PRIVACY & DATA PROTECTION POLICY

Tammer Apartments Oy / Tammer Huoneistot

This Privacy & Data Protection Policy describes how Tammer Apartments Oy / Tammer Huoneistot (hereinafter referred to as the “Company”, “Controller”, “we”) processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish legislation. ⸻

1. Data Controller Tammer Apartments Oy / Tammer Huoneistot Business ID: 3334697-2 Email: info@tammerhuoneistot.fi Location: Tampere, Finland ⸻

2. Data Subjects This register applies to: • guests booking and using accommodation services • corporate and contract customers • users of the website and online check-in services ⸻

3. Personal Data Collected We collect and process only personal data necessary for providing accommodation services, which may include: • First and last name • Email address • Phone number • Nationality • Date of birth • Identification details (passport or ID number, where legally required) • Booking details (arrival and departure dates, apartment, number of guests) • Payment and invoicing information (payments are processed by third-party providers) • Communication and customer service records related to the booking The Company does not store full credit or debit card details. ⸻

4. Purpose of Data Processing Personal data is processed for the following purposes: • Managing reservations and providing accommodation services • Guest identification and compliance with legal obligations • Communication before, during, and after the stay • Invoicing and payment processing • Customer service, feedback, and complaint handling • Security and prevention of misuse or fraud • Compliance with statutory obligations (e.g. accounting and authorities) ⸻

5. Legal Basis for Processing Personal data is processed based on one or more of the following legal grounds: • Performance of a contract (accommodation agreement) • Compliance with a legal obligation • Legitimate interest of the Controller (customer relationship management, communication, service development) • Consent of the data subject, where specifically requested ⸻

6. Data Retention Personal data is stored only for as long as necessary: • Booking and customer data: as required by accounting and other applicable laws • Communication and customer service data: for the duration necessary to manage the customer relationship • Identification data: only where required by law and only for the legally mandated period Data is securely deleted or anonymized when no longer required. ⸻

7. Data Disclosure and Transfers Personal data may be disclosed only when necessary and only to trusted parties, such as: • Booking and payment platforms (e.g. Airbnb, Booking.com, payment service providers) • Accounting and IT service providers • Authorities, where required by law The Company does not sell, rent, or disclose personal data for marketing purposes. Data is primarily processed within the EU/EEA. If data is transferred outside the EU/EEA, appropriate safeguards are applied in accordance with GDPR. ⸻

8. Data Security Personal data is protected through appropriate technical and organizational measures, including: • Secure systems and access controls • Restricted access to personal data • Encrypted connections where applicable • Confidentiality obligations for staff and partners ⸻

9. Rights of the Data Subject Data subjects have the right to: • Access their personal data • Request correction of inaccurate or incomplete data • Request deletion of personal data where permitted by law • Restrict or object to data processing • Request data portability • Withdraw consent at any time, where processing is based on consent Requests must be submitted in writing via email to the Controller. ⸻

10. Cookies and Website Use The Company’s website may use cookies to ensure functionality, analytics, and improved user experience. Cookie settings can be managed through the user’s browser. ⸻

11. Changes to This Policy The Company reserves the right to update this Privacy & Data Protection Policy. The most current version will always be available on the Company’s website. ⸻

Tammer Apartments Oy / Tammer Huoneistot Business ID: 3334697-2 Contact: info@tammerhuoneistot.fi