Privacy policy

Data controller

Ravintola Buka
Turuntie 205, 02740 Espoo, Finland
info@ravintolabuka.fi
+358 41 314 4401

Responsible for data protection matters: the owner of Ravintola Buka, same contact details.

Data collected and purposes

We process personal data only when you provide it yourself. The data collected, the purpose and the legal basis are set out below.

• Contact form: name, email address, subject and message.
  Purpose: to reply to your message.
  Legal basis: consent (GDPR 6(1)(a)) and legitimate interest (GDPR 6(1)(f)) in running the restaurant.
• Gift card waiting list: email address and name.
  Purpose: to notify you when gift cards become available.
  Legal basis: consent (GDPR 6(1)(a)).
• Table reservations (Tablen widget): name, phone number, email address and reservation details are processed in the Tablen system (tablen.fi). Buka sees reservations in its own Tablen view.
  Purpose: to fulfil the table reservation.
  Legal basis: performance of a contract (GDPR 6(1)(b)).

Retention periods

• Contact messages: no longer than 24 months after our reply, unless an active customer relationship continues.
• Gift card waiting list email addresses: until the notification is sent or you unsubscribe, at most 12 months.
• Reservation data: retained by Tablen in accordance with its own privacy policy.

Recipients of data

We do not sell, rent or share your personal data for marketing purposes. We use the following processors:

• Resend (resend.com): sending contact and gift card emails. Processing takes place within the EU.
• Tablen (tablen.fi): table reservation system.
• Cloudflare (cloudflare.com): the site's technical platform, content delivery network (CDN), bot protection and visitor statistics (Web Analytics).
• Cloudflare Turnstile: bot protection for forms. Does not set personally identifying cookies.

We may also disclose data to the authorities where required by law.

Embedded content

The Tablen reservation widget is loaded on the home page from the tablen.fi domain. When you open the page, your browser connects to the Tablen service and Tablen may process technical data such as your IP address. Only enter your reservation details if you accept Tablen's privacy policy.

Videos and images are served directly from the ravintolabuka.fi domain. Viewing them does not transmit data to third parties.

Links to Google reviews lead to Google Maps. Opening the link takes you to Google's service, and Google's privacy policy applies to browsing there.

Cookies and analytics

The site does not set marketing or tracking cookies. Visitor statistics are collected with Cloudflare Web Analytics, which is cookie-free and does not store personally identifying data. A cookie banner is therefore not required.

Cloudflare may briefly store an IP address and technical data for security and operational reasons. Read Cloudflare's privacy policy: cloudflare.com/privacypolicy.

Transfers outside the EU

We aim to use services whose data processing takes place within the EU/EEA. In certain technical situations Cloudflare and Resend may transfer data outside the EU on the basis of safeguards approved by the EU, including standard contractual clauses.

Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

• find out what data is held about you (Article 15),
• request rectification (16) or erasure (17) of your data,
• restrict processing (18) or object to it (21),
• receive your data in a machine-readable format (20),
• withdraw your consent at any time,
• lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

You can send requests to info@ravintolabuka.fi. We usually reply within a week.

Automated decision-making

We do not carry out automated decision-making or profiling based on personal data.

Changes to this policy

We update this policy as needed. We will announce material changes through the site. The date above indicates the most recent update.