Privacy notice

Controller

TP Restaurants Oy (business ID 3442645-6), Hietalahdenranta 6, 00120 Helsinki, Finland.

Questions and requests about privacy: info@maljahelsinki.fi or +358 44 988 7170.

What we process and why

• Event enquiry: your name, email address, phone number (if you give one), company (optional) and the details of the event: its type, date, number of guests, wishes, budget and anything else you write. We use them to answer you, to prepare a quote and to organise the event. The legal basis is taking steps at your request before a contract and performing that contract.
• Table request: your name, email address, phone number, the date, arrival time, number of people and anything else you write. We use them to confirm and look after the booking, on the same basis.
• Visitor statistics: we collect usage statistics with Vercel Web Analytics. It uses no cookies and does not follow a visitor from one day or one site to the next. It records page views and, for example, that a form was sent, but none of the personal details typed into a form. The legal basis is our legitimate interest in improving the site.
• Preventing misuse: for a short time the server counts how many forms have been sent from the same network address (IP). The counter exists only in the server's memory and the address is not stored.

We get the data from you, when you fill in a form. We make no automated decisions and do no profiling.

How form data travels

What you enter in a form is emailed to Malja's staff, and you receive a confirmation at the address you gave.

The server log records only the reference number of a request and whether it was delivered. Your name, contact details and message are never written to the log.

Service providers and transfers

The site runs on Vercel Inc. The server that handles the forms is in the EU (Stockholm), and pages are delivered through Vercel's worldwide network. To run the service Vercel keeps technical logs, such as the IP address and the time of a request, for a short period.

Emails are sent through Resend, Inc. (United States).

Vercel and Resend are US companies, so data may be transferred outside the EU and the EEA. Transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.

If you send a message on WhatsApp, it travels through WhatsApp (Meta) under WhatsApp's own terms. The Google map on the contact page loads only when you press “Show map”; Google then receives your browser's technical details, such as the IP address.

Links to Kide.app, Cluby, Venuu, Instagram and Facebook take you to those services, which are responsible for your data on their own pages. The picture of an individual event may load from the organiser's own server, which then sees your IP address.

We never sell your data or pass it on for anyone's marketing.

Retention

We keep enquiries and table requests for as long as it takes to deal with them and delete them when they are no longer needed.

Invoicing details of events that took place are kept for as long as Finnish accounting law requires.

Cookies and data stored on your device

The site uses no advertising or tracking cookies, so there is no cookie banner. Only the following is stored on your device:

• Language choice: if you switch the language, the choice is saved in the cookie malja_lang for up to 365 days, so that pages open in your language from then on.
• Form drafts: an unfinished enquiry or table request is saved in your browser so that you can pick up where you left off. The event details of an enquiry (type, date, number of guests and wishes) are kept for up to 7 days after you last worked on the form: an older draft is not used and is removed the next time you open the form. Your contact details and the draft of a table request are kept only until you close the tab. A draft does not leave your device until you send the form, and when you come back to a form its “Start over” button clears it.

Your rights

You have the right to know what data we hold about you and to get a copy of it. You can ask us to correct or erase it, to restrict its use or to transfer it, and you can object to processing based on legitimate interest. You can withdraw a consent you have given at any time.

Send your request to info@maljahelsinki.fi. If you believe your data is being handled unlawfully, you can complain to the Office of the Data Protection Ombudsman (tietosuoja.fi).