Draft. To be checked before the site goes live.
Privacy notice
This notice explains how Kamome Project Oy handles personal data when you visit this website, book a table, take part in our classes or contact us. It follows the EU General Data Protection Regulation (GDPR).
Updated: [DATE OF PUBLICATION]
Controller and contact
Kamome Project Oy (Business ID 2680073-5)
Tinatie 1, 49490 Neuvoton, Finland
Email: info@kamome.fi
Please send any questions about your personal data to info@kamome.fi.
What we collect and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Table booking (resOS) | Name, phone number, email, date and size of the party, any notes you write (for example allergies) | Handling and confirming your booking | Taking steps at your request before a contract (GDPR art. 6(1)(b)). Allergy information only with your consent (art. 9(2)(a)) |
| Emails to us | Your email address and what you write | Answering you | Our legitimate interest in answering questions (art. 6(1)(f)) |
| Class and event sign-ups (by email or at the restaurant) | Name, contact details, number of participants | Organising the class or event | Contract (art. 6(1)(b)) |
| Visiting the website | Technical data such as IP address and browser type. Our hosting provider Cloudflare processes it briefly to deliver and protect the site; we do not keep server logs ourselves | Keeping the website secure and working | Legitimate interest (art. 6(1)(f)) |
| Visitor statistics (Cloudflare Web Analytics) | Page views counted without cookies and without identifying you | Knowing which pages are useful | Legitimate interest (art. 6(1)(f)) |
We do not sell personal data and we do not use it for automated decision-making or profiling.
Who processes the data for us
We use the following service providers. They process data only on our behalf.
| Service | Use |
|---|---|
| resOS | Table bookings |
| Microsoft 365 (Microsoft) | |
| Cloudflare | Hosting this website, protecting it against attacks, and visitor statistics |
Some of these providers may process data outside the EU/EEA, for example in the United States. In that case the transfer is based on the European Commission’s adequacy decision (EU–U.S. Data Privacy Framework) or on the Commission’s standard contractual clauses.
Map and links to other services
The map on this website is loaded from Google only when you press “Show map”. Before that, no data is sent to Google. When the map is loaded, Google processes data under its own privacy policy.
Links to Instagram, Facebook, Google Maps and the booking page take you to those services, which have their own privacy policies.
Cookies
This website does not set cookies. We count visits with Cloudflare Web Analytics, which works without cookies and does not identify individual visitors.
How long we keep data
| Data | How long |
|---|---|
| Bookings | Name and contact details: 3 years after the booked date. After that the booking is anonymised, and only the date, time and party size are kept as statistics |
| Emails | 2 years. If an email is part of a sale (for example an invoice), 6 years, as the Accounting Act requires |
| Class and event sign-ups | 2 years. If the class was paid, the payment records are kept for 6 years under the Accounting Act |
| Visitor statistics | Stored only as totals, with no personal data |
Your rights
You have the right to:
- see the personal data we hold about you
- have incorrect data corrected
- have your data erased, or its use restricted
- object to processing based on our legitimate interest
- receive your data in a machine-readable form and have it transferred, where the processing is based on consent or a contract
- withdraw your consent at any time, without affecting earlier processing
Send your request to info@kamome.fi. We answer within one month.
You also have the right to lodge a complaint with the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).