This Privacy Policy (hereinafter "Policy") explains how Peterzéns Oy collects and processes personal data. The processing of personal data complies with applicable legislation and the principles of the EU General Data Protection Regulation (GDPR).

Data Controller

The data controller under applicable data protection law is Peterzéns Oy (hereinafter "Peterzéns Oy", "we", "us" or "our"). Peterzéns Oy is responsible for ensuring that your personal data is processed in accordance with this Policy and applicable data protection laws.

Data controller contact details:

• Peterzéns Oy

• Business ID: 0495399-2

• Address: Iniöntie 461, 23360 Kustavi

• Email: leontinap@gmail.com

Data protection enquiries can be directed to the contact details above.

1. Collection of Personal Data

Your personal data is collected in various ways depending on the situation. We collect and process personal data that:

• you have provided to us when contacting us or doing business with us, for example when making a booking

• is generated when you visit our website or use the booking system

• accumulates through the use or maintenance of our systems

• we receive from our partners

• we receive through automatic updates

We use a third-party booking system (HappyBooking) for accommodation reservations. Data entered through this system is stored in the system and forwarded to us for booking processing.

We collect and process the following categories of personal data:

• basic details such as name and contact information (email, phone number, address)

• booking details such as dates, accommodation type and number of guests

• payment and billing information

• customer relationship data such as marketing permissions and prohibitions

• customer communications and related correspondence

• data generated through website use (e.g. cookies, device information)

• log data

2. Purpose and Legal Basis for Processing Personal Data

We only collect and process personal data that is necessary for conducting our business, managing customer relationships and other appropriate purposes.

We process your personal data for the following purposes:

1. Customer relationship management

We process personal data to maintain the customer relationship between you or the organisation you represent and us. The legal basis for processing is a contract.

2. Marketing

We may contact you to inform you about new products or to market and sell other products and services to you. We may also process your personal data for market research and customer surveys. The legal basis for processing is legitimate interest or consent.

3. Invoicing

We process personal data to send and receive invoices. The legal basis for processing is a legal obligation, contract and legitimate interest.

4. Service development, security and internal reporting

We process personal data to ensure the security of the customer relationship and website, to improve quality and for development purposes. We may also compile internal reports based on personal data for management use. The legal basis for processing is legitimate interest.

5. Compliance with legal obligations

We process your personal data to fulfil legal obligations, such as those relating to bookkeeping, or to respond to lawful requests from authorities. The legal basis for processing is a legal obligation.

6. Other purposes for which you have given consent

We may also process your personal data for other purposes if you have given your consent. The legal basis for processing is consent.

For processing activities based on legitimate interest, we have conducted a balancing test to verify the lawfulness of the processing.

3. Transfers and Disclosures of Personal Data

We may transfer and disclose personal data to third parties:

• to the extent permitted or required by law, for example in connection with a request from a competent authority or legal proceedings

• when our partners or subcontractors process personal data on our behalf

• if we are involved in a merger, corporate restructuring or sale of the business or part of it

• when we consider disclosure necessary to exercise our rights, protect your safety or the safety of others, investigate misconduct or respond to a request from an authority

• with your consent, to the parties covered by that consent

For accommodation bookings, personal data is processed by the booking system provider Happybooking International AB, through which bookings are made.

Appropriate data processing agreements have been concluded with all data processors.

4. Transfers of Personal Data Outside the EU or EEA

Where processing requires the transfer of data outside the EU or EEA, we use appropriate safeguards. We may transfer personal data outside the EU or European Economic Area where our partners or their subcontractors are located outside these areas.

Squarespace's data transfer mechanisms

5. Retention of Personal Data

Personal data is retained only for as long as necessary to fulfil the purposes set out in this Policy.

Personal data is retained for the duration of the customer relationship. Personal data may also be retained to the extent necessary after the end of the customer relationship, to the extent permitted or required by applicable law. For example, after the end of a customer relationship, we typically retain personal data needed to respond to claims or legal proceedings. We also retain personal data to the extent necessary to comply with a marketing opt-out you have given.

Personal data is deleted when its retention is no longer necessary for the exercise of the rights or obligations of either party, or as required by law.

6. Your Rights as a Data Subject

You have the right to exercise your rights as a data subject under the EU General Data Protection Regulation, which include:

• the right to be informed about the processing of personal data

• the right of access

• the right to rectification

• the right to erasure (right to be forgotten)

• the right to restriction of processing

• the right to object to processing

• the right to data portability

• the right not to be subject to automated decision-making

The rights available to you depend on the legal basis on which your personal data is being processed at any given time. Personal data that is necessary for the purposes defined in this Policy, or that is required to be retained by law, cannot be deleted.

Where we process your personal data on the basis of consent, you have the right to withdraw your consent at any time. We will not continue to process your personal data after withdrawal of consent unless there is another legal basis for doing so.

You can exercise your rights by sending a request to us at leontinap@gmail.com.

If you consider that the processing of your personal data is not appropriate, you have the right to lodge a complaint with the Data Protection Ombudsman. 

7. Cookies

We use cookies and similar technologies on our website www.peterzens.fi. Cookies are small text files placed on your device to collect and remember information, in order to improve the functionality and usability of our website. We may also use cookies and similar technologies for statistical purposes, such as compiling statistics on website usage to understand how users use the website and to improve the user experience.

You can prevent cookies from being set, restrict the use of cookies or delete cookies from your browser. As cookies enable the functioning of our website, restricting the use of cookies may affect the usability of the website.