Privacy Policy
1. Data Controller
Green Berry Oy (Business ID 2935242-1)
Viinikankaari 9
01530 Vantaa, Finland
This Privacy Policy describes how Green Berry Oy ("Green Berry", "we", "us") processes personal data in connection with the website ownwell.fi and the Ownwell® service concept (together, the "Services").
Last updated: 14/08/2026
2. General
This Privacy Policy applies to the processing of personal data carried out in connection with our Services. Personal data refers to any information relating to an identified or identifiable natural person.
In this Privacy Policy, we explain:
-
what personal data we collect
-
for what purposes we use the data
-
how we protect the data
-
what rights data subjects have
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.
3. Whose data do we process, and in what role?
We process the personal data of:
-
contact persons of our customers
-
potential new customers who contact us through the website or other channels
-
employees of our customers or individuals providing cleaning services to our customers, when they contact us regarding the Services
If the person is not in a direct customer relationship with Green Berry, their employer or the organisation they represent acts as the data controller. In such cases, Green Berry acts as a data processor.
4. What personal data do we collect and why?
4.1 Information provided directly by customers and users
We receive personal data directly from the data subjects themselves or from our customers. The personal data we process may include:
-
name
-
job title/role in the customer organization
-
email address
-
phone number
-
shipping address
We process this information to:
-
provide and maintain the Services
-
respond to inquiries
-
manage customer relationships
4.2 Automatically collected technical data
We may also process technical information that is classified as personal data, including:
-
IP address
-
browser type and version
-
device information
-
links clicked and movement between pages on the website
This information is used to:
-
resolve potential issues
-
improve and develop the Services
-
ensure performance and security
Some of this technical data is collected via cookies and similar technologies. Cookie use and your consent choices are managed through the cookie consent tool displayed on the Site, which provides further detail on the specific cookies used and lets you manage or withdraw your preferences at any time.
5. Who do we share your data with?
We use personal data solely to manage customer relationships and develop our Services.
We do not sell or rent personal data. We may share data only with:
-
authorized service providers (such as infrastructure, hosting, IT, and analytics providers)
-
authorities, when required by law
Some of our service providers, including our website hosting provider (Wix.com), process data on servers located outside the EU/EEA, including in the United States and Israel. Where personal data is transferred outside the EU/EEA, we ensure this is done under an appropriate safeguard recognized by the GDPR — such as an adequacy decision by the European Commission or Standard Contractual Clauses — and, where applicable, additional technical and organizational measures. Further information on these transfers is available on request.
6. How long do we retain data?
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
When personal data is no longer needed:
-
it is permanently deleted, or
-
anonymized within a reasonable timeframe
Retention periods depend on the nature and purpose of the data. For example:
-
sales-related records are kept for at least 10 years due to statutory accounting obligations
-
contact request information is kept until the inquiry has been processed and any potential customer relationship has been evaluated
7. Data security
We process personal data in accordance with applicable data protection laws and use administrative, structural, technical, and physical safeguards to protect personal data from unauthorized access, alteration, disclosure, or destruction.
8. Rights of the data subject
Data subjects have the rights described below under the GDPR. We may request additional information to verify the identity of the data subject before fulfilling a request.
To exercise these rights, data subjects must contact us using the contact information provided at the beginning of this Privacy Policy. Requests must be made in writing and include sufficient details to allow us to verify the requester's identity and fulfill the request.
Green Berry has the right to refuse requests that are manifestly unfounded or excessive, particularly if they are repetitive. Alternatively, we may charge a reasonable fee based on the administrative costs of fulfilling the request.
8.1 Right of access and rectification
The data subject has the right to obtain confirmation of whether we process their personal data and, if so, access to that data. They also have the right to request rectification of inaccurate or incomplete data.
8.2 Right to erasure ("right to be forgotten") and restriction
The data subject may request deletion (or anonymization) of their personal data or restriction of processing. If we are legally obliged to retain certain data, we will inform the data subject.
8.3 Right to data portability
The data subject has the right to receive personal data they have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller when the processing is based on consent or contract and carried out by automated means.
8.4 Right to withdraw consent
If processing is based on consent, the data subject may withdraw their consent at any time.
8.5 Right to object
The data subject has the right to object to the processing of their personal data for certain purposes, such as direct marketing.
8.6 Right to lodge a complaint with a supervisory authority
If you believe your personal data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with your local data protection authority within the European Economic Area (EEA).
A list of supervisory authorities is available at: https://www.edpb.europa.eu/about-edpb/our-members_en
9. Third-party websites
Our Services may contain links to third-party websites. We are not responsible for the content or privacy practices of such sites.
10. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Updates will be published on this page, and the "Last updated" date will be revised accordingly.
Continued use of the Services after changes have been published will be considered acceptance of the updated policy.
11. Contact Information
If you have any questions regarding the processing of personal data or wish to exercise your rights, please contact:
Green Berry Oy
Viinikankaari 9
01530 Vantaa, Finland