Tenant Personal Data & Privacy in Finland
As a tenant, you should understand how personal data is processed and which GDPR timelines apply to tenancy in Finland. This guide explains clearly what information a landlord may request, how long data may be retained, what tenant rights exist and how to request correction or deletion of data. It also covers when consent is needed, how to act if you suspect a data breach or misuse, and what evidence you should keep. The guide gives step-by-step instructions for requesting records, updating information and exercising complaint rights, and clarifies when to seek help from dispute resolution bodies or the district court. Keep records and messages organized, as documentation speeds resolution.
What personal data means in a tenancy
In a tenancy, personal data can include name, address, phone number, personal identity number, payment history and contract-related documents. A landlord may request data for contract performance and safety, but processing must be justified and proportionate.
- Name and contact details (email, phone, address)
- Personal identity number or other identifier, if justified
- Payment history and any collection records
- Contract attachments and supporting documents
Tenants have a right to basic privacy protections in tenancy matters.
GDPR timelines and retention periods
The general principle is that personal data should be retained only as long as necessary for the purpose. More specific rental-related rules are found in legislation and case law [1].
- Keep only necessary data and delete outdated records regularly
- Accounting and invoicing may have separate retention requirements
- Responding to individuals' requests follows GDPR deadlines
Respond to requests promptly to protect rights.
How to request correction or deletion
You may ask the landlord for a copy of your data, correct errors or request deletion when there is no lawful basis for retention. Make requests in writing and keep copies of correspondence.
- Collect all relevant documentation and messages.
- Send a clear written request specifying what to correct or delete.
- Keep copies and note dates; expect a response within 1 month under GDPR.
- If there is no or an unsatisfactory response, seek help from court services [2] or consumer guidance [3].
Detailed records improve the chances of a quick resolution.
FAQ
- How do I see what data the landlord holds about me?
- You can request a copy of the data under the right of access by sending a written request.
- Can a landlord request my personal identity number?
- A personal identity number may be requested only if it is justified for contract performance.
- What if the landlord does not respond to my request?
- Keep all communications and consider filing a complaint or pursuing legal action.
How-To
- Gather documentation and communications related to the issue.
- Send a written request for access, correction or deletion.
- Hold copies and note dates; expect a reply within one month.
- If unresolved, seek assistance from court services or consumer authorities.
Key takeaways
- Keep all messages and receipts organized consistently.
- Send requests in writing and be specific about desired changes.
- Act promptly because timelines can be strict.
Help and Support / Resources
- Finlex (legislation and case law)
- Oikeus.fi (court services and guidance)
- KKV (consumer guidance and advice)
