privacy policy

We treat your data confidentially and only as far as your enquiry requires. Here you can read which data we process, why, and what rights you have. This is based on the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (1050/2018).

1. Controller

Oppibacka
Oppibackankuja 23
02480 Kirkkonummi, Finland
Email: info@oppibacka.com

For any questions about data protection, you can reach us at this address.

2. Enquiry form

When you write to us using the form, we process the details you enter: name, email address, number of guests, preferred period and, if you provide them, country of origin, preferred house, interests, how you found us and your message.

We use these details only to answer your enquiry and arrange a stay with you. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract). Providing the details is voluntary, but without name, email, number of guests and period we can't reply to you.

The enquiry is forwarded to our email inbox via the form service Web3Forms (Web3Creative, India). The service processes the data on our behalf (Art. 28 GDPR) on Amazon Web Services servers. To protect against spam, it checks the IP address and email address using the services CleanTalk and Akismet. Transfers to countries outside the EU are based on the EU Standard Contractual Clauses. We delete enquiries stored in the service account no later than after 12 months.

3. Visiting the website

When you visit the website, our hosting provider stores technically necessary information in log files, for example IP address, time, page visited and browser type. This serves the secure operation of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Our hosting provider is Cloudflare, Inc. (USA). Cloudflare processes the data on our behalf (Art. 28 GDPR) and is certified under the EU-US Data Privacy Framework, for which the European Commission has confirmed an adequate level of data protection. The logs are deleted according to the provider's retention periods. Details: cloudflare.com/privacypolicy

4. No cookies, no analytics

This website does not set cookies and does not use any analytics, advertising or tracking services. Fonts and images are stored on our own server; no content is loaded from third parties.

If you choose a language in the menu, your browser remembers this choice (local storage, "localStorage") so the website opens in your language on your next visit. This information stays on your device and is not sent to us. You can delete it at any time in your browser settings.

5. How long we keep data

We delete enquiries that do not lead to a stay no later than 12 months after the last contact. If a stay is agreed, we keep the records required for accounting for as long as the Finnish Accounting Act requires (usually 6 years after the end of the financial year).

6. Disclosure

We do not sell data or pass it on for advertising. The only recipients are the service providers mentioned (hosting, form service, email) who work on our behalf. We make sure data is processed within the EU or the EEA wherever possible. Where a provider is based outside it, such as Cloudflare in the USA, the transfer is safeguarded by the EU-US Data Privacy Framework.

7. Your rights

You have the right to access your stored data, to rectification, erasure and restriction of processing, to data portability, and to object to processing based on legitimate interests. Just send us an email.

You can also lodge a complaint with the Finnish data protection authority: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.

8. Automated decisions

There are no automated decisions and no profiling.

Last updated: November 2026