Last updated: October 8, 2025

Villa Junnola (“we,” “us,” “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and Finnish legal obligations regarding passenger reporting (Act 308/2006).

​

1. Data Controller
Villa Junnola
Salmenkulmantie 51, 25470 Salo, Finland
Email: info@villajunnola.com

​

2. Personal Data We Collect
We only collect the minimum personal data necessary to manage and confirm your villa booking, communicate with you about your stay, and comply with legal obligations, including accounting, safety regulations, and passenger reporting.

​

The data we may collect includes your name, postal address, email address, telephone number, booking details (such as dates, number of guests, and special requests), payment information (processed via secure payment partners; we do not store full card numbers), and identification details required for passenger reporting (for example, passport number or personal ID).

​

We do not collect or process data for marketing profiling or behavioral tracking. Cookies are only used if strictly necessary for site functionality.

​

3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:

• Booking management and confirmation: We use your name, contact details, and booking data to manage and confirm your villa booking. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR).

• Communication about your stay: We use your contact details and booking information to communicate important information about your stay. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

• Compliance with legal obligations: We process booking, invoicing, and passenger reporting data to comply with applicable legal obligations, including Finnish passenger reporting requirements. The legal basis is legal compliance (Art. 6(1)(c) GDPR and Act 308/2006).

​

4. Data Sharing and Recipients
We only share your personal data when necessary to fulfill your booking or legal obligations. This may include booking platforms such as Airbnb, Booking.com, or StayOne, payment processors for secure transactions, authorized service providers such as cleaning teams, maintenance personnel, or private chefs, and Finnish authorities if required by law, for example for passenger reporting, police, or border control. All third parties are bound by confidentiality and GDPR compliance.

​

5. Data Retention
Booking and invoicing records are retained for 5 years in accordance with Finnish accounting law. Contact and communication data are retained only as long as necessary, up to 2 years after your last stay. Passenger reporting data are retained as required by Finnish law, for a minimum of 2 years.

​

6. Cookies and Site Functionality
We use only essential cookies to enable basic site features, such as page navigation and form submissions. We do not use analytics, advertising, or tracking cookies. Disabling cookies may affect site functionality.

​

7. Your Rights
Under GDPR, you have the right to access your personal data, rectify incorrect or outdated data, erase your data (“right to be forgotten”), subject to legal obligations, restrict or object to certain processing, and data portability where processing is based on consent or contract. To exercise any of these rights, contact us at info@villajunnola.com. You also have the right to lodge a complaint with the Finnish Data Protection Authority (Tietosuojavaltuutetun toimisto).

​

8. Security
We implement appropriate technical and organizational measures, such as HTTPS encryption, secure backups, and access controls, to protect your personal data against unauthorized access, alteration, or destruction.

​

9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Substantial changes will be communicated on our website with an updated “Last updated” date.