PRIVACY POLICY
Data Controller
Onnes Ravintola Oy
Arinatie 10
00370 Helsinki
Data Protection Issues
Register Name
Onnes Ravintola Oy Customer Register
Basis for Maintaining the Register
The following privacy practices apply to Segreto’s website www.segreto.fi.
In certain situations, it is necessary for us to request personal data such as name, email address, postal address, phone number, or information regarding dietary requirements. This information may be requested, for example, in connection with table reservations, catering for meetings, or private events.
The information may be used, for example, for:
-
responding to requests for quotations
-
planning events and services
-
managing customer relationships
Information will not be used for direct marketing without the explicit consent of the data subject. When necessary, we may contact you by phone regarding matters related to a service or a request for quotation.
Legal Basis for Processing Personal Data
-
The processing of personal data is based on one of the following grounds:
-
consent given by the data subject
-
performance of a contract or measures related to it
-
the legitimate interest of the controller in managing customer relationships and developing business operations
-
legal obligation
Purpose of Personal Data Processing
Personal data is processed in accordance with applicable data protection legislation for the following purposes:
-
managing and maintaining customer relationships
-
delivering services
-
developing customer service
-
developing business operations
-
marketing with the consent of the data subject
-
analysis and statistics
The data subject has the right at any time to prohibit direct marketing directed at them.
Content of the Register
The register may contain the following information:
-
name
-
address
-
phone number
-
email address
-
possible information related to organizing an event, such as dietary requirements or allergy information
Any allergy information is processed only for the purpose of providing the service and with the consent of the data subject.
Technical information such as IP addresses and browser data may be collected from website use to ensure the security and functionality of the website.
Regular Sources of Information
Information is mainly obtained directly from the data subject, for example through:
-
website forms
-
email
-
telephone
-
during the customer relationship
Disclosure of Information
Personal data may be disclosed to partners necessary for providing the service to the extent required for organizing the service. Such situations may include, for example, practical arrangements related to events.
Data is not sold or disclosed to third parties for marketing purposes.
As a rule, personal data is not transferred outside the European Union or the European Economic Area.
Data Retention Period
Personal data is stored only for as long as necessary to fulfill the purpose for which it is used or for the period required by law.
For example:
-
data related to requests for quotations is stored for a reasonable time after the matter has been processed
-
data related to a customer relationship is stored for the duration of the customer relationship and as long as required to fulfill possible legal obligations
Protection of the Register
Personal data is processed only by employees who have the right to do so as part of their work duties.
Access to information systems requires personal usernames and passwords. Databases are protected by technical and organizational measures such as firewalls and access control.
Any manual documents are stored in locked premises and disposed of appropriately after use.
Onnes Ravintola Oy is not responsible for the privacy practices of other websites that may be linked from this site.
Rights of the Data Subject
In accordance with data protection legislation, the data subject has the right to:
-
receive information about the processing of their personal data
-
access their personal data
-
request correction of inaccurate data
-
request deletion of data
-
restrict the processing of their data
-
object to the processing of personal data
-
withdraw their consent at any time
Requests should be sent by email to the controller’s contact person.
Right to Lodge a Complaint with a Supervisory Authority
The data subject has the right to lodge a complaint with a supervisory authority if they believe that the processing of personal data violates applicable data protection legislation.
In Finland, the supervisory authority is:
Office of the Data Protection Ombudsman
www.tietosuoja.fi
Cookies
The website may use cookies to improve the functionality of the site, collect visitor statistics, and enhance the user experience.
Cookies are small text files stored on the user’s device. Users may block the use of cookies through their browser settings if they wish.
Reservation Systems
The website uses a reservation system provided by an external service provider: DinnerBooking.
When a customer makes a table reservation through the website, the information provided during the reservation (such as name, phone number, email address, and possible additional reservation details) is processed in the service provider’s system.
The reservation system provider acts as a data processor and processes the data in accordance with its own privacy policy.
The reservation system may use its own cookies to enable the functioning of the service.
Reservation system data is used to improve the restaurant experience. The aim is to provide the best possible restaurant experience for the customer.
More information about the service provider’s privacy policy can be found on its website:
DinnerBooking
Additional Information
If you have questions regarding data protection or the processing of personal data, you can contact us by email: