This is the register and privacy statement of Isabel Videla in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared on 01.07.2026.

1. Data controller
Rovastintie 8, 06100 Porvoo.

2. Contact person responsible for the register
Isabel Videla
info@isabelvidela.fi

3. Name of the register:
Isabel Videla register.

4. Legal basis and purpose of processing personal data
The legal basis for processing personal data under the EU General Data Protection Regulation is the person’s consent (documented, voluntary, specific, informed and unambiguous) or a contract to which the data subject is a party (making a table reservation). The purpose of processing personal data is to contact customers, maintain customer relationships, marketing, and information related to table reservations. The data is not used for automated decision-making or profiling.

5. Data content of the register
The data stored in the register are:

person’s name
Email address

Customer data is stored:
Newsletter service provider
Hostinger.

6. Regular data sources
The information stored in the register is obtained from the customer, for example, messages sent via web forms, by email, by telephone, through social media services, from contracts, customer meetings, and other situations in which the customer provides their information, as well as from various competitions and customer benefits in which the customer participates.

7. Cookies on this site
A cookie is a small text file that is stored on a user’s computer when they visit a site. Cookies do not contain personal information and cannot be used to run programs or store viruses on a user’s computer. We use cookies on this site for a variety of purposes related to the functionality of the site, analysis and marketing.

We use Google Analytics to track the website. The purpose of tracking is to collect statistical information, for example, about the number of visitors to the page and the most popular content. You can read more about Google cookies here:  Google Cookie Policy.  Cookie information helps us improve the functionality and usability of our website.

Blocking cookies in your browser

If you wish to block cookies, please change your browser’s cookie settings. If you block cookies in your browser, your device will not be tracked when you visit the site. However, please note that by blocking cookies, you may also prevent you from using some of the site’s features.

8. Regular disclosure of data and transfer of data outside the EU or EEA
Personal data may be disclosed within the limits permitted and required by applicable legislation. Data may be disclosed to other companies of Isabel Videla within the framework of the Personal Data Act. Data will not be disclosed to third parties that do not cooperate with isabel Videla. Data may also be transferred by the controller outside the EU or EEA. The Creamailer program server is located in Finland, and Creamailer is committed to complying with customer data protection in accordance with EU regulation.

9. Principles of register protection
The register is handled with care, and the data processed by information systems is protected appropriately. The register data is stored on Internet servers, and the physical and digital security of their equipment is appropriately ensured. The controller ensures that the stored data, as well as the access rights to the servers and other information critical to the security of personal data, are handled confidentially and only by employees whose job description requires it.

10. Right of inspection and right to demand correction of information
Every person in the register has the right to check their information stored in the register and demand correction of any incorrect information or completion of incomplete information. If a person wishes to check the information stored about them or demand correction, the request must be sent in writing to the controller. The controller may, if necessary, ask the person requesting to prove their identity. The controller will respond to the customer within the time period specified in the EU Data Protection Regulation.

11. Other rights related to the processing of personal data
A person in the register has the right to request that personal data concerning him or her be deleted from the register (“right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation,  such as the restriction of the processing of personal data in certain situations. Requests must be sent in writing to the controller. If necessary, the controller may ask the requester to prove his or her identity. The controller will respond to the customer within the time period specified in the EU Data Protection Regulation. The personal data of the data subject will be deleted at the user’s request, unless legislation, outstanding invoices or debt collection measures prevent the deletion of the data.