Privacy Policy

1. Data controller and contact

BM Rakennus Oy, Business ID 3276072-5, operating the Domireli accommodation service.

Contact for privacy matters and for exercising your rights: sales@bmrakennus.com.

Pending administrator review: registered business address and any designated contact person for data protection are not published here until confirmed by the company.

2. What personal data we collect

Enquiry and contact form data: name, company, business ID (if given), position, email, phone, project or accommodation location, number of occupants, requested bedrooms, move-in date, expected duration, apartment reference and your free-text message.

Domireli Assistant (chatbot): the messages you write in the chat and, if you continue as an enquiry, the requirement summary generated from the conversation.

Technical data needed to operate and protect the website: request metadata and a hashed form of your IP address used for spam and abuse prevention.

3. Why we process data and legal bases

To respond to your enquiry, prepare accommodation proposals and offers, and communicate with you about them. Legal basis: performance of a contract or steps taken at your request, and our legitimate interest in business-to-business customer communication.

To operate, secure and maintain the website, including spam and abuse prevention. Legal basis: legitimate interest.

To use optional cookies (analytics, marketing, preferences). Legal basis: your consent, which you may withdraw at any time.

To comply with statutory obligations such as accounting where applicable. Legal basis: legal obligation.

4. Where the data comes from

Directly from you through the website forms, the chatbot, email, phone or WhatsApp.

Accommodation information used to serve you is collected by Domireli from its own partner network and from publicly available project information; it does not create personal data about you.

5. Who processes or receives the data

Domireli sales personnel of the operating company handle enquiries.

Service providers acting as processors on our behalf: Lovable Cloud (website hosting, database and server functions), Google Maps (map display only, loaded with your consent), and the AI service provider behind Domireli Assistant (processing of chat messages to generate answers). WhatsApp is used only if you choose to contact us there.

Property owners and partners receive only the information necessary to arrange the accommodation you requested.

Pending administrator review: the full processor list, processing agreements and any international data transfer mechanisms must be verified and stated here before publication. We do not assert transfer safeguards that have not been confirmed.

6. Retention

Enquiry data is retained for as long as needed to handle the enquiry and the resulting customer relationship, and thereafter only where a statutory obligation requires it.

Pending administrator review: exact retention periods per data category must be confirmed by the company before publication.

7. Cookies and similar technologies

Optional cookies are used only with your consent, and consent can be changed at any time from Cookie Settings in the footer. Cookie categories and third-party services are described in the Cookie Policy.

8. Chatbot and AI processing

Domireli Assistant answers accommodation questions using information published on this website. The messages you write are sent to an AI service provider to generate the reply. Please do not enter unnecessary sensitive personal data into the chat.

If you continue your enquiry from the chat (accommodation request or WhatsApp handover), the requirement summary and your messages are stored as an enquiry so that sales can respond.

9. Your rights

You have the right to access your data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability where applicable, and to withdraw consent for optional cookies at any time.

To exercise your rights, contact sales@bmrakennus.com. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) or another competent supervisory authority.

10. Security

The website is served over HTTPS. Enquiries are validated and stored server-side in a database that is not readable from the browser, and access is limited to privileged server code and Domireli sales. Secrets and API keys are stored as server-side environment variables and are never exposed in the frontend.