Privacy policy

1. Data controller

Limingan Pizza Kebab / Emilia Suoranta Oy · 044 055 6686
Business ID: 3202614-1 · Address: Liminganraitti 12, 91900 Liminka · Email: info@liminganpizzakebab.fi

2. What data we process

For an online payment we store only the transaction data without an identifiable person: the payment reference, amount, number of people, the generated sauna code and timestamps. We do not store your name, phone number or other direct identifiers. If you voluntarily provide an email address for a receipt, it is processed as described in section 11.

3. Data stored on your device

The sauna code you buy is stored only in your own browser (on your device) so you can view it again. It is not sent back to the server tied to your person, and it is removed automatically once the code expires. You can delete the data yourself with the "Clear" button.

4. Payment intermediary

Payments are handled by Vipps MobilePay, which processes the payer's data as its own controller. See their privacy statement: vippsmobilepay.com.

5. Legal basis and purpose of processing

We process data to fulfil a contract (delivering the sauna access/code you bought) and to meet the statutory bookkeeping obligation.

6. Retention period

Payment data related to bookkeeping (anonymous) is retained for the period required by accounting law (in Finland generally 6 years). Codes stored on your device are removed once the code expires.

7. Recipients of data

The payment intermediary (Vipps MobilePay) and the technical maintenance/hosting of the service (EL-Tekniikka Oy). Data is not sold or disclosed for marketing.

8. Your rights as a data subject

You have the right to access, rectify and erase your data and to restrict processing. Because we do not store identifiers, we may not be able to link an individual payment to you without additional information. Requests: info@liminganpizzakebab.fi. You may lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

9. Local storage (cookies)

The app uses the browser's local storage (localStorage) only for purposes strictly necessary for the service to work. We do not use tracking or marketing cookies.

10. Staff accounts

The admin panel user accounts (name, login details) are personal data of the staff. Legal basis: contract / legitimate interest in maintaining the service.

11. Receipt email (optional)

You can optionally receive the sauna code and receipt by email. The address is obtained either (a) during the MobilePay payment, if you consent to it in the MobilePay app, or (b) by entering it yourself after payment. The address is used only to send this one message — we do not store it in our system or use it for marketing or any other purpose. The message is sent via an email server that may retain the sent message according to its usual practice. See also section 4 (payment intermediary).

12. Gift cards

When you buy or redeem a gift card, we store the gift card code, its balance and its use for managing the card. We do not store your name, email or other direct identifiers.

13. Customer identifier and cost accounting

When you pay with MobilePay and share your profile, we store the pseudonymous profile identifier provided by MobilePay (profile.sub). The identifier does NOT directly identify you — it contains no name, email or phone number. We use it to accurately calculate our monthly payment-service usage cost (unique users per month). The basis for processing is legitimate interest (cost tracking and service maintenance). You can request erasure of your data as described in section 8.