Privacy policy
Last updated: 10.8.2026
This privacy policy describes how Floating Harmony Oy (Olosauna.fi) processes personal data on its website and in connection with its sauna services.
1. Data controller
Floating Harmony Oy
Business ID: 3511481-7
Address: Vaakunakyläntie 9, Oulu
Email: info@olosauna.fi
Floating Harmony Oy is the controller of the personal data.
2. What data we collect
2.1 Bookings and purchases
In connection with a booking or purchase, we process name, email address, phone number, order and payment details, booking time, purchased products and tickets, sauna selection (women’s or men’s sauna), children’s tickets and quantities, and any other order-related information provided by the customer. The online store uses guest checkout. We do not collect special categories of personal data, such as health data.
2.2 Gift cards
In connection with gift cards, we process the sender’s and recipient’s details, the relevant timing information, and any message attached to the gift card.
2.3 Newsletter
When someone joins the newsletter, we process the email address and information related to consent. The newsletter checkbox is unchecked by default, and signup uses single opt-in. The newsletter is used only for newsletter messages. The newsletter service is provided by Klaviyo.
2.4 Customer reviews
Customer reviews are collected and published through Trustmary. In connection with a review, we may process a name, the review content, an email address used for a review invitation, and consent to publish the review. Published reviews may be displayed on the website.
2.5 Technical data and cookies
Use of the website may generate technical data such as IP address, browser and device information, cookie-related data, and session and cart data needed for WooCommerce to function.
2.6 CCTV
There is CCTV in the lounge area of the premises for security and property protection. There is no CCTV in the other areas.
3. Purposes and legal bases for processing
Processing related to bookings, orders, payments, gift cards, and service-related customer communication is based on contract. Processing related to accounting and other legal obligations is based on legal obligation. The newsletter and customer reviews are based on consent. Website security, prevention of misuse, CCTV in the lounge, and basic WooCommerce reporting are based on legitimate interest or performance of a contract.
Marketing consent can be withdrawn at any time, for example through the unsubscribe link in the newsletter.
4. Where we obtain data
Personal data is obtained from the customer in connection with an online store order, gift card, newsletter form, or review; automatically from technical use of the website; from payment providers in relation to the status of a payment; and from walk-in purchases made on site that are entered into WooCommerce.
5. Who we share data with
We do not sell personal data. Data is handled only by parties that need it to provide the service. The hosting provider for the website and WooCommerce is Planeetta Internet Oy / Hostingpalvelu.fi. Online payments are processed through Paytrail, and benefit payments through ePassi. Newsletter sending is handled by Klaviyo, and customer reviews by Trustmary. The booking list is handled by staff in order to provide the service.
We do not process full payment card details ourselves; payments are handled in the payment provider’s service. Data may also be disclosed to authorities when required by law.
6. Transfers outside the EU/EEA
Our servers are located in Finland and Europe. Klaviyo is an international service, so newsletter-related data may also be processed outside the EU/EEA. In that case, transfers are made using GDPR-compliant safeguards, such as the European Commission’s Standard Contractual Clauses. Trustmary is a Finnish service. If its sub-processors process data outside the EU/EEA, those transfers are made with appropriate safeguards.
7. Cookies
Cookies and similar technologies are used mainly to make the website and online store work, for example for session and cart functionality. Because we do not use separate analytics or advertising tracking tools, cookie use is mainly necessary for providing the service. Cookies can be managed through browser settings.
8. Retention periods
Order, booking, and gift card data is retained for at least six years. Newsletter data is retained until the newsletter subscription is cancelled or deletion is requested. Review data is retained for as long as the review remains in the service and its publication is needed, or until deletion is requested to the extent possible. Technical logs are retained for a shorter period according to security and maintenance needs. CCTV recordings are retained for 30 days, unless a recording is needed longer for an investigation, damage, or suspected crime.
9. Security
Personal data is protected with appropriate technical and organisational measures. Access to data is limited to people who need it for their work. Connections are protected with HTTPS, and the website is hosted on a European hosting service.
10. Customer rights
A customer has the right to access their data, request rectification, erasure, or restriction of processing, object to processing where it is based on legitimate interest, and receive data in a portable format where data portability applies. Consent can be withdrawn at any time.
These rights can be exercised by contacting info@olosauna.fi.
A customer also has the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman, https://tietosuoja.fi.
11. Children
Children’s tickets can be purchased in the online store as part of an order made by an adult. We do not knowingly collect children’s personal data for marketing. The newsletter is intended for adults.
12. CCTV
There is CCTV in the lounge for security, property protection, and investigating possible disturbances or damage. Recordings are handled only by authorised staff. Recordings are retained for 30 days. CCTV is indicated with signs on the premises.
13. Changes to this policy
This privacy policy may be updated if services, tools, or legislation change. The current version is available on this page, and the latest update date is shown at the top.
14. Contact details
Floating Harmony Oy / Olosauna.fi
info@olosauna.fi
Vaakunakyläntie 9, Oulu