Privacy Policy

This Privacy Policy explains how Metsamarja Holiday House ("we", "us", "our") collects and uses your personal data when you visit metsamarja.ee, contact us, or book a stay. We are the controller responsible for your personal data.

What data we collect

Depending on how you use our website, we may collect the following:

• Booking details — your name, email, phone number, billing address, arrival and departure dates, number of guests, and any notes or requests you provide.
• Extras and experiences — details of any add-ons you request, such as the hot tub, bicycles, SUP boards, boat trips, or the carriage ride.
• Messages — the information you send us through the contact form, by email, or by phone.
• Technical data — your IP address, browser type, and basic usage information collected through cookies.

We do not collect or store payment card details on this website. Bookings are paid by bank transfer, which is processed by your own bank.

How and why we use your data

• To manage your booking and provide the accommodation and extras you request (performance of a contract).
• To answer your questions and communicate with you before and during your stay (legitimate interest and steps taken at your request).
• To meet accounting, tax, and other legal obligations (legal obligation).
• To operate, secure, and improve our website (legitimate interest; consent for non-essential cookies).

Booking system and service providers

We use trusted service providers to run our website and bookings, including our hosting provider, our email provider, and the MotoPress Hotel Booking system used to manage reservations. Map links may open Google Maps or OpenStreetMap. These providers process data only on our behalf or under their own terms, and only as needed to deliver the service. We never sell your personal data.

Cookies

Our website uses cookies that are necessary for it to function and for the booking process. We may also use cookies to understand how the site is used so we can improve it. You can control or delete cookies in your browser settings; blocking some cookies may affect how the site works.

How long we keep your data

We keep booking and payment records for as long as required by Estonian accounting and tax law (generally seven years). Enquiries and messages are kept only as long as needed to help you and for our records, after which they are deleted.

Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to access, correct, or delete your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise these rights, contact us at [email protected].

Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access.

Children

Our services are intended for adults. We do not knowingly collect personal data from children without the consent of a parent or guardian.

Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date it was last updated shown at the top.