TIETOSUOJASELOSTE

1. Data Controller 

Kunnis Oy Business ID: 2991895-8 Address: Ruonantie 319, 27230 Rauma, Finland Email: info@puusaun.com Phone: +358 41 3185819

2. Name of Register 

Customer and marketing register of the Puusaun (Kunnis Oy) website.

3. Purpose and Legal Basis of Processing 

Personal data is processed only when there is a lawful basis for doing so. The purposes and their legal bases are described below.
Responding to enquiries. Data is processed in order to respond to enquiries and manage communication. Legal basis: consent or legitimate interest.
Requests for quotes, bookings and private rentals. Data is processed to prepare and carry out wellness days, group visits and private sauna rentals. Legal basis: performance of a contract or steps taken prior to entering into a contract.
Online store: sale of serial cards and gift cards. Data is processed to deliver and manage online store orders. Legal basis: performance of a contract.
Managing the customer relationship and communication. Data is processed to maintain the customer relationship and for related communication. Legal basis: legitimate interest.
Invoicing and payment transactions. Data is processed to handle invoicing and accounting. Legal basis: legal obligation and performance of a contract.
Marketing and website development. Data is processed to target marketing and develop the website by means of cookies. Legal basis: consent, to the extent required by law.
Personal data is not used by Kunnis Oy for automated decision-making or profiling.

4. Data Content of the Register 

The following data may be processed in connection with website forms, requests for quotes, bookings and use of services:

Name
Contact details (email, phone number, address)
Quote, booking and service details (service, date, group size, additional information)
Online store: order and delivery details, and order history
Information related to invoicing and payment transactions
Free-form messages and their content, which may contain other personal data provided by the user
Technical data (e.g. IP address, browser type, website usage) collected through cookies and similar technologies

5. Regular Sources of Data 

Personal data is obtained primarily:

From the data subject via website forms, requests for quotes, bookings and enquiries
From visitor data collected through cookies and analytics (to the extent used and where consent or another lawful basis exists)

Providing personal data is a precondition for communication and for carrying out services. Without the necessary data, a request for a quote or an order cannot be processed.

6. Disclosure and Transfer of Data 

Personal data is not disclosed to third parties without a legal reason. Data may be processed by trusted service providers (e.g. web hosting, email service, online store payment processor, analytics and marketing services) acting as data processors on behalf of Kunnis Oy. Data may be transferred outside the EU or EEA if the service providers used require it. In such cases, transfers are carried out with the safeguards required by law (e.g. the EU Standard Contractual Clauses and, where necessary, additional safeguards).

7. Protection of the Register

 Personal data is stored in secure systems on the secure servers of service providers.

The website is protected by an encrypted connection (HTTPS/SSL)
Access to the data is limited to persons who need it for their work
Persons processing the data are bound by confidentiality

8. Data Retention Period

Enquiry and quote request data: no longer than 12 months, unless a customer relationship begins or the matter is ongoing
Customer and invoicing data: for the duration of the customer relationship and for the period required by accounting law (typically 6 years from the end of the financial year; in some cases documents may be retained longer if another obligation requires it)
Cookie and visitor data: the retention period depends on the cookies and settings

9. Rights of the Data Subject 

The data subject has the right to:

Access their personal data
Request the correction of inaccurate data
Request the deletion of data (to the extent deletion is possible and the law does not require retention)
Object to processing or withdraw consent given (e.g. marketing cookies)
Request the restriction of processing
Request the transfer of data from one system to another, where applicable
Lodge a complaint with the Data Protection
Ombudsman (tietosuoja.fi)

Requests should be sent to: info@puusaun.com

10. Cookies and Analytics 

The website uses necessary cookies that are required for the technical functioning and security of the site. Necessary cookies may operate without consent. These include, for example:

A cookie that keeps the shopping cart contents in memory
A cookie that keeps the user logged in during a session
Technical cookies related to security and load balancing

The website may also use cookies and similar technologies to improve the user experience, ensure functionality, and for visitor tracking and marketing targeting. Analytics and marketing cookies generally require consent. The visitor can accept or decline cookies via the cookie banner and change their settings later in their browser.

11. Changes to This Privacy Policy 

We reserve the right to update this privacy policy if legislation, official guidance or the functionality of the website so requires.

Last updated: 9 July 2026