Privacy policy

Last updated: 08 May 2026

1. Data controller

HoivaPalvelu Anahata Oy
Business ID (Y-tunnus): 3215237-5
Isonkiventie 14, 67300 Kokkola, Finland
Contact: Sari Jylhä
Phone: +358 400 862 310
Email: sarijylha15@gmail.com

2. Data processor (technical site implementation)

The website is technically implemented and maintained by:
Rafla Enterprises Oy
Business ID (Y-tunnus): 3176629-5

3. Purpose and legal basis

Personal data is processed to provide massage services: appointment management, customer service, billing and statutory obligations. The legal basis is contract (customer relationship), legal obligation (accounting) and the data subject's consent for specific purposes.

4. Categories of data collected

Contact details: name, phone number, email
Booking details: treatments booked, times
Treatment-related background information voluntarily provided by the client
Payment and invoicing data

5. Data collected by this website

The website is static and does not collect personal data, cookies or analytics by itself. No tracking cookies or third-party analytics services are used.

6. Systems and third parties

Slotti (slotti.fi) – online booking system. When you book via slotti.fi your data is handled under their privacy policy.
Email (Gmail) – email contact via Google's service.
WhatsApp (Meta Platforms Ireland Ltd.) – instant messaging.
Web hosting (Cloudflare) - technical hosting and content delivery network (CDN).
Google Maps - an embedded map helps clients find the studio. When you interact with the map Google may collect technical data such as IP address and browser details.

7. Retention

Customer data is retained only as long as necessary to provide the service or as required by law (e.g. accounting law: 6 years).

8. Disclosure and transfers

Data is not disclosed to third parties for marketing purposes. Data may be disclosed to authorities when required by law. Data is not transferred outside the EU/EEA without the protection level required by GDPR.

9. Your rights

Right to access your data
Right to rectification or erasure
Right to restrict processing
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi)

Requests can be sent to sarijylha15@gmail.com.

10. Security

Data is stored in secured systems. Access is limited to those who need it for their work.

11. Changes to this policy

This policy may be updated when legislation or the service changes. The most recent update date appears at the top.