Privacy policy

1. Data controller

Keilarata.fi
Email: info@keilarata.fi

2. Name of the register

Customer register of the Keilarata.fi booking service

3. Purpose of processing personal data

Personal data is processed for the following purposes:

• Managing and confirming bookings
• Customer communication and reminders
• Processing payment transactions
• Running the loyalty programme
• Developing the service and improving the customer experience
• Marketing communication (only with consent)

4. Data content of the register

Data stored in the register:

• Name
• Email address
• Phone number
• Booking and payment details
• Loyalty programme details (stamps, free bookings)
• Username and password (encrypted)
• IP address and cookie data
• Customer service notes

5. Regular sources of data

Data is collected from the customer when they make a booking, when they register, and when they use the service.

6. Retention period

Personal data is kept for as long as necessary to provide the service and to meet legal obligations:

• Booking history: 3 years from the last booking
• Customer accounts: until the account is closed or deletion is requested
• Payment transactions: 6 years, as required by accounting legislation
• Marketing consents: until the consent is withdrawn

7. Transfer and disclosure of data

Data is not disclosed to third parties, except:

• Payment service (Stripe): processing payment transactions
• Email service (Resend): booking confirmations and reminders
• Service provider (Supabase): data storage in the EU
• Authorities, when required by a legal obligation

All service providers have committed to GDPR requirements, and data processing is covered by data processing agreements.

8. Data protection

Personal data is protected with appropriate technical and organisational measures:

• SSL/TLS encryption for data transfer
• Password encryption (bcrypt)
• Access control and an audit log
• Server protection with firewalls and intrusion prevention systems
• Regular security audits
• Backups and recovery plans

9. Rights of the data subject

You have the right to:

• Right of access: request access to your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request that your data is deleted (the "right to be forgotten")
• Right to restrict processing: restrict the processing of your data in certain situations
• Right to object: object to the processing of your data
• Right to data portability: receive your data in a machine-readable format
• Right to withdraw consent: withdraw your marketing consent at any time
• Right to lodge a complaint: lodge a complaint with the supervisory authority

Requests to use these rights must be sent by email to info@keilarata.fi. We respond to requests within 30 days.

10. Cookies

The service uses cookies to improve the user experience:

• Necessary cookies: signing in and managing bookings
• Functional cookies: remembering the user's settings
• Analytics cookies: analysing how the service is used (only with consent)

You can control the use of cookies in your browser settings.

11. Automated decision-making and profiling

We do not use personal data for automated decision-making or profiling that would significantly affect your rights.

12. Changes to this privacy policy

We reserve the right to update this privacy policy. We will inform customers of significant changes by email and in the service.

Last updated: 18 October 2026

13. Contact details for privacy matters

Keilarata.fi
Email: info@keilarata.fi

Office of the Data Protection Ombudsman (supervisory authority):
https://tietosuoja.fi