Privacy policy

Controller

W Club Oy, business ID 3435206-3, Dagmarinkatu 14, 00100 Helsinki. For data protection enquiries, the email address and phone number are at the foot of the page.

What is processed

Name, phone number and email address. Booking and visit history, and notes relating to your visits. Purchases and payment transactions. Photographs only with separate consent.

Why it is processed

To take the booking and deliver the service. This is based on performance of the contract.

To maintain service quality and handle cancellations. This is based on legitimate interest.

For marketing, and for publishing photographs, only with consent. Consent can be withdrawn at any time.

Accounting records are kept on the basis of a legal obligation.

Who else sees the data

The booking and client system Phorest (nDevor Systems Ltd T/A Phorest) acts as a processor. The payment provider and the accountant process data in their own roles. Data is not sold and is not disclosed for marketing purposes.

Transfers outside the EU and EEA

Data is not transferred outside the EU or EEA. If that changes, it will be stated in this policy and the transfer will be made with the safeguards the GDPR requires.

How long it is kept

Booking and client records are kept for the duration of the client relationship. If more than three years have passed since the last visit, they are deleted. Accounting material is kept for six years as required by the Finnish Accounting Act.

Your rights

You have the right to access your data, correct inaccurate data, request erasure, restrict or object to processing, port your data, and withdraw consent you have given. Requests can be made by email or at your appointment.

If you believe your data has been handled improperly, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland.

Cookies

This site sets no cookies, runs no analytics and does not track visitors. There are no third-party requests. When you open the booking service you move to Phorest, which uses its own cookies and its own privacy policy.