Privacy and data security

Privacy Policy – EN

Bensalenkkarit Oy Privacy Policy
Last updated: 1 September 2026

1. Data Controller

Bensalenkkarit Oy
Pakilantie 66
00660 Helsinki
Finland

Email: info@bensalenkkarit.fi
Phone: 020 730 6800 / 020 743 5345

2. Personal Data We Process

We process personal data depending on which Bensalenkkarit services you use.

The data may include, for example, your name, company, email address, phone number, information related to vehicle rentals and bookings, booking number, messages and contact requests submitted by you, and information concerning marketing consents.

When you use our website, we may also process technical information such as your IP address, browser and device information, and information collected through cookies and similar technologies in accordance with the consents you have provided.

3. Sources of Personal Data

Personal data is primarily obtained directly from the customer, for example when making an online booking, completing forms on our website, using the Bea chatbot, contacting us by email or phone, or visiting one of our locations.

Data may also be generated in the booking, customer management, payment and marketing systems used by Bensalenkkarit when our services are used.

4. Purposes and Legal Bases for Processing Personal Data

Personal data is processed for purposes including providing vehicle rentals and other services, managing bookings, handling customer enquiries, customer service, invoicing, managing corporate customer relationships and fulfilling statutory obligations.

Where processing is necessary for entering into or performing a contract, the legal basis is the performance of a contract or taking steps at the request of the customer prior to entering into a contract.

Processing required by law, such as the retention of accounting information, is based on a legal obligation.

Processing related to customer service, operational security and the development of our services may be based on the legitimate interests of Bensalenkkarit Oy where these interests are not overridden by the rights and freedoms of the customer.

Email and SMS marketing is based on the customer’s separate consent. Providing consent is voluntary, and refusing to provide consent does not affect the customer’s ability to use Bensalenkkarit services.

The use of non-essential cookies and similar tracking technologies is based on the user’s consent.

5. Website Forms and Marketing Consents

Information submitted through forms on Bensalenkkarit.fi is used to process the relevant enquiry and route it to the appropriate recipient.

Form information may be stored in the systems used by the Bensalenkkarit website and may also be forwarded by email to the person responsible for handling the matter.

If the customer provides separate consent for email or SMS marketing, the necessary contact details and information concerning the consent may be stored in the Brevo marketing system used by Bensalenkkarit.

Contact information is not used for marketing without an appropriate legal basis.

6. Bea Chatbot

The Bea chatbot on Bensalenkkarit.fi can be used for general customer guidance and for submitting contact requests.

Content submitted to the chatbot may be processed by an artificial intelligence service in order to generate a response.

Please do not submit personal identity codes, payment card information, passwords, health information or other unnecessary sensitive personal data to the chatbot.

Bea does not make automated decisions that produce legal effects or similarly significant effects concerning customers.

7. Recipients and Service Providers

Bensalenkkarit Oy uses external service providers in its operations. These service providers may process personal data on behalf of Bensalenkkarit Oy.

These may include, for example, website and form technology providers, hosting providers, vehicle booking systems, email and IT services, marketing systems, payment service providers, analytics and cookie services, and the artificial intelligence service used by Bea.

Service providers may process personal data only to the extent necessary to provide the relevant service.

Personal data may also be disclosed to public authorities where required by law.

8. Transfers Outside the EU or EEA

Some of the technical service providers used by Bensalenkkarit may process personal data outside the European Union or European Economic Area.

Where personal data is transferred outside the EU or EEA, appropriate safeguards required by applicable data protection legislation are used, such as an adequacy decision by the European Commission or approved Standard Contractual Clauses.

9. Retention of Personal Data

Personal data is retained only for as long as necessary for the purpose for which it is processed or for as long as required by law.

The retention period for customer and rental information is determined by the customer relationship, contractual obligations, potential legal claims and statutory retention requirements.

Information submitted through contact forms is retained for as long as reasonably necessary to process the matter and handle any subsequent enquiries relating to it.

Marketing information may be retained for as long as the marketing consent remains valid or until the information is no longer necessary for that purpose.

10. Protection of Personal Data

Access to personal data is limited to persons who need the information in order to perform their duties.

Personal data is protected through appropriate technical and organisational measures, such as access controls, authentication and secure communications.

11. Rights of the Data Subject

Under applicable data protection legislation, you have the right to access your personal data, request the correction of inaccurate data, request the deletion or restriction of processing of your data, object to the processing of your personal data and, in certain circumstances, request the transfer of your data from one system to another.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You may opt out of direct marketing at any time using the unsubscribe option provided in a marketing message or by contacting Bensalenkkarit Oy.

Requests concerning your personal data can be sent to info@bensalenkkarit.fi.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman.

12. Cookies

Bensalenkkarit.fi uses cookies and similar technologies to enable the operation of the website and, based on the user’s consent, for purposes such as analytics and marketing.

Further information about cookies, their purposes and managing your consent is available in the website’s separate cookie policy.