Privacy notice – Room Service Levi Oy customer register and website
Updated 18 October 2026

1. Controller and contact details

Room Service Levi Oy (Levi Delivery), business ID 3389910-4
PL 10, 99131 Sirkka, Finland
Phone +358 44 100 200
Email sales@levidelivery.fi

Privacy contact: Pauliina Tourunen, Room Service Levi Oy, sales@levidelivery.fi.

2. Name of the register

Room Service Levi Oy customer register and levidelivery.fi website usage and chat data.

3. Purposes of processing

• managing the customer relationship and receiving, delivering, collecting and invoicing orders and rentals
• customer service and handling complaints and other claims
• developing our services and website and maintaining information security
• customer communications and marketing, including electronic direct marketing; you can opt out of direct marketing at any time
• the website chat assistant for general service questions (see section 10)

4. Legal bases

Processing is based on the EU General Data Protection Regulation (GDPR):

• contract (Art. 6(1)(b)): fulfilling orders and rentals and steps taken before them
• legal obligation (Art. 6(1)(c)): for example keeping accounting records under the Finnish Accounting Act
• legitimate interest (Art. 6(1)(f)): managing the customer relationship, customer service, service development, information security and the chat assistant. Our legitimate interest is to give visitors a quick answer to general questions. We have assessed that this does not override visitors’ interests: using the chat is voluntary, it does not ask for personal data, and identifiable personal data is blocked before sending.
• consent (Art. 6(1)(a)): analytics and advertising cookies (section 9). You can withdraw consent at any time.

5. Personal data processed

• basic and contact details: name, delivery address, phone number, email address
• order and rental details: products, delivery and collection times and payment status (we do not store card details)
• for winter clothing rentals, each renter’s first name, height, weight, shoe size and age, used to select suitable sizes
• company or organisation details and the contact person’s role
• marketing permissions and opt-outs
• customer service messages
• website technical data and chat messages (see sections 9 and 10)

6. Sources of data

We receive data from you, for example when you place an order or rental or contact us. Technical website data is generated when you use the website.

7. Retention

We keep data only as long as needed for the purposes in section 3. Customer data is deleted no later than five years after the customer relationship ends, unless the law requires longer retention. Under the Finnish Accounting Act, vouchers are kept for six years and accounting books and financial statements for ten years from the end of the financial year. Marketing permissions are kept until withdrawn. Chat retention is described in section 10.

8. Recipients and processors

We do not sell personal data or disclose it to third parties for their own use. We use service providers who act on our behalf and process data only on our instructions and under contract:

• the online store store.levidelivery.fi (Twice) for orders and rentals
• the payment services Stripe and Adyen for payments
• website hosting and server services
• email services
• web analytics and advertising: Google (Analytics, Ads, Tag Manager) and Automattic (Jetpack statistics) (see section 9)
• the AI service Anthropic for the chat assistant (see section 10)

Data may be disclosed to authorities where required by law.

9. Cookies, web analytics and advertising

When you first visit the website, you can choose Accept all or Essential only in the cookie notice. You can change your choice at any time with the Cookie settings button at the bottom of the page.

Essential cookies (no consent needed):

• pll_language: language choice, kept for 1 year
• ld_consent: your cookie choice, kept for 6 months

Cookies based on consent (set only if you accept):

• Google Analytics (_ga, _ga_*): visitor statistics, kept for up to 13 months
• Google Ads (_gcl_au and Google advertising cookies): measuring advertising results and remarketing, which means showing ads to people who have visited the website before, kept for up to 90 days

Google services are loaded through Google Tag Manager. Before consent, Google tags do not store cookies on your device, but they may send limited, cookieless measurement data (Google Consent Mode). The provider is Google Ireland Limited, and data may be transferred to the United States. Google participates in the EU–US Data Privacy Framework.

The website also uses Jetpack statistics (Automattic). It does not set cookies but processes technical data such as your IP address and the pages you visit.

The online store store.levidelivery.fi has its own cookie notice and settings.

10. Chat assistant (AI)

The website has an AI assistant that answers general service questions based on the public information on our website. The controller is Room Service Levi Oy. Using the chat is voluntary.

Data processed: the messages you write in the chat and the assistant’s replies. Up to the 12 most recent messages are sent to create each reply. We also process your IP address as a technical identifier; our server turns it into an hourly changing hash used for usage limits. Your IP address, name and login details are not sent to the AI service.

Please do not write personal data in the chat. Our server blocks identifiable personal data before sending, such as email addresses, phone numbers, addresses, references and codes. A blocked message is not sent to the AI service. However, not all personal data can be recognised in free text.

Legal basis: legitimate interest (see section 4).

Recipient and transfers: messages and our website’s public texts are sent to the AI service provider Anthropic to create the reply. For customers in the European Economic Area, the contracting party is Anthropic Ireland, Limited, which processes the data under its data processing terms. Data may also be processed outside the EU and EEA, for example in the United States. These transfers are based on Anthropic’s data processing terms. Under its terms, Anthropic does not use customer content to train its models.

Retention: we do not store chat contents. We store only daily totals (questions, blocked messages, usage and errors) for up to 60 days, and usage-limit identifiers expire within one hour. Anthropic deletes inputs and outputs within 30 days by default. Content flagged as violating its usage policies may be kept for up to 2 years or as required by law.

The assistant does not make decisions that have legal effects on you.

11. Transfers outside the EU and EEA

Customer register data is not transferred outside the EU or EEA, except through the services described in sections 9 and 10. Those transfers are based on the service providers’ data processing terms and on transfer mechanisms permitted under EU data protection law.

12. Security

Personal data is accessible only to people who need it for their work. Systems are accessed with personal credentials, connections are encrypted and administrator rights are restricted. Our service providers are responsible for the physical and technical security of their servers. People who process the data are bound by confidentiality.

13. Your rights

Under the GDPR you have the right to:

• know whether your data is processed and access it (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• restrict processing (Art. 18)
• receive the data you provided in a portable format, when processing is based on consent or contract (Art. 20)
• object to processing based on legitimate interest and opt out of direct marketing (Art. 21)
• withdraw consent at any time without affecting earlier processing (Art. 7)
• lodge a complaint with a supervisory authority; in Finland, the Office of the Data Protection Ombudsman, tietosuoja.fi/en (Art. 77)

Requests: sales@levidelivery.fi or +358 44 100 200. We reply within one month. We may ask you to confirm your identity before handling a request.

14. Changes

We may update this notice. The date of the latest update is shown at the top.

This is a translation. If the Finnish and English versions differ, the Finnish version prevails.