Privacy Policy

Your privacy matters to us. This Privacy Policy explains how we collect, use, and protect your personal information when you visit or make use of the services provided by SpaHotelCasinoFI.

1. Who We Are

SpaHotelCasinoFI is a hotel and resort located in Savonlinna, Finland, offering spa services, accommodation, and casino entertainment. This policy applies to all data collected via our website, reservations, and customer interactions.

2. What Data We Collect

We may collect the following types of personal data:

Full name
Contact details (email, phone number, address)
Payment and billing information
Booking and stay history
Website usage and device data (IP address, browser type)
Marketing preferences

3. How We Use Your Data

Your data is used for the following purposes:

To manage bookings and provide our services
To send booking confirmations and updates
To respond to inquiries and customer support requests
To improve our website and user experience
To send promotional offers, if you have opted in
To comply with legal and regulatory requirements

4. Legal Basis for Processing

We process your personal data based on one or more of the following grounds: performance of a contract, legal obligation, your consent, or legitimate interests in managing our hotel and services.

5. Cookies and Tracking

Our website uses cookies to enhance user experience, personalize content, and analyze traffic. You can manage cookie preferences in your browser. Please refer to our Cookies Policy for full details.

6. Data Sharing and Third Parties

We may share your data with:

Payment processors (e.g. Stripe, Paytrail)
Booking partners and systems
Legal authorities if required
Marketing platforms, if you have consented

We do not sell your personal data to third parties.

7. Data Retention

We retain your data only as long as necessary to fulfill the purposes outlined in this policy, or as required by Finnish law. Booking-related data is typically stored for 6 years for accounting and reporting.

8. Your Rights

You have the right to:

Access your personal data
Request correction or deletion of your data
Withdraw consent at any time
Object to processing under certain circumstances
Lodge a complaint with the Finnish Data Protection Authority

9. Data Security

We use technical and organizational measures to protect your data against unauthorized access, loss, or misuse, including secure servers, SSL encryption, and internal access controls.

10. International Transfers

Your data may be transferred outside the EU only when adequate data protection is guaranteed, such as through Standard Contractual Clauses or GDPR-compliant providers.

11. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors without parental consent.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new “Last updated” date. Continued use of the website signifies your acceptance of the updated terms.