Published 5.7.2019, updated 5.7.2019
In short: we collect some limited amount of personal information you might voluntarily give us, as well as some technical data to monitor and improve our services. You have all the rights that are defined in the data protection laws and you may exercise them at will. We will do our best to protect your data and store it only as long as necessary.
Suan Aahaan Oy (“Suan Aahaan”, “we”, “us, “our”) might collect and process Personal Data of Users through our website. This Privacy Policy applies to any Personal Data collected in such way and explains what data we collect and process, how do we do it, and how our users may use their rights.
This Privacy Policy may be updated if required and the current version will be always available on our website https://suanaahaan.fi/privacy-policy. Any substantial changes or reduction of our Users rights will not be made without notification.
Data Controller
Suan Aahaan Oy (2813927-4)
Amiraalintie 2
01150 Söderkulla Finland
email: suanaahaan(at)suanaahaan.fi
tel: +358 (44) 241 6861
https://suanaahaan.fi
Personal Data we collect and the sources of the data
We collect two types of data: 1) User Data you might give us voluntarily and 2) Technical Data which is normally not linked to any individual user but sometimes individuals can be recognized from it and in such case it will be considered as Personal Data.
User Data is given to us voluntarily by our users by using one of our online forms, such as contact or feedback form, or table reservation form. The data may contain user’s:
- name
- email address
- telephone number
Techical data we collect may contain for example:
- user’s IP address
- browser type and version
- preferred language
- geographic location
- operating system and platform
Cookies
Our website uses cookies to collect and store Technical Data and other information. Cookies allow us to monitor and analyze our website usage, so we can improve our service and better serve our Users.
Users may choose to refuse cookies or get an alert when cookies are being sent. This can be done through the Internet browser’s settings.
Usage analytics
We use Google Analytics to analyze our website usage and get insights of our visitors in general level. To opt-out of Google Analytics, please go to https://tools.google.com/dlpage/gaoptout/. Please note that if you use a new or different computer or browser, or remove your cookies, you will need to opt-out again.
Purpose and legitimate grounds for processing Personal Data
User data we collect is used for communications with our Users, such as receiving feedback or other contact requests, responding to them and making table reservations.
Technical Data may be used for analyzing our website usage and to direct marketing at special customer groups and other business activities.
The legitimate ground for processing of Personal data is the consent given by Our Users.
Transfer of data outside of Europe
Our website’s hosting is located within the European Economic Area and is maintaind by Us. Any User Data you give us, will not be transferred outside the area or third parties.
Sharing of data
We will never give out your Personal Data unless required by law.
Storage period
We will not store your Personal data for any longer than required to fulfill it’s original purpose, such as responding and concluding communication between Us and Our User. We will also review all the data stored periodically and delete any data that is left over, for example due to incomplete communications. The period for such removal might vary depending on case.
In general, Personal Data is deleted within reasonable time or when it is no longer needed.
User’s rights
Right to access data
Our User’s may contact Us and we will inform what Personal data we have collected, if any, and the purposes such data are used for.
Right to withdraw consent
Our User’s may withdraw the consent given to use at any time.
Right to correct data
Our User’s have the right to correct any incorrect, incomplete our outdated personal data.
Right to be forgotten
Our user’s may ask Us to delete any Personal data we have collected. We will comply with any such requests, unless there is legitimate ground not to delete the data.
Right to object
Our User’s may object to certain use of Personal data if the data is processed for other purposes than originally necessary. User’s may also object any further processing of data.
Right to restrict
Our User’s may request Us to restrict certain processing of Personal Data.
Right to data transfer
Our User’s have the right to receive their Personal data from Us in commonly used data format and transfer the data to a third party.
How to use the rights
The rights above can be exercised by sending Us a written and signed request to the address provided in the beginning of this Privacy Policy, including following information: Full name, address, email address and a phone number. We may request additional information necessary to confirm the identity of the User. We may reject requests that are unreasonably repetitive or otherwise can be interpreted as harassment.
Right to file a complaint
If Our User considers Our processing of Personal Data to be inconsistent with the applicable data protection laws, a complaint may be filed with the local supervisory authority.
Information security
We will take all reasonable and appropriate technical and organisational security measures to protect the Personal Data We store and process. Such measures are for example encryption, firewall and access controls.
In case of a security breach, We will inform the relevant Users as well as relevant authorities as required by the applicable data protection laws, as soon as reasonably possible.