email: info@sisurentals.com
Website: sisurentals.com
Service Area: Norway, Sweden, Finland
You also have the right to lodge a complaint with your national data protection authority if you believe we have violated your rights.
3. What Personal Data We Collect
We collect different types of personal data depending on how you interact with us:
Contact Information
- Full name and contact details
- Email address and phone number
- Property address and location information
- Communication preferences
Property Information
- Property details and specifications
- Booking and occupancy data
- Revenue and financial information
- Guest information and reviews
- Photos and property documentation
Technical Data
- IP address and device identifiers
- Browser type and operating system
- Pages visited and time spent on our website
- Referring URL and exit pages
- Cookies and similar tracking technologies
Financial Data (if applicable)
- Bank account information for payments
- Tax identification numbers
- Transaction history and payment records
4. Legal Basis for Processing Your Data
Under GDPR, we only process personal data when we have a valid legal basis. Here are the legal bases we rely on:
Contract Performance (Article 6(1)(b))
To provide property management services, process bookings, handle payments, and manage the client relationship.
Legitimate Interests (Article 6(1)(f))
To improve our services, conduct analytics, prevent fraud, maintain security, and send service-related communications.
Consent (Article 6(1)(a))
For marketing communications, optional analytics, and non-essential cookies. You may withdraw consent at any time.
Legal Obligation (Article 6(1)(c))
To comply with tax, accounting, and regulatory requirements in the Nordic countries where we operate.
5. How We Use Your Personal Data
We use your personal data for the following purposes:
- Providing and managing property management services
- Processing payments and billing
- Responding to your inquiries and providing customer support
- Sending transactional and service-related emails
- Conducting analytics to improve our website and services
- Detecting and preventing fraud or security breaches
- Complying with legal obligations and regulatory requirements
- Marketing communications (with your consent)
- Performing revenue optimization and dynamic pricing
6. How Long We Retain Your Data
We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by law:
Active Client Data
For the duration of our service relationship and 3 years after termination for accounting and legal compliance.
Financial Records
Retained for 6-10 years as required by Nordic tax and accounting legislation.
Website Analytics & Cookies
Typically 13 months from the date of collection or as configured in your cookie preferences.
Support Communications
Retained for 2 years to provide historical context and handle disputes.
When data is no longer needed, we delete or anonymize it. In some cases, we may retain anonymized data for statistical analysis.
7. Who We Share Your Data With
We may share your personal data with third parties in the following circumstances:
Service Providers
We work with trusted third-party service providers who assist us in operating our website, conducting our business, and serving you. These include hosting providers, payment processors, analytics platforms, and communication tools. All service providers are bound by data processing agreements and must comply with GDPR.
OTA Platforms
We share property information and guest data with booking platforms (Airbnb, Booking.com, Expedia, Hotels.com) to manage your listings and process reservations. We only share data necessary for these platforms to function.
Legal Requirements
We may disclose personal data if required by law, court order, or government request. We will notify you of such requests unless legally prohibited from doing so.
Business Transfers
In the event of a merger, acquisition, bankruptcy, or sale of our business, your data may be transferred as part of that transaction. We will provide notice of any such change.
8. International Data Transfers
Sisu Rentals operates within the European Economic Area (EEA). Generally, we do not transfer data outside the EEA. If we ever need to transfer data to countries outside the EEA that are not deemed to have adequate data protection, we will implement appropriate safeguards such as Standard Contractual Clauses or your explicit consent.
9. Your Rights Under GDPR
If you are in the EU, you have the following rights regarding your personal data:
Right of Access
You have the right to access and receive a copy of your personal data.
Right to Rectification
You can request correction of inaccurate or incomplete data.
Right to Erasure
You can request deletion of your data under certain circumstances (the "right to be forgotten").
Right to Restrict Processing
You can request that we limit the processing of your data.
Right to Data Portability
You can request your data in a structured, commonly used format to transfer to another service provider.
Right to Object
You can object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
If we rely on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at info@sisurentals.com. We will respond to your request within 30 days (extendable to 90 days for complex requests).
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience and collect information about how you use our site.
Types of Cookies
- Essential Cookies: Required for website functionality (login, security, language preferences)
- Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
- Marketing Cookies: Allow us to show you targeted ads and track marketing effectiveness
- Preference Cookies: Remember your settings and preferences
You can manage your cookie preferences through your browser settings or via our cookie consent tool at the bottom of each page. Essential cookies are always enabled for site functionality.
11. Data Security
We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, secure servers, regular security audits, and staff training. However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
12. Children's Privacy
Our services are not intended for children under 18. We do not knowingly collect personal data from children. If we become aware that a child has provided personal data, we will promptly delete it. If you believe a child has provided information to us, please contact us immediately at info@sisurentals.com.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email or prominently on our website. Your continued use of our services after changes constitutes your acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:
Sisu Rentals
Email: info@sisurentals.com
Website: sisurentals.com
Response Time: We aim to respond to all inquiries within 10 business days.