Privacy Policy — Lakeside Cottages, Effective date: 17 May 2025

Your privacy matters to us. This policy explains what personal data Lakeside Cottages (lakesidecottages.fi) collects, why we collect it, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Finnish law.

1. Who We Are (Data Controller)

The data controller is Lakeside Cottages, lakesidecottages.fi, Finland. You can reach us at info@lakesidecottages.fi.

2. What Data We Collect

We collect only what's necessary to provide our services: your name, email address, and phone number; booking details such as dates and number of guests; payment information, which is processed securely by our payment provider and never stored by us in full; any messages or correspondence you send us; and basic technical data such as your IP address and browser type, collected via cookies.

3. Why We Process Your Data

We process your data to fulfil your reservation and provide accommodation (contract); to comply with Finnish accounting and tax law (legal obligation); to improve our website and prevent fraud (legitimate interests); and to send you newsletters if you've opted in (consent, which you may withdraw at any time).

4. How We Use Your Data

We use your data to process and confirm bookings, send confirmations and receipts, respond to enquiries, improve our services, and meet legal obligations. We never sell your personal data to third parties.

5. Sharing With Third Parties

We share data only as needed with payment processors to handle transactions, booking platforms if your reservation came through one, email tools to send confirmations, and website analytics providers using anonymised data. All third parties are bound by GDPR-compliant data processing agreements.

6. How Long We Keep Your Data

Booking records are kept for six years as required by Finnish accounting law. Marketing consent records are kept until you withdraw consent. General correspondence is kept for two years after last contact. Analytics data is retained for 13 months, then deleted or anonymised.

7. Cookies

Our website uses essential cookies (required for the site and booking process to work), analytics cookies (to understand site usage, with your consent), and marketing cookies (with your consent). You can manage preferences via the cookie banner on your first visit or through your browser settings.

8. Your Rights Under GDPR

You have the right to access, correct, delete, restrict, or receive a portable copy of your personal data. You may also object to processing or withdraw marketing consent at any time. To exercise any of these rights, email us at info@lakesidecottages.fi. We will respond within 30 days. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman at tietosuoja.fi.

9. Data Security

We use HTTPS encryption, access controls, and regular security reviews to protect your data. Payments are handled exclusively by PCI DSS-compliant processors.

10. International Transfers

Your data is primarily processed within the EEA. Where third-party providers operate outside the EEA, we ensure appropriate safeguards such as EU Standard Contractual Clauses are in place.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised effective date. Significant changes will be communicated by email or a notice on our website.

12. Contact

Lakeside Cottages — lakesidecottages.fi — info@lakesidecottages.fi