Privacy policy

Your privacy is very important to us. This Privacy Policy explains what data we collect, how we use it and what your rights are in relation to your data.

1. Data Controller

The controller for the processing of personal data is Napu Puhkemaja OÜ.

2. What data do we collect?

We collect the following information about you:

  • Name: required to manage your reservations and to ensure personalised communication.
  • Email address: we use this to reply to your messages, send booking confirmations and newsletters.
  • Phone number: We need this to confirm your reservations, communicate quickly if necessary, or to report changes.

We use an AI-based chatbot service
Our website napupuhkemaja.ee uses an AI-based chatbot service to help visitors find information about accommodation, offers and services. The chatbot analyses the text you enter and generates responses to provide a fast and convenient service.

Data collected and purpose
The chatbot may temporarily process the text you provide (e.g. queries, questions, feedback).

The AI service does not collect personal data without your consent. If you provide contact information (name, email, phone), it will only be used to respond to your request.

Data retention and security
AI-robot does not automatically store your personal data for longer than the period specified by the service provider.

All data will be processed securely, in accordance with the requirements of the European Union’s General Data Protection Regulation (GDPR) and AI law.

Your rights
You have the right to request access to, correction or deletion of your data at any time. AI-robot will not use the data directly for marketing purposes or share it with third parties without your consent.

2. How do we use your data?

Your data will be used for the following purposes:

  • Managing bookings: confirming and communicating with your chosen therapy appointments and registering for events.
  • Customer communication: Responding to your queries and questions.
  • Marketing and events information: notifications about upcoming events and offers will be sent to your email address. You will be informed of upcoming news and promotions, including updates on upcoming events and offers.

3. Sharing with third parties

We will not share your information with third parties unless required by law or with your explicit consent.

4. Cookies and analytics

Our website does not use cookies or other tracking technologies. We also do not perform any web analytics that would require us to collect any of your data.

5. Data retention

  • Your contact information will be kept for as long as necessary to provide our services or until you request that it be deleted.
  • If you are on the list of newsletter recipients, we will keep your email address until you decide to unsubscribe.

6. Your rights

You have the following rights in relation to your data:

  • The right to ask us what information we hold about you.
  • The right to request correction of data.
  • The right to request the deletion of your data, unless we have a legal obligation to keep it.
  • The right to lodge a complaint if you feel your data is being processed unfairly, you have the right to contact your national data protection supervisory authority.

7. Data security

We use reasonable technical and organisational measures to protect your data from unauthorised access, alteration, disclosure or destruction.

8. Privacy policy updates

We may update this policy from time to time to reflect changes in our operations or legal requirements. We encourage you to visit this page regularly to be aware of any changes.

9. Questions and contact

If you have any questions about your data or want to exercise your rights, please contact us at booking@napupuhkemaja.ee.