Privacy policy

How Gem of Vuosaari collects and uses personal data — last updated [date].

This page is a starting draft written to reflect how this website is built (no tracking, no on-site forms). It is not a substitute for legal advice — please have an accountant or lawyer review it before publishing, especially the sections on data retention and guest registration, which touch on Finnish accommodation-sector obligations.

1. Who is responsible for your data

The data controller for this website and for bookings made through it is:

2. What data is collected

When you contact us

If you email, call, or message us on WhatsApp, we receive whatever you choose to share — typically your name, contact details, and the content of your message. This site has no contact form, so nothing is stored on the website itself; messages go straight to our email inbox or phone.

When you book

Bookings made through the calendar on this site are handled by Smoobu GmbH, our booking-management provider, not by this website directly. Smoobu processes the data needed to complete a booking: name, contact details, arrival/departure dates, number of guests, and payment information. Smoobu acts as our data processor for this purpose — see Smoobu's own privacy policy for details of their processing.

If you book via Airbnb or Booking.com instead, that platform's privacy policy governs the data you share with them.

3. Why we process this data

4. Cookies and third-party tools

This site does not load any tracking or analytics scripts, and does not set cookies on page load. The one exception: the availability calendar on the booking section is provided by Smoobu and is only loaded after you actively click "Show availability & book." At that point, your browser requests content directly from Smoobu, which may set its own cookies to run the calendar and payment flow. No booking-widget request is made until you take that action.

5. How long we keep data

[Otto: confirm retention periods — e.g. booking and guest-registration records kept for X years to meet Finnish accommodation and accounting law; enquiry emails deleted after Y months if no booking follows.]

6. Your rights

Under the GDPR, you can ask to access, correct, or delete the personal data we hold about you, restrict or object to its processing, and request a copy in a portable format. To do so, contact us at vuosaari@aptos.fi. If you're not satisfied with our response, you can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuojavaltuutettu.fi).

7. Changes to this policy

We may update this policy from time to time; the date at the top of the page reflects the latest version.