This is the Riekko Lodgen register and privacy statement in accordance with the EU General Data Protection Regulation (GDPR). Drafted on 01.09.2025.
Willow Grouse Oy
+358 40 086 4933
Mechelininkatu 32 B 2, 00260 Helsinki
Data protection requests are handled by Louru Oy.
Riekko Lodge online service user register.
The purpose of processing personal data is communication with customers, maintenance of customer relationships, and marketing. Additionally, collected data may be used for the development of the online service. Data is not used for automated decision-making or profiling.
The information stored in the register includes: Person’s name, company name, contact details (phone number, email address, address), website addresses, information about ordered services and their changes, billing information, and other information related to the customer relationship and ordered services.
The data is retained indefinitely.
Information stored in the register is obtained from the customer via email, phone, social media services, contracts, customer meetings, and other situations where the customer provides their information.
Information about contact persons of companies and other organizations can also be collected from public sources such as websites, directory services, and other companies.
Data is not regularly disclosed to other parties. Data may be published to the extent agreed with the customer. Data may also be transferred by the data controller outside the EU or EEA.
The data controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose job description includes it.
Risks related to personal data include data breaches. Personal data stored in the register is protected against unauthorized access and accidental or illegal destruction, alteration, disclosure, transfer, or other illegal processing.
Every person in the register has the right to inspect their stored data and request the correction of any incorrect or incomplete information.
If a person wishes to inspect their stored data, request a correction, or request the deletion of their personal data, the request must be sent in writing to the data controller. The data controller may ask the requester to prove their identity if necessary. The data controller responds to the customer within the time frame set by the EU data protection regulation (generally within a month).
Visitor information and statistics of the website are stored through the Google Analytics web analytics service on Google’s servers, which may also be located outside the EEA (in Privacy Shield countries).
Cookies are small text files stored on a user’s device when they visit a website. With each visit, these cookies are sent back to the website that recognizes the cookie. Cookies can be used to identify the user’s device, store user preferences on the site, and maintain login information. They can also be used for visitor tracking to improve user experience and target advertisements.
This website uses the Google Analytics web analytics service, which uses cookies for visitor tracking. Google Analytics cookies can collect information such as the user’s device, location, visited pages (on this site), opened links, visit duration, and source of arrival.
This website may contain embedded content from other sources. Loading or opening embedded content is comparable to the user visiting the third-party website themselves.
No collected data can be targeted to individuals as IP addresses and other identifiers have been removed from the reports. Google Analytics reports provide indicative numbers of visitor counts, information about their devices, and behavior on this website.