Loma-Oravi Oy

Privacy Policy

Updated May 2026

1. Data Controller

Loma-Oravi Oy

Y-tunnus / Business ID: 1824319-0

Oravintie 1, 58175 Oravi, Finland

info@saimaalakesidevillas.fi

2. Data We Collect

  • Name, email address and phone number when making a booking
  • Payment and billing details, reservations are handled by Hostex (booking platform), payments by Stripe Payments Europe Ltd. through Hostex's Stripe Connect integration. Loma-Oravi Oy does not store or process payment card data itself.
  • Communication via email and the contact form
  • Site usage data (analytics, cookies, only with consent)

3. How We Use Your Data

  • Managing and confirming bookings
  • Customer service and responding to enquiries
  • Billing and payment processing
  • Legal obligations (accounting)
  • Improving the site (analytics, only with consent)

4. Cookies

We use cookies to ensure the site works correctly (essential cookies) and to analyse usage (analytics cookies). Analytics cookies are only used if you have given your consent.

Essential

Login, session management, remembering cookie preference. No consent required.

Analytics

Tracking site visits and usage (e.g. Google Analytics). Requires consent.

4b. Service providers we use (sub-processors)

We use the following service providers to run the site and our service. Some are located outside the EU. In those cases, transfers are covered by the EU Commission's Standard Contractual Clauses (SCC).

Hostex (Hostex Technology Limited, Hong Kong)

Booking calendar, guest messaging, channel sync (Airbnb, Booking, etc). Contracted data processor, SCC.

Stripe Payments Europe Ltd. (Irlanti / Ireland)

Payment processing via Hostex's Stripe Connect integration. EU-based.

Vercel Inc. (Yhdysvallat / USA)

Website hosting and edge caching. Transfers based on SCC.

Cloudflare R2 (Cloudflare Inc., Yhdysvallat / USA)

Image storage and delivery (CDN). Transfers based on SCC.

Google Workspace (Google Ireland Ltd., Irlanti / EU + USA)

Email service (info@saimaalakesidevillas.fi). Transfers based on SCC.

Domainkeskus Oy (Suomi / Finland) + Euronic Oy (Suomi / Finland)

Domain registration and DNS service.

This list may grow when we add analytics or paid advertising. We update this notice before any such change goes live.

5. Data Retention

Booking and customer data is retained for 6 years in accordance with Finnish accounting law. Analytics data is deleted after 26 months. You may request deletion of your data by contacting info@saimaalakesidevillas.fi.

5b. Cancellation Policy

Cancellation terms are described in the Terms & Conditions. In brief: free cancellation more than 30 days before arrival, 50% refund 14–30 days before, no refund under 14 days before arrival.

6. Your Rights

  • Right to access your personal data
  • Right to rectification or erasure
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with the Data Protection Ombudsman (tietosuoja.fi)

7. Contact

For any privacy-related questions, contact us at: info@saimaalakesidevillas.fi