Privacy Policy
Updated 26 Aug 2026
This notice explains how Käm Invest Oy (CityCars) processes your personal data when you use our website or contact us regarding buying or selling a car.
Data controller
Business ID: 3257853-6
Kalliomäentie 7 B, 02920 Espoo, Finland
WhatsApp: wa.me/358405787872
Phone: +358 40 578 7872
What data we collect
We only collect personal data when you fill in one of our forms or contact us directly. We do not passively collect data from your visit to the site, apart from the location detection described below.
| Situation | Data collected |
|---|---|
| Booking a viewing | Name, phone number, email (optional), any add-on services and delivery option you select |
| Offering your car for sale | Name, phone number, make and model of the car, plus any optional details you provide (registration number, model year, mileage, condition) |
| Business enquiry | Company name, contact person's name and role, phone number, email |
| Call-back request | Phone number |
| Chat feature | The message you write, which is forwarded to WhatsApp |
| Location detection | City estimated from your IP address (not stored, used only momentarily to adapt the homepage text) |
How your data reaches us
Our forms do not save your data to any separate database. When you submit a form, the details open up pre-written in WhatsApp, and you decide yourself whether to send the message. We only receive your data once you press send in WhatsApp. WhatsApp is provided by Meta Platforms Ireland Ltd., which acts as an independent data controller for that message under its own privacy policy.
Location detection uses a third-party service (ipapi.co), to which your IP address is passed for the duration of the request.
Purpose and legal basis of processing
We process your data for the following purposes:
- Responding to your enquiry and preparing a possible sale
- Handling and confirming a car viewing booking
- Preparing a purchase offer if you submit your car for sale
The legal basis for processing is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in responding to your enquiry.
Retention period
Because data is received as an ordinary message, it remains in our inbox for as long as necessary to handle your enquiry or the sale, and is deleted thereafter within a reasonable time, unless accounting legislation requires longer retention (e.g. completed sales).
Disclosure of data
We do not sell or disclose your personal data to third parties for marketing purposes. Data is only processed by CityCars' own authorised personnel. For chat messages, WhatsApp (Meta) acts as an independent data controller under its own privacy policy.
Cookies and local browser storage
Our site uses your browser's local storage (localStorage) for two purposes: remembering the car you have added to favourites, and showing whether a car is marked as reserved. This data is stored only on your own device, never on our servers, and does not contain any personal data.
Your rights
You have the right to:
- find out what data has been stored about you
- request correction or deletion of your data
- object to the processing of your data or request that it be restricted
- lodge a complaint with the Data Protection Ombudsman if you believe your rights have been violated
To exercise your rights, contact us via WhatsApp or by phone at +358 40 578 7872
Changes to this notice
We may update this notice as our operations develop. The current version is always available on this page.