Privacy Policy

Who publishes this site

Aurelinna, Vaakaranta 7, 20100 Turku, Finland, publishes and controls aurelinna.com. Questions about this policy go to [email protected] or to the duty manager on +358 2 415 7390. Post marked for the data controller reaches the same desk.

What this site is not

This site has no booking engine, so no room can be reserved or table held, and no gaming can take place through these pages. It accepts no payments, and no card details are ever entered anywhere on aurelinna.com. It also has no user accounts, log-in, passwords or profiles. If a page ever asks you for a card number under our name, it is not ours.

What is collected

If you only read

Nothing that identifies you. The pages are static files that load no fonts, scripts or images from any other company's servers, so no third party learns that you were here.

Two values stored on your own device

The site writes at most two entries into your browser's local storage, on your device, where they stay:

• tk_age_ok: set to yes when you confirm on the home page that you are 18 or over, so the question is not asked again.
• tk_consent: set to accepted or declined when you answer the cookie bar.

Neither value is sent to us and neither contains anything about you. Clearing your browser data removes both, after which the site asks again. If your browser refuses local storage, as private windows often do, the site still works and asks each time.

Server logs

Our hosting provider records each request in a standard web server log: the IP address, the time, the page asked for, the response code, the referring page and the browser string. These logs exist so the site can be kept running and so abuse can be investigated. They are neither combined with other data nor used for marketing, and they are not sold.

What you type into the contact form

The form on the contact page has no server behind it and does not submit anywhere. Pressing the button only shows a note that nothing was sent, and whatever you typed stays in your browser until you leave the page.

What you send us directly

If you write to [email protected] or telephone, we hold what you tell us: your name, how to reach you, your dates and anything you ask for, such as a diet or a stepless room. This is an ordinary hotel enquiry, handled by people at the front desk.

Analytics and advertising

These pages contain no analytics or advertising tag today. Google Consent Mode v2 defaults are declared in the head of every page, with every category starting as denied, so that a measurement tag added in future is refused until you say otherwise. The cookie bar can grant or refuse those categories. Declining is the default state and costs you nothing.

Lawful bases

• Legitimate interest: keeping the server logs so the site stays up and can be defended.
• Consent: the analytics and advertising categories, if a tag is ever added. Consent can be withdrawn at any moment through Cookie settings in the footer.
• Necessary for a contract, or steps before one: dealing with an enquiry you send us about a room, a table or the sauna.
• Legal obligation: accounting and accommodation records we are required to keep as a Finnish hotel, which arise from your stay, not from this website.

How long things are kept

Server logs: 30 days, then deleted by the host. Email enquiries that do not lead to a stay: 12 months. Correspondence connected with a stay: as long as Finnish accounting law requires, then deleted. The two local storage values: until you clear them yourself.

Who else sees it

Our hosting provider, who holds the server logs as a processor under contract, and our email provider. No one else receives personal data from this site. We do not sell, rent or trade anything about visitors, and no advertising network receives data from it.

Where it is held

The site is served from inside the European Economic Area and email is handled on servers in the same area. We do not transfer personal data outside it.

Your rights

Under the General Data Protection Regulation and the Finnish Data Protection Act you may ask us for a copy of what we hold about you, ask for it to be corrected or deleted, ask us to restrict or stop a particular use, object to processing based on legitimate interest, and withdraw consent. Write to [email protected] and you will have an answer within one month. If you are not satisfied, you may complain to the Finnish Data Protection Ombudsman.

Children

This site is not meant for children, and the home page asks whether you are 18 or over because of the gaming floor on the first floor of the building. We do not knowingly keep information about anyone under 18 and will delete it if we find it.

Changes

When this policy changes, the date at the top of this page changes with it and the previous wording is replaced. If a change matters (a tag added, a new processor) a line will appear on this page saying so for at least three months.