Privacy policy

Controller

The controller is Purnukka Group Oy, Business ID 3600777-3, Finland. Contact: info@purnukka.com.

Data we process

We may process the customer's name, company details, contact details, billing details, property details, domain preferences, technical data related to use of the service, and the content of enquiries.

For end customers — guests — the service may process booking details, contact details, messages, traveller declaration data and technical identifiers of payment transactions, depending on the features in use.

Why we process data

Data is processed to provide the service, for onboarding, customer support, billing, technical relaying of payments, security, prevention of misuse and compliance with statutory obligations.

Enquiry and lead data may also be used to prepare offers and communicate about the service.

Legal basis

Depending on the situation, the basis is legitimate interest, preparing a contract, fulfilling a contract or a statutory obligation.

Customer and end-customer data

Purnukka acts as the controller for its own customer and sales data. When Purnukka processes guest data on behalf of a customer, the customer is generally the controller and Purnukka the data processor.

The detailed division of roles is described where needed in the DPA (data processing agreement).

Stripe, hosting, email, analytics

Providing the service may involve subcontractors and technical service providers, such as Stripe for payment processing, hosting providers for running websites, email services for communication, domain services for domain names and analytics tools for improving the service.

We use service providers only to the extent required for providing the service, security, billing or analytics. We do not sell personal data.

Domain registration

When you register a domain name through us, you provide the registrant's contact details (name, email, phone, address; for organisations a business ID). These details are disclosed for registration to NordName (C-Soft Oy), which acts as a data processor, and onward to the registry of the relevant domain extension, which acts as the controller. Depending on the extension, some details may be published in the registry's public WHOIS service. The data is retained for the duration of the domain registration. NordName's and the registry's privacy practices: nordname.net/terms, nordname.net/tlds.

Retention

We store data only as long as it is needed for providing the service, managing the customer relationship, accounting, handling legal claims or fulfilling statutory obligations.

Booking and payment data may be subject to retention requirements related to accounting, consumer protection or dispute resolution. Accounting material is stored for the period required by Finnish law.

Your rights

Data subjects may have the right to access their data, request rectification or erasure, restrict processing, object to processing and request data portability under applicable law.

If a request concerns guest data, we may refer it to the customer acting as the controller of that data.

Contact

Privacy-related requests and questions can be sent to info@purnukka.com.