This privacy policy explains how Hotelli Hermica processes personal data on its website and in its customer relationships. The policy is based on the EU General Data Protection Regulation (2016/679) and the Finnish Data Protection Act (1050/2018).
1. Controller
Hakametsän DT Oy / Hotelli Hermica
Business ID: 1456450-1
Insinöörinkatu 78, 33720 Tampere, Finland
2. Contact person for data protection matters
Hotelli Hermica
Email: sales@hermica.fi
Phone: +358 3 365 1111
3. Purpose and legal basis for processing personal data
We process personal data for the following purposes:
- responding to enquiries and requests for offers (legal basis: pre-contractual measures or legitimate interest)
- managing customer relationships and fulfilling contracts (legal basis: contract)
- fulfilling accounting obligations (legal basis: legal obligation)
- analysing and developing the use of the website, and marketing (legal basis: consent)
4. Personal data processed
- contact details, such as name, email address, phone number and company
- information you provide yourself in a form or message
- information related to the customer relationship, such as orders and billing details
- technical information related to the use of the website, such as IP address, browser information and cookie data
5. Regular sources of information
We mainly receive the information from you, for example through the contact form, by email or by phone. Information about the use of the website is collected with cookies and similar technologies.
6. Disclosure of data and processors
We do not sell or disclose personal data to third parties for marketing purposes. The data may be processed on our behalf by service providers, such as [website maintenance, email service, financial administration service]. Service providers process the data only in accordance with our agreement.
7. Transfer of data outside the EU or EEA
Data may be transferred outside the EU or EEA if a service provider we use (for example [Google]) processes it there. Transfers are based on the standard contractual clauses approved by the European Commission or another transfer mechanism in accordance with the GDPR.
8. Retention period
We keep personal data only for as long as necessary for the purpose of the processing. Data submitted through the contact form is deleted within [12 months] unless the enquiry leads to a customer relationship. Accounting records are kept for the period required by the Finnish Accounting Act.
9. Cookies
Our website uses cookies. Necessary cookies are required for the website to work. Analytics and marketing cookies are used only with your consent, which you can give or withdraw at any time in the cookie settings.
10. Data security
Personal data is protected by appropriate technical and organisational measures. Only those who need the data in their work have access to it. Data traffic on the website is encrypted (HTTPS).
11. Your rights
You have the right to:
- check what data about you is being processed
- request the correction of inaccurate data
- request the erasure of your data or the restriction of its processing
- object to the processing of your data and transfer your data from one system to another
- withdraw your consent at any time
Requests can be sent to the contact person mentioned in section 2.
12. Right to lodge a complaint with a supervisory authority
If you consider that the processing of your personal data violates data protection legislation, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi/en).
13. Changes to this privacy policy
We may update this policy, for example when legislation or our services change. The current version is always available on this page.