Privacy Policy

1. Data Controller

Villa Koskenäyräs
Kaukolanraitti 48, 48410 Kotka
Email: info@koskenayras.fi

2. Personal Data Collected

Through our booking, quote and contact forms we collect:

• Name, email address, phone number and address
• Company name, business ID and invoicing details (business customers)
• Booking details, number of guests and free-form messages
• Marketing consent and its withdrawal

Our website visitor measurement additionally records:

• Pages viewed, visit times and time spent on pages
• Traffic source (e.g. search engine, ad or social media)
• Approximate location and organisation derived from the IP address (company networks)
• Email opens and link clicks

3. Purpose and Legal Basis

• Handling bookings, quotes and invoicing – performance of a contract (GDPR 6(1)(b)) and legal obligation (accounting, 6(1)(c)).
• Replying to enquiries and related follow-ups, and B2B sales – legitimate interest (6(1)(f)).
• Improving the website through visitor measurement – legitimate interest (6(1)(f)).
• Marketing messages and Google Analytics/ad measurement – consent (6(1)(a)), which you can withdraw at any time.

4. Data Retention

Booking and invoicing data is kept for the duration of the customer relationship and up to 6 years as required by Finnish accounting law (vouchers 10 years). Visitor measurement and marketing data is deleted when no longer needed or when consent is withdrawn.

5. Data Recipients and Transfers

Data is never sold. We use the following service providers:

• Lovable Cloud / AWS (Frankfurt, EU) – website and database hosting
• Procountor (Finland) – accounting and e-invoicing
• Resend (USA) – email delivery and open/click tracking
• Google Analytics, Google Ireland / Google LLC – visitor statistics, only with consent
• Meta Platforms (Facebook, Instagram) – social media posts and advertising; ad measurement only with consent
• Buffer (USA) – scheduling social media posts (no customer personal data)
• Apollo.io and Firecrawl (USA) – retrieving public company information for B2B sales

Transfers outside the EU rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. Data Subject Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to data processing
• Lodge a complaint with the Data Protection Ombudsman

7. Cookies and Visitor Measurement

Essential cookies and browser storage are always used for site functionality and our own visitor measurement. Google Analytics and advertising measurement cookies are only enabled if you accept them in the cookie banner (Google Consent Mode v2, denied by default). You can change your choice by clearing your browser data.

8. Contact

For questions regarding this privacy policy or your personal data, please contact us at info@koskenayras.fi.