Privacy Policy
Last updated: 7 Jan 2026
This Privacy Policy explains how we process personal data related to reservation requests. This website does not use cookies.
Contents
Data Controller
Lempäälä Spa Email: info@lempaalaspa.fi
Personal data we collect
Name
Email address
Phone number (optional)
Preferred and alternative date
Selected treatment or package
Guests / room type
Optional message
Purpose of processing
Responding to reservation requests
Customer service and communication
Checking availability and reservation-related communication
Legal basis
We process personal data based on pre-contractual steps taken at your request (GDPR Art. 6(1)(b)) and our legitimate interest in providing customer service (GDPR Art. 6(1)(f)).
Data retention
Reservation request details are delivered by email to our staff and kept only as long as necessary to handle the request and any related reservation.
Sharing and transfers
We do not share personal data with third parties and we do not use it for profiling. We do not transfer data outside the EU/EEA.
Cookies
This website does not use cookies or tracking/analytics tools.
Your rights
Right of access
Right to rectification
Right to erasure
Right to object or restrict processing
Right to lodge a complaint with a supervisory authority
Privacy requests: info@lempaalaspa.fi
Security
We protect personal data with appropriate technical and organisational measures. Access is limited to staff who need it for their job.
Changes to this policy
We may update this Privacy Policy. The current version is always available on our website.