Your privacy.
Clearly explained.

The controller is Melina Näätänen / Villa Huvikumpu. For privacy enquiries, contact melina.naatanen@gmail.com or +358 50 560 2851.

This notice covers the Amazing Villa Huvikumpu website and enquiries initiated through it. You can browse without giving us your name or contact details.

When you contact us. We process the contact details and message content you provide, such as your name, email address, phone number and questions about a planned stay. We receive this information from you. Providing it is voluntary, but we need a suitable contact detail to reply.

When you browse. Delivering the website to your browser requires technical connection information, including your IP address. The hosting service may also process request times, pages requested, browser and device information, and technical error or security logs.

The website has no booking, payment or contact form of its own. An email link opens your email application. Please do not send personal identity numbers, payment card details or unnecessary health information by ordinary email.

Responding to enquiries about a stay or booking is based on taking steps at your request before entering into a contract (GDPR Article 6(1)(b)). Other customer correspondence and maintaining the website’s operation and security are based on legitimate interests: handling enquiries and providing a secure website (Article 6(1)(f)).

The information is not used for automated decision-making or profiling on this website. Contacting us does not subscribe you to a marketing list.

Webflow. The website, photographs and videos are delivered through Webflow and its technical service providers. Webflow is based in the United States and processes data there. Webflow states that it relies on the EU–US Data Privacy Framework and, where applicable, EU Standard Contractual Clauses. Details of safeguards and service providers are available in Webflow’s privacy information and Data Processing Addendum.

Email. Enquiries sent to melina.naatanen@gmail.com are handled through Google’s Gmail service. Google may process data outside the EU/EEA. Its practices and transfer safeguards are explained in Google’s Privacy Policy and data transfer information.

Airbnb and external links. Bookings and accommodation payments are made through Airbnb. Airbnb is responsible for processing data in its own service under its Privacy Policy. When you follow an external link to Airbnb, an attraction or a map service, that service’s own privacy practices apply.

Enquiry information is handled by the controller and the providers needed to deliver communications or the website. Information may be disclosed to an authority when required by law.

Enquiry information is kept for the time needed to handle the matter and necessary follow-up correspondence. It is deleted when the matter is resolved and it is no longer needed for that purpose. If a message relates to a booking, a legal obligation or a dispute, the necessary information may be kept for the period required by that obligation or matter.

Retention of technical information depends on service delivery, security and troubleshooting needs. Webflow and Google explain their own retention and deletion practices in the privacy information linked above. You can ask the controller for further details about the retention of your enquiry information.

No advertising pixels, visitor-level analytics or marketing tracking have been added to this website. The site search and photo gallery work in your browser. Search queries are not sent to a separate search service. Videos are our own video files, not YouTube or social-media embeds.

The hosting provider may use technology necessary for service operation and security. If analytics or other tracking requiring consent is added later, consent will be requested before it starts and you will be able to change your choice. This notice will be updated at the same time.

You may request access to your personal information, correction of inaccurate information, erasure or restriction of processing. You may also object to processing based on legitimate interests on grounds relating to your situation. Data portability applies where its legal conditions are met.

These rights are not absolute in every situation, for example where keeping information is required by law. Send your request to melina.naatanen@gmail.com. Your identity may need to be verified before information is disclosed. Requests are normally answered within one month.

If you believe your information is being processed contrary to data-protection law, you can contact the supervisory authority: the Office of the Data Protection Ombudsman in Finland.