Privacy Policy

1. Controller and Contact Information

Data Controller:
Royal Nepal (or the legal business name behind royalnepal.fi)
Address: Sturenkatu 32-34, 00550 Helsinki Business ID: [Insert business ID]
Email: info@royalnepal.fi
Phone: 97535006

If you have any questions about how we process personal data, or wish to exercise your data subject rights (see section 8), please contact us using the information above.

2. What Personal Data We Collect

We may collect the following types of personal data through our website:

1. Information you provide voluntarily, for example:

   • Name

   • Email address

   • Phone number

   • Reservation details (date, time, number of people)

   • Any special requests (e.g., dietary restrictions, allergies)

   • Feedback or messages if you contact us through a form

2. Automatically collected data, e.g.:

   • IP address

   • Browser type and version

   • Operating system

   • Referring website

   • Pages visited on our website

   • Time and date of visit

   • Device information

   • Cookies and similar technologies

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a contract: When you make a reservation or contact us, we process your data to fulfill our contractual obligations (e.g., managing the booking).

• Legitimate interest: We use analytics data (e.g., automatically collected information) to understand and improve our website, services, and customer experience.

• Consent: For cookies beyond those strictly necessary for website functionality (see section 5), we seek your consent.

4. Purposes of Data Processing

We use the collected data to:

• Handle and manage reservations

• Communicate with you (for example, to confirm reservations or respond to inquiries)

• Improve our website (by analyzing usage patterns)

• Personalize and enhance your user experience (if applicable)

• Send you marketing communications only if you have given consent (e.g., newsletters or promotional offers)

• Comply with legal obligations (e.g., accounting or health-safety regulations)

5. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies. Some cookies are strictly necessary for the website to function; others help us analyze how our website is used, or support marketing functions.

• We obtain your consent for non-essential cookies, in accordance with the guidance from the Finnish Cybersecurity Centre and GDPR rules.

• You can manage or disable cookies in your browser settings.

• Disabling some cookies may degrade your experience on our site (some functionality may not work correctly).

6. Who We Share Your Data With

We do not sell your personal data. However, we may share it with:

• Service providers / processors, who help us run our business (e.g., website hosting, analytics, email service)

• Authorities or regulators, where required by law (for example, for compliance with health regulations or tax law)

• Marketing partners, only if you have consented to receive marketing communications (and they are providing services under a data-processing agreement)

When we share data, we ensure that appropriate contracts or data-processing agreements are in place, so your data is handled securely and in compliance with GDPR.

7. International Transfers

If any of your personal data is transferred outside the EU/EEA (which we do not normally do, unless via certain third-party service providers), we will ensure that appropriate safeguards are in place (e.g., standard contractual clauses, or other mechanisms permitted under GDPR).

8. Data Retention

We will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including:

• For reservation data: until the reservation is concluded and any follow-up is complete (e.g., feedback)

• For analytics data: for a limited period consistent with our internal policies

• For marketing data: until you withdraw your consent or opt out

After the data is no longer needed, we either delete it or anonymize it so that you can no longer be identified, unless a longer retention is required by law.

9. Your Rights

Under GDPR (and Finnish data protection law), you have the following rights with respect to your personal data:

• Right of access: You can request a copy of your personal data that we hold.

• Right to rectification: You can ask us to correct inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”): You can ask us to delete your data, under certain conditions.

• Right to restrict processing: You can ask us to limit how we use your data in certain situations.

• Right to data portability: You can ask for your data in a structured, commonly used format, or have it transferred to another controller.

• Right to object: You can object to certain types of processing, including for direct marketing.

• Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time (this does not affect processing done before the withdrawal).

To exercise these rights, please contact us at info@royalnepal.fi We may ask for proof of identity to ensure the request is legitimate.

If you believe that we are not processing your data in accordance with applicable law, you also have the right to file a complaint with the Finnish Data Protection Ombudsman.

10. Security

We take reasonable technical and organizational measures to protect your personal data, including:

• Using secure connections (HTTPS) for our website

• Limiting access to personal data to only those employees or service providers who need it to perform their tasks

• Implementing internal processes to handle data securely and to respond to data-subject requests

Despite our security efforts, no system is completely immune to breach. However, we monitor our systems and follow data-protection best practices.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time (e.g., when our data practices change, or due to legal/regulatory updates). When we do:

• We will publish the updated version on this page.

• We will update the “Last updated” date at the top.

• For significant changes, we may notify you via email (if you have provided your email address), or via a prominent notice on the website.

Please review this policy periodically to stay informed about how we protect your personal data.

12. Contact Information

If you have any questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact:

Royal Nepal
Email: info@royalnepal.fi
Phone: 97535006
Address: Sturenkatu 32-34, 00550 Helsinki