← Back to home

Privacy

Privacy Policy

Knehtilä organic farm – website. Prepared in accordance with the EU General Data Protection Regulation (2016/679, "GDPR").

Updated: 13 July 2026.

1. Data Controller

Knehtilän Luomutuote Oy ("we", "the company")

Business ID: 2919548-9

Address: Haapasaarentie 75, 05840 Hyvinkää, Finland

2. Contact Person for Register Matters

Peetro Sakki

Phone: +358 400 512 015

Email: peetro@knehtila.fi

3. Name of the Register

Contact and quote request register for the Knehtilä organic farm website.

4. Purpose and Legal Basis for Processing Personal Data

Personal data is processed so that we can receive and handle contacts sent through the website's quote request form (e.g. enquiries about celebration, event and meeting venue bookings), prepare quotes and potential contracts, and stay in touch with the customer regarding event arrangements.

The legal basis for processing is:

  • preparation and performance of a contract (Article 6(1)(b) of the GDPR) when the contact concerns a quote request or booking; and
  • the controller's legitimate interest in responding to contacts received through the website (Article 6(1)(f) of the GDPR) for other general enquiries.

5. Content of the Register

The following information provided through the website's quote request form is stored in the register:

  • name
  • company (if provided)
  • phone number
  • email address
  • type of event (e.g. wedding, birthday, corporate event, meeting, other)
  • preferred date
  • estimated number of guests
  • free-form message written in the form

Other personal data (e.g. payment card details, newsletter subscriptions or online purchases) is not currently collected through the website.

6. Regular Sources of Data

Data is obtained from the data subject themselves when they fill in the website's quote request form.

7. Disclosure and Transfer of Data Outside the EU/EEA

Data is not disclosed to external parties for marketing purposes. Data may be disclosed to cooperation partners involved in Knehtilä's operations (e.g. Knehtilän Luomutila Oy) to the extent necessary for preparing a quote request or organising an event.

The website is built on the Lovable platform. The platform provider may act as a processor of personal data, and data may be processed or stored outside the EU/EEA area. This should be verified with the service provider before the site is published, and if necessary, the statement should include a mention of the transfer mechanism used (e.g. the European Commission's standard contractual clauses).

8. Retention Period for Personal Data

Data related to a quote request is retained for the duration of its processing and for up to 12 months thereafter, unless a contract is formed or accounting legislation requires a longer retention period. If a contract is formed from the quote request, data related to the contract is retained for the period required by the Accounting Act (currently 6 years).

9. Principles of Register Protection

Form data is transferred using an encrypted connection (https). Access to data is limited to persons who need the data to perform their work duties. Electronic data is stored in services that require user authentication.

10. Rights of the Data Subject

Under the GDPR, the data subject has the right to:

  • access their personal data
  • request correction of inaccurate data
  • request erasure of data under the conditions provided by law
  • request restriction of processing
  • object to processing based on legitimate interest
  • transfer data from one system to another (data portability) to the extent that processing is based on contract or consent and occurs automatically
  • lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman, tietosuoja.fi)

Requests concerning the exercise of rights should be addressed to the contact person mentioned in section 2.

11. Cookies

The website does not currently use analytics or marketing cookies (e.g. Google Analytics or Meta Pixel). The website platform may set technically necessary cookies required for the site to function.

If tracking, analytics or marketing cookies are later introduced to the site, this statement must be updated and a cookie consent banner must be added to the site before such cookies are deployed.

12. Changes to the Privacy Policy

This privacy policy may be updated as operations or legislation change. The current version is always available on the website.

Note: This document has been prepared on the basis of the key requirements of the General Data Protection Regulation and does not replace legal advice. We recommend having the final content of the statement reviewed before publication.