1. Data controller
Kutalan Helmi / Timo Ruohonen Email: timo.ruohonen@remiot.fi Phone: 040 803 2817
2. Personal data processed
For a booking request, we process the guest's name, street address, postal code, city, phone number, email address, number of guests, requested dates, selected optional services, message and acceptance times for the terms. The system also stores when the request was received and its processing status.
3. Purpose and legal basis
The data is used to process booking requests, communicate with the guest, make the booking and provide the accommodation service. Processing is based on steps taken at the guest's request before entering into an agreement and, for a confirmed booking, performance of the agreement. Statutory accounting and tax data is processed to comply with legal obligations.
4. Source of data
The data is received from the guest through the booking form and later booking-related communication.
5. Retention period
Unconfirmed booking requests are retained for no more than 12 months after processing. Data relating to a confirmed booking and payments is retained while the agreement is managed and afterwards for the period required by accounting, tax and other legal obligations. Unnecessary data is deleted or anonymised.
6. Recipients and location of data
Data is processed only by people involved in bookings and by providers of the website, database and other necessary technical services on behalf of the controller. Data is not sold. If a provider processes data outside the European Economic Area, safeguards required by applicable data protection law are used.
7. Your rights
Depending on the circumstances, you may have the right to access your data, request its correction or deletion, restrict or object to processing, and receive data you provided in a portable format. You can exercise your rights by contacting the controller. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman.
8. Data security
Data is stored in a system protected by access controls. Access to booking requests is limited to the controller, and connections to the website are encrypted.