Privacy

Löyly Capital Oy, business ID 3558337-3
Venetie 6, 96600 Rovaniemi, Finland

For anything about your data, write to Teemu Kinnunen at hello@sumasauna.com.

When you book, we ask for your name, email address, phone number and the answers to a few booking questions, such as your choice of main course. We need these to hold your place, take payment and look after you on the day. Without them we cannot fulfil the booking.

Payment is handled by Stripe. Your card details go straight to Stripe and never reach us.

When you write to us through the contact form, we receive your name, email address and message, and use them to answer you.

When you browse, our hosting provider processes technical data such as your IP address and browser type. This is needed to deliver the pages and keep the site secure.

With your permission, we also measure how the site is used and how our advertising performs. This is described under Cookies below.

We keep booking and payment records for as long as bookkeeping law requires, and messages for as long as it takes to deal with them.

Necessary cookies keep booking and checkout working and need no permission. Everything else waits for your choice. You can change it at any time from Cookie settings at the foot of every page.

During checkout we also keep your booking details in your browser's session storage. They are cleared when you close the tab.

Until you choose, and if you decline, Google's tags on this site run in a limited mode. They set no cookies and read none.

They still send Google a short signal when a page is viewed: the page address, your browser type, the time and your cookie choice. Experience views and selections also send product details. Adding an experience to the basket and starting checkout also send measurement signals, including the booking value when available. When a booking is completed, the signal also carries its reference number and purchase value when available. Like any request on the web, it reveals your IP address. Google uses these signals to estimate totals, such as how many bookings followed an ad, without identifying you.

Meta receives nothing unless you allow marketing cookies.

We use a small number of providers to run the site and the business: Bókun for bookings, Stripe for payments, Supabase for order records, Vercel for hosting and Resend for email. With your permission, Google and Meta provide measurement and advertising.

Some of them are based in the United States or process data there. When data leaves the EU or EEA, it is protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.

We do not sell your data.

You can ask to see the data we hold about you, have it corrected or deleted, restrict or object to its use, or receive it in a portable form. You can withdraw your cookie permission at any time from Cookie settings.

Write to hello@sumasauna.com and we will help.

If you feel we have handled your data wrongly, you can complain to the Office of the Data Protection Ombudsman in Finland at tietosuoja.fi.