Privacy notice

Who is responsible

The controller of your personal data is Kärki-keittiöt Oy (auxiliary business name Lapland Deluxe Catering), business ID 2832915-8, Teollisuustie 40 A 65, 96320 Rovaniemi. table Lapland is its brand.

For anything about your data, write to hello@tablelapland.com.

What we collect

When you fill in the brief we receive: your name, email address and phone number if you give one; where you are staying or the address of the dinner; the date; the number of guests; the occasion and anything you tell us about it; the chef you would like, if any; the evening you chose on our site, if any; and your message.

If you came to us through a partner link, we also record which partner or campaign sent you.

To protect the form from spam we use a short-lived signed form token and count requests per network address and per email address. The counts are stored as one-way hashes, not as the address itself.

Dietary and allergy information

Dietary needs and allergies can reveal information about your health, a special category of data under Article 9 of the GDPR.

You do not have to share them in the brief; you can tell us later, when we talk. If you do share them, we store them only if you tick the separate consent box, and only to prepare your dinner.

They are kept apart from the rest of your request. Only the team preparing your dinner sees them, in our internal note about your request.

You can withdraw your consent at any time by writing to hello@tablelapland.com. We then delete the information; withdrawing does not affect what was done before.

We delete dietary and allergy information 30 days after your evening.

Why we may use it

We use your request to answer it and to prepare and deliver the evening you ask for: steps taken at your request before a contract, and then the contract itself (Article 6(1)(b)).

Dietary and allergy information is used only with your explicit consent (Article 9(2)(a)).

Spam protection and the partner record rest on our legitimate interest in keeping the form usable and paying our partners fairly (Article 6(1)(f)).

How long we keep it

A request that does not become a booking is deleted 12 months after we last heard from you.

For a booking, the information needed for accounting is kept as long as the Finnish Accounting Act requires; the rest is deleted 12 months after the evening.

Spam protection counts are kept for a short time only and then removed.

Who handles it for us

Supabase stores our database in the EU.

Vercel hosts this website.

Resend sends our emails to you.

Cloudflare Turnstile checks that the brief is filled in by a person, only if we have switched this bot protection on. It then processes technical data about your browser.

Each of them works on our instructions under a data processing agreement. We do not sell your data or use it for advertising.

Cookies and storage in your browser

If you arrive through a partner link, we set one cookie, apd_attr, for 30 days. It only records which partner or campaign sent you, so that the right partner is credited if you book.

The same partner record and your unfinished brief answers are kept in your browser’s session storage, so a reload does not lose them. Session storage is cleared when you close the tab, and your answers are removed as soon as the request is sent.

We do not use analytics or advertising cookies. If we add analytics later, we will ask for your consent first.

Your rights

You can ask to see the data we hold about you, to correct it, to delete it, to restrict how we use it, and to receive it in a portable form. You can object to use based on our legitimate interest, and withdraw consent at any time.

Write to hello@tablelapland.com and we will reply within one month.

You can also complain to the Office of the Data Protection Ombudsman in Finland, tietosuoja.fi.

Contact

Kärki-keittiöt Oy (Lapland Deluxe Catering), Teollisuustie 40 A 65, 96320 Rovaniemi, hello@tablelapland.com.