Privacy Policy
Last updated 2026-07-05
Draft for review — not yet legal advice. Company details in [brackets] and the cancellation policy are to be completed, and the whole document reviewed by a lawyer before publication.
This policy explains how Silmu Aava collects and handles personal data under the EU General Data Protection Regulation (GDPR) and Finnish data protection law.
1. Controller
The controller is [Legal entity name], Business ID (Y-tunnus) [Y-tunnus], [Registered address], Savonranta, Finland. For any data protection matter, contact hello@silmuaava.fi.
2. What data we collect
- Enquiries: your name, email address, message and any stay details you choose to include (dates, party size).
- Bookings (when direct booking launches): contact and stay details needed to fulfil and account for the booking.
- Payments: processed by Paytrail. We receive a payment confirmation and reference, not your full card details.
- Technical data: standard server logs (e.g. IP address, request time) kept by our hosting for security and reliability.
3. Why we use it and the legal basis
We use your data to respond to enquiries and to make and manage bookings (performance of a contract or steps prior to a contract), to meet legal obligations such as accounting, and to keep the site secure (our legitimate interest). We do not send marketing without your consent.
4. Who we share it with
We use a small number of service providers who process data on our behalf: website hosting (Vercel), email (Zoho / Resend) and payments (Paytrail). If you book through Airbnb or Lomarengas, your data is also processed by that platform under its own privacy policy. We do not sell your data.
5. Transfers outside the EU/EEA
Some providers may process data outside the EU/EEA. Where they do, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep it
Enquiries are kept only as long as needed to handle them. Booking and payment records are kept for as long as required by Finnish accounting law (generally six years). After that, data is deleted or anonymised.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. You may withdraw consent at any time. To exercise a right, email hello@silmuaava.fi. You may also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
8. Cookies
The site uses only essential storage; see the Cookie Policy for details.
Questions about this page? Email us at hello@silmuaava.fi