Privacy Notice

Data controller

Espera Oy, Business ID 2820089-9. Messages about privacy and enquiries: info@thecliff.fi.

WHAT INFORMATION IS PROCESSED?

Cloudflare delivers the website and may process technical information, such as your IP address, the requested URL, browser information and the time of the request, to operate and secure the service. Website content, such as the menu and opening hours, is retrieved from Cloudflare’s database. We do not store contact details of visitors to these pages in the website database.

Cloudflare Web Analytics measures page views, visits and technical performance on the public website, including visits from Finland and elsewhere in the EU. It does not use analytics cookies or browser storage. Cloudflare receives the connection IP address as part of normal request handling but says it discards the address at the nearest data center without storing it in its analytics database. We use aggregate figures to assess website use and performance.

When you click an order or table booking link, we store only the action type, day and a random identifier for that single click to avoid double counting a retry. We do not store IP addresses, browser identifiers or personal details in click analytics. Click records older than 90 days are removed when new clicks are recorded. A click does not mean that an order or booking was completed.

The website uses Google Fonts web fonts. The browser fetches them directly from Google’s servers, giving Google technical information about the connection. Google’s Privacy Policy explains how Google processes this information.

GOOGLE REVIEWS AND LINKS.

Google reviews on the home page load automatically when you move near the reviews section. The browser requests the reviews from CLIFF’s website, and the website’s server fetches them from Google Maps Platform. Reviewers’ profile photos are fetched directly from Google’s servers, giving Google technical information about the browser connection. Review content is not stored in CLIFF’s database or cache; the database stores only the monthly number of Google API requests. Google Maps directions and external booking, ordering, social media and Cluby services open only when you select their links. These services have their own privacy policies.

When you use the contact form, we process your name, email address, phone number if provided, selected subject and message to respond to you. Cloudflare Turnstile checks the submission to prevent spam. Resend delivers the message to the Microsoft 365 email service at info@thecliff.fi. You can also email us directly at the same address. The basis for processing ordinary enquiries is legitimate interest; where you request steps towards entering into a contract, it is preparation of a contract.

HOW LONG IS INFORMATION KEPT?

The public website does not set its own analytics or marketing cookies. Access to the administration page requires Cloudflare Access sign-in, which may involve essential session data. Automatically loading Google reviews does not load Google’s review scripts into the browser. Google may process technical information when the browser fetches a reviewer’s profile photo.

Incoming email messages are kept for as long as needed to handle them or as required by law. Cloudflare’s and Google’s retention of technical information is governed by their terms and policies.

YOUR PERSONAL DATA.

You may request access to, correction or deletion of your information, restriction of processing, or object to processing, in accordance with applicable law. Send your request to info@thecliff.fi. You may also lodge a complaint with the Data Protection Ombudsman.