Privacy Policy
Ladataan sisältöä…
Uudet Urat Ky
Business ID: 0634348-5
Kummunkatu 14, 83500 Outokumpu, Finland
[email protected]
+358 50 524 5561
This Privacy Policy describes how Hotelliravintola Kumpu processes personal data in connection with the website (hotellikumpu.fi), booking system, customer service, marketing and video surveillance.
Booking and customer information: name, contact details, booking information and payment information. Payments are processed through a payment service provider, and full card details are not stored in our own systems.
Website usage data: IP address, browser and device information, and visit information collected through cookies (see Section 8).
Contact information: information provided through contact forms.
Video surveillance data: recordings from common areas of the premises (see Section 9).
Personal data is primarily collected directly from the data subject, for example when making a reservation, through online forms or through cookies. Data may also be received through the booking system or booking intermediary, such as Booking.com.
Personal data is processed for the following purposes:
Processing hotel and restaurant reservations and managing customer relationships — Legal basis: performance of a contract
Where processing is based on legitimate interest, the controller's interest has been assessed against the rights and reasonable expectations of the data subject. The data subject has the right to request further information about this assessment.
Making a reservation and using hotel or restaurant services requires certain information, such as your name, contact details and, where necessary, payment information, in order to enter into and perform the contract. If this information is not provided, the service cannot be provided.
Browsing the website does not require you to provide personal data, and accepting analytics cookies is always voluntary.
The website uses both necessary and optional cookies:
A detailed list of the cookies used, their purposes and retention periods can be found in our Cookie Policy.
Video surveillance is used in the common areas of the premises, such as entrances and the lobby. Its purpose is to ensure the safety and security of property, staff and customers, as well as to prevent and investigate misuse and other incidents. Video surveillance is clearly indicated by signs in the monitored areas.
Retention period: Recordings are retained for a maximum of 90 days, after which they are automatically deleted unless a recording is required for an ongoing investigation, legal claim or request from an authority. In such cases, the relevant recording will be retained for as long as necessary.
Only specifically authorised persons have access to video surveillance recordings. Recordings are disclosed to third parties only where there is a legal basis for doing so, such as at the request of the police in connection with a criminal investigation.
Personal data is processed by the following service providers:
Some of our service providers, including Cloudflare and PostHog, are US-based companies. The actual location of data processing is as follows:
You have the right to request further information about the safeguards used for international data transfers by contacting us using the contact details provided in Section 1.
Personal data is protected using appropriate technical and organisational measures, including access controls, encrypted connections and regular backups. These measures are designed to prevent the accidental or unlawful destruction, loss, alteration or unauthorised access to personal data.
Under the GDPR, you have the right to:
You have the right, at any time and without conditions, to object to the processing of your personal data for direct marketing purposes (Article 21(2)–(3) GDPR). This right is separate from the general right to object described above and applies to all direct marketing regardless of its legal basis.
You can exercise this right by:
When you object to direct marketing, your personal data will no longer be processed for that purpose.
Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority:
Office of the Data Protection Ombudsman
tietosuoja.fi
This Privacy Policy may be updated from time to time, for example due to changes in legislation or the development of our services. The latest version is always available on our website.