1. Controller

Levant Business ID: 2639255-9 Address: Aleksis Kiven katu 35 A 11, 00520 Helsinki Email: info@levant.fi Phone: 044 994 4423

Levant is the controller responsible for the processing of personal data described in this Privacy Policy.

2. Scope of this policy

This Privacy Policy explains how Levant processes personal data when you use the website, contact Levant through the contact form, email, or phone, interact with embedded third-party services, or consent to analytics or other optional website technologies.

Personal data means any information relating to an identified or identifiable person. This can include not only contact details such as a name, phone number, or email address, but also online identifiers and certain technical data.

3. What personal data we process

Levant may process the following categories of personal data, depending on how you use the website:

- name - email address - phone number - message contents and event details submitted through the contact form - technical information such as IP address, browser type, device information, pages visited, and time of visit - cookie and consent preference data - data generated when third-party widgets are loaded and used

Some third-party services used on the website may also process technical and device-related data when their content is loaded.

4. Why we process personal data and the legal basis

Responding to enquiries and event requests

Levant processes information submitted through the contact form, email, or phone to respond to enquiries, discuss bookings or events, provide customer service, and take steps before entering into a contract.

The legal basis is GDPR Article 6(1)(b), where processing is necessary in order to take steps at your request before entering into a contract, and where applicable GDPR Article 6(1)(f), Levant’s legitimate interest in handling customer communications and service enquiries.

Operating and securing the website

Levant processes limited technical data to maintain the website, ensure its security, fix technical issues, and prevent misuse.

The legal basis is GDPR Article 6(1)(f), legitimate interest in keeping the website secure and functional.

Analytics and optional third-party content

If you consent to analytics and optional third-party content, Levant and the relevant service providers may process technical and usage data to measure website traffic and load external content such as maps, reviews, business profile information, and booking tools.

The legal basis is GDPR Article 6(1)(a), consent.

5. Contact form

Levant’s website includes a contact form that sends the message directly to Levant’s email recipients.

When you use the contact form, Levant may process your name, email address, phone number, and the contents of your message. This information is used only to respond to your enquiry and handle related customer communication.

Please do not include sensitive personal data in the message field unless it is genuinely necessary.

6. Cookies and similar technologies

The website uses cookies and similar technologies. Some are strictly necessary for the technical operation of the website and the saving of cookie preferences. Others are used only if you consent, such as analytics cookies and optional third-party content.

7. Third-party services used on the website

Google My Maps

The website may display Google My Maps content to show Levant’s locations. When this content is loaded, Google may process technical information such as IP address and may use cookies or similar technologies.

Wally review widget

The website may display Google reviews through Wally’s embedded widget. When this widget is loaded, the provider may process technical and browser-related information and may use cookies or similar technologies.

SociableKIT Google Business Profile widget

The website may display business profile information, such as opening hours and contact details, through the SociableKIT widget. When this content is loaded, the provider may process technical and device-related information and may use cookies or similar technologies.

EasyTable booking widget

The website may include the EasyTable booking widget to allow users to make table reservations. When loaded and used, this widget may process booking-related details and technical information necessary to provide the booking service.

Google Analytics

The website uses Google Analytics to measure website traffic and user interactions if you consent to analytics.

8. Recipients of personal data

Levant may disclose personal data to Levant personnel responsible for handling enquiries and customer communication, website hosting and technical service providers, analytics and widget providers where the relevant service has been activated, and public authorities where disclosure is required by law.

Levant does not sell personal data to third parties.

9. Transfers outside the EEA

Some third-party service providers used on the website may process personal data outside the European Economic Area or make it accessible from outside the EEA. Where such transfers occur, Levant relies on the provider’s applicable transfer mechanism under GDPR Chapter V, such as an adequacy decision or other appropriate safeguards where applicable.

10. Retention periods

Levant keeps personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law or is necessary for the establishment, exercise, or defence of legal claims.

As a general rule:

- Cookie consent records are kept for as long as necessary to remember and demonstrate consent choices. - Analytics data is kept in accordance with the retention settings configured in Google Analytics.

11. Your rights

Under the GDPR, you have the right to access your personal data, request correction of inaccurate data, request deletion in certain situations, request restriction of processing, object to processing based on legitimate interests, withdraw consent at any time where processing is based on consent, and request data portability where applicable.

Not all rights apply identically in every situation.

12. How to exercise your rights

You can exercise your rights by contacting Levant at:

info@levant.fi

You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland if you believe your personal data has been processed unlawfully.

13. Changes to this Privacy Policy

Levant may update this Privacy Policy from time to time. The latest version will always be available on the website.