Last updated: June 2026
Contents
Cucina della Nonna
Business ID: 3603743-8
Helsinki, Finland
Email: info@cucinadellanonna.fi
The controller manages the Cucina della Nonna brand and the Holy Crepe project, operating at cucinadellanonna.fi.
We collect the following personal data:
Registration data
First name, last name, email address and password (hashed with bcrypt).
Loyalty card data
Points accumulated, purchase history and rewards redeemed.
Optional data
Phone number and date of birth (voluntarily provided in the profile, used for birthday offers).
Technical data
IP address, browser type, operating system, server access logs. Collected automatically for service security.
Marketing preferences
Consent to newsletter and push notifications, only if explicitly given.
A — Account and loyalty card management
Creating and managing your account, calculating and assigning loyalty points, granting rewards.
Legal basis: performance of a contract — Art. 6.1.b GDPR
B — Transactional emails
Registration confirmation, email verification, points notifications, password reset. These emails are necessary for the service to function.
Legal basis: performance of a contract — Art. 6.1.b GDPR
C — Newsletter and marketing communications
Sending offers, promotions and updates via email or push notifications. Only if you have given explicit consent. You may withdraw consent at any time from your profile or by writing to the controller.
Legal basis: consent — Art. 6.1.a GDPR
D — Security and fraud prevention
Monitoring access to prevent unauthorised use of the loyalty points system.
Legal basis: legitimate interest — Art. 6.1.f GDPR
E — Legal and fiscal obligations
Retention of data required by Finnish and European legislation on tax and commercial matters.
Legal basis: legal obligation — Art. 6.1.c GDPR
| Data type | Retention period |
|---|---|
| Account and loyalty card data | For the duration of the relationship + 5 years after deletion |
| Server technical logs | 90 days |
| Session cookies | Until browser is closed (session cookie) |
| Newsletter consent | Until consent is withdrawn |
| Data for fiscal obligations | As required by Finnish law (kirjanpitolaki) |
Under EU Regulation 2016/679 (GDPR), you have the following rights:
Access (Art. 15)
Request a copy of the personal data we process about you.
Rectification (Art. 16)
Correct inaccurate or incomplete data directly from your app profile.
Erasure (Art. 17)
Request the removal of your data ("right to be forgotten"), subject to legal obligations.
Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Objection (Art. 21)
Object to processing for marketing purposes at any time.
Restriction (Art. 18)
Request restriction of processing in certain circumstances.
How to exercise your rights
Write to info@cucinadellanonna.fi stating your name, email address and specific request. We will respond within 30 days as required by Art. 12 GDPR.
You also have the right to lodge a complaint with the Tietosuojavaltuutettu (Finnish Data Protection Ombudsman).
Cucina della Nonna
For any questions regarding the processing of your personal data or this policy:
Email: info@cucinadellanonna.fi
Supervisory authority: Tietosuojavaltuutettu — Finnish Data Protection Ombudsman.
