Privacy Policy

Updated: 21.7.2026

1 · Data controller

Le Grazie Catering Oy (Restaurant OOBU) · Business ID 2966624-4
Läntinen Rantakatu 9, 20100 Turku
Phone: 020 128 0900
info@oobu.fi

2 · What personal data we process and why

Table reservations. When you book, we collect your name, phone number, email address, the time of the reservation and the size of your party, along with any details you provide yourself (e.g. diets and allergies). Reservations are processed in TableOnline Finland Oy’s booking system, and the data is stored on TableOnline’s servers. Legal basis: performance of a contract. Special diet information is processed with your consent and only to prepare your meal.

Event and group inquiries. The name, contact details, event date, number of guests and message submitted via the form are processed to prepare a proposal and arrange the event. The data is stored within the EU (Supabase, Frankfurt) and communication is handled by email. Legal basis: pre-contractual measures taken at your request.

Gift cards. Gift cards are sold through TableOnline’s service, where TableOnline processes the payment details. The restaurant does not store payment card data.

Website analytics and marketing. We use Google Analytics visitor tracking and the Meta (Facebook) pixel. These cookies are set only with your consent — see the separate cookie policy. Legal basis: consent.

3 · Recipients of the data

We use carefully chosen service providers who process data on our behalf under contract:

TableOnline Finland Oy — table reservation and gift card system; reservation data on TableOnline’s servers
Supabase Inc. — database for inquiries and member data, servers in the EU (Frankfurt)
Resend — sending of system emails
Google (Google Analytics, Google Tag Manager) — visitor analytics
Meta Platforms (Facebook pixel) — marketing measurement and targeting
Vercel Inc. — technical platform of the website

We do not sell personal data or disclose it to third parties for marketing purposes.

4 · Transfers outside the EU

Reservation, inquiry and member data is stored primarily within the EU. The use of Google, Meta, Resend and Vercel services may transfer data to the United States. Transfers are based on the EU–U.S. Data Privacy Framework and/or the European Commission’s standard contractual clauses.

5 · Retention periods

Table reservation data: in accordance with TableOnline’s privacy policy · Event inquiries and proposals: 24 months from the inquiry; receipts required by the Accounting Act 6 years · Salon member data: for the duration of membership, and on termination the data is deleted or anonymised within 12 months · Analytics and marketing cookies: cookie-specific periods, see the cookie policy.

6 · Your rights

You have the right to access, rectify and erase your data, to restrict and object to processing, and to data portability. You may withdraw consent at any time. Requests: info@oobu.fi — we respond within one month. If you consider the processing unlawful, you have the right to lodge a complaint with the supervisory authority: the Office of the Data Protection Ombudsman (tietosuoja.fi).

7 · Cookies

Essential cookies are always on; analytics (Google Analytics) and marketing (Meta pixel) load only with your consent. Full description: Cookie policy.