Bookora

Privacy policy

Updated 8.11.2026

Data controller

VMH Group Oy, Pirkkala, tuki@bookora.fi. Bookora on rekisterinpitäjä käyttäjätilien (varauspaikkojen käyttäjät ja kirjautuneet asiakkaat) osalta.

For the data of customers making bookings, the venue is the data controller and Bookora processes the data on its behalf as a data processor.

Data processed

Name, email, phone number, company name, booking details (time, item, price, additional information and any registration number), passes and their use, payment transaction identifiers and technical log data. We do not store payment card or online banking credentials: payments are processed by the payment service chosen by the venue (Paytrail Oyj, Stripe or Vipps MobilePay).

Purpose and legal basis

Making, confirming and managing bookings, handling payments, reminders and door codes (contract), service security and preventing misuse (legitimate interest), and obligations under accounting law (legal obligation).

Recipients

Data is disclosed only to the venue whose service the customer has booked and to subcontractors needed to provide the service: the payment service chosen by the venue (Paytrail Oyj, Stripe or Vipps MobilePay) and Hetzner Online GmbH (server capacity in the EU). If the venue uses Stripe, payment data may also be processed outside the EU on transfer grounds compliant with EU data protection law.

Retention

Booking data is kept as long as the customer relationship with the venue lasts and for the period required by accounting law. User accounts are deleted on request. Log data is deleted within 12 months.

Cookies

We only use cookies that are necessary for the service to work: sign-in, language choice and the selected venue in admin.

Your rights

You have the right to access your data, correct it, request its deletion or restriction of processing, and to transfer your data. For matters concerning a venue you can contact the venue directly or us. You can lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).