Lehtoranta Villas processes personal data to provide the best possible service to customers. We store personal information about our customers, business partners, and staff. Personal data may include first and last names, phone numbers, email addresses, or data collected during the use of our services.
Lehtoranta Villas (official name: Leadership Capital Oy)
Email: mia-riitta.niemi@lehtorantavillas.com
Customers and potential customers, suppliers, Business partners
Legal and Regulatory Purposes:
Nationality information (EU Regulation 692/2011)
Purchase data or parts of it for accounting purposes (Accounting Act 1336/1997)
Booking-related customer details such as name and contact information
Language codes, information about travel companions (guest card)
Billing and payment method details
Pricing details such as company affiliation or factors influencing pricing
Purchase data and details of reserved or utilized services
Reserved villa names and requested services
Correspondence
Marketing communications
Purpose of Processing and Use of Data
Personal data is processed solely for predefined purposes, including:
Villa and program service management
Customer identification
Customer relationship management
Booking-related communications
Marketing communications
Resolving and informing about service disruptions
Service development and related research
Safeguarding rights and ensuring service accuracy
The customer register includes:
Customer information
Details of purchased products/services
Requests to exercise these rights can be submitted to info@lehtorantavillas.com.
Right to Access
Data subjects can request access to their stored personal data.
Right to Rectification
Data subjects can request correction of incorrect or incomplete personal data.
Right to Object
Data subjects may object to data processing if they believe their data is being handled
unlawfully.
Right to Restrict Direct Marketing
Data subjects can prohibit the use of their data for direct marketing.
Right to Erasure
Data subjects can request the deletion of their data if processing is unnecessary. Requests are processed, and either data is deleted, or a valid reason for retaining it is provided.
Note: Legal obligations (e.g., retention of accounting records for 10 years as per the Accounting Act, Chapter 2, Section 10) may prevent immediate data deletion.
Withdrawal of Consent
If processing is based solely on consent, the data subject may withdraw consent at any time.
Right to Appeal
The data subject has the right to file a complaint with the Data Protection Ombudsman.
The data subject has the right to request that we limit the processing of disputed data until the issue is resolved.
Right to Appeal The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they believe that we are violating applicable data protection legislation in the processing of personal data.
Contact details of the data protection officer: www.tietosuoja.fi/fi/index/yhteystiedot.html
Data is collected:
Directly from the customer when the customer relationship begins
Through online forms submitted by the customer
Personal data is not sold. Data is shared only as described in this privacy policy, adhering to current data protection laws. Personal data is not transferred outside the EU or EEA.
We collaborate with partners and service providers committed to GDPR compliance.
Data is retained only as long as necessary for the purposes described or as legally required.
Data is stored electronically, and appropriate measures are taken to secure it. Access is restricted to designated personnel responsible for managing the system and customer relationships. Data use is monitored, and the register is protected against unauthorized access.
This privacy policy may be updated periodically. Significant changes will be announced on our website or through other means, such as email. We encourage you to review this policy regularly to stay informed about our data protection practices.