Privacy Policy

Updated: 27 September 2026

This privacy policy applies to the website https://www.cafevictor.fi/ and its related services (contact form, table reservations).

The content of the website is the property of Nanna's Co Oy and is protected under copyright law.

Data controller

Nanna's Co Oy Business ID: 3247297-7 Email: info@cafevictor.fi

What information we collect, what we use it for, and on what legal basis

We use cookies on our website. A cookie may be valid for a single session or for a longer period. A cookie is a small text file that is stored on a user's device when they visit the service using a browser.

The Wix online service uses cookies and third-party cookies to improve and personalize the user experience, to gather information about visitor numbers and the most popular content, and to identify frequent visitors to the site.

Legal basis: consent (optional cookies) and legitimate interest (cookies necessary for the site to function).

You can prevent cookies from being stored by changing your browser's security settings. Please note, however, that not all features of online services may work without cookies.

Contact form

We store the information a user has entered through the contact form on the site. Form submissions also retain metadata about the submission event, such as its timestamp, the sender's IP address, and the browser used.

This information is sent to us by email, and only a few selected people have access to it. A backup of the data is also kept in our server database.

Legal basis: legitimate interest (responding to contact requests).

Table reservations (Tableonline)

Afternoon Tea and table reservations are made through an external service provider's booking system, Tableonline. When you make a reservation, the information you provide (e.g. name, email, phone number) is processed under Tableonline's own privacy practices; we do not store this information in our own system beyond a possible email confirmation.

Legal basis: contract (fulfilling the reservation).

Website analytics

We use Google Analytics, for example, to track the number of website visitors through cookies. Cookies may also be used on the site for remarketing purposes and to build remarketing lists. Learn more in Google Analytics' own privacy policy.

Legal basis: consent.

How long do we retain data?

We retain personal data only for as long as necessary, but for no longer than ten years (for example, due to statutory bookkeeping obligations).

Data security

We limit access to personal data to those people whose job duties require it. Data is stored in the secure systems of Wix and other service providers we use, and backups are kept in the server database.

Transfer of data outside the EU

As a rule, personal data is not disclosed to outside parties.

As an exception, Nanna's Co Oy uses an external web and marketing service provider, Wix.com Inc., to which personal data is disclosed to the extent necessary to deliver the services. Wix Inc. may process data outside the EU/EEA. Wix Inc. ensures in its own privacy policy that appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCC), are in place in such cases.

Personal data may also be processed in the systems of the external providers Meta Platforms, Inc. (Facebook) and Google LLC / Alphabet Inc., which may be located outside the EU/EEA. These providers must ensure in their own privacy policies that processing takes place in accordance with applicable law, using appropriate safeguards such as SCCs.

Data may also be disclosed as required by law, for example to authorities.

What rights do you have regarding your data?

You have the right to:

Access the data we hold about you
Rectify inaccurate or incomplete data
Request deletion of your personal data (this does not apply to data we must retain for administrative, legal, or security reasons)
Restrict the processing of your data in certain situations
Object to processing based on legitimate interest
Withdraw your consent at any time (e.g. cookies), without affecting the lawfulness of processing carried out before the withdrawal
Lodge a complaint with a supervisory authority if you believe your data is being processed in violation of data protection law. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (tietosuoja.fi).

You can exercise these rights by contacting us using the details below.

Contact details

Café Victor / Nanna's Co Oy info@cafevictor.fi