Ravintola Koski logo valkoinen

Privacy Policy

Pepper Catering Oy

This Privacy Policy complies with the EU General Data Protection Regulation (GDPR). In this policy, we explain what personal data we process, the purposes for which the data is used, the legal basis for processing, to whom personal data may be disclosed, how long data is retained, and how you can exercise your data protection rights.

Last updated: 14 August 2026
Effective date: 2 June 2026

1. Data Controller

Pepper Catering Oy
Business ID: 3232476-3
Postal address: Pispalan Valtatie 18 B, 33250 Tampere, Finland
Email: ravintola@ravintolakoski.fi
Website: www.ravintolakoski.fi

Ravintola Koski is a service brand operated by Pepper Catering Oy. Pepper Catering Oy is part of the Restbar Group.

2. Register Name

Pepper Catering Oy Customer, Marketing and Website Services Register.

 

3. Data Protection Contact Information

Pepper Catering Oy has not appointed a Data Protection Officer, as the nature and scope of its operations do not require one under applicable data protection legislation.

For all privacy-related matters, please contact:

Email: ravintola@ravintolakoski.fi

4. What Personal Data Do We Process?

We only process personal data that is necessary for managing customer relationships, providing services, handling inquiries, reservations, orders, invoicing, marketing activities, or operating our website.

Basic Customer and Contact Information

We may process:

  • Name
  • Email address
  • Phone number
  • Company or organization name
  • Job title or role within the company (for business customers)
  • Billing and contact details

Reservation, Order and Customer Relationship Information

We may process:

  • Information relating to reservations, quotations and orders
  • Information concerning restaurant, lunch, celebration, meeting, catering and related services
  • Event details such as date, number of participants and service requirements
  • Special dietary requirements and other information voluntarily provided by the customer
  • Customer communications, feedback, complaints and customer service records
  • Invoicing and payment information

Website and Electronic Service Usage Data

When using our website, we may process technical information such as:

  • IP address
  • Device and browser information
  • Operating system information
  • Date and time of visit
  • Pages viewed and website activity
  • Identifiers and usage information collected through cookies and similar technologies

Analytics and marketing cookies are only used with your consent.

5. Sources of Personal Data

Personal data is primarily collected directly from you when you:

  • Contact us by email, telephone, web form or social media
  • Make a reservation or request a quotation
  • Order catering, event, meeting or restaurant services
  • Submit feedback
  • Act as a representative of a company or organization
  • Subscribe to a newsletter or provide marketing consent
  • Use our website and accept cookies

We may also receive information from service providers such as booking systems, payment processors, analytics providers, advertising platforms, website providers, email systems and form services where necessary to provide our services.

For business customers, we may also process publicly available business contact information when needed for customer relationship management, business communications or service provision.

6. Purposes of Processing Personal Data

Customer Service and Responding to Inquiries

We process personal data to respond to inquiries, quotation requests, questions and feedback.

Reservations, Orders and Service Delivery

We process personal data to provide restaurant, lunch, celebration, meeting, catering and other services ordered by customers.

Customer Relationship Management

Personal data is processed to maintain customer relationships, communicate with customers, develop services, improve customer experience and manage complaints.

Invoicing, Payments and Accounting

Personal data is processed for invoicing, payment processing, accounting purposes and compliance with legal obligations.

Marketing and Customer Communications

We may process personal data to provide information about our services, communicate with customers and conduct direct marketing.

Electronic direct marketing is carried out only where permitted by law, such as to existing customers regarding similar services or where the individual has provided consent.

You always have the right to object to direct marketing.

Ravintola Koski's event, celebration and meeting services are operated by Pepper Catering Oy. Because Ravintola Koski and Pepper Catering Oy provide services within the same restaurant, catering, event and meeting business operations, customers may also receive information regarding related services, benefits and events to the extent permitted by applicable legislation. Recipients can opt out of marketing communications at any time.

Website Analytics and Development

We process website usage data to improve website functionality, usability, visitor experience and content.

Analytics cookies are only used with your consent, except where technically necessary for the operation of the website.

Advertising Measurement and Targeting

We may use cookies and similar technologies to measure advertising performance, conduct remarketing and deliver targeted advertising through services such as Google and Meta.

These cookies are used only with your consent.

7. Legal Bases for Processing

Contract or Pre-contractual Measures

We process personal data where necessary to enter into or perform a contract.

Examples include:

  • Reservation management
  • Responding to quotation requests
  • Providing catering and event services
  • Customer service related to orders and reservations

Legal Obligation

We process personal data where required by law.

Examples include:

  • Accounting requirements
  • Tax obligations
  • Responding to lawful requests from authorities

Legitimate Interests

We may process personal data where necessary for our legitimate interests and where those interests do not override the rights and freedoms of data subjects.

Examples include:

  • Customer relationship management
  • Customer communications
  • Service quality development
  • Complaint handling
  • Business-to-business communications
  • Establishment, exercise or defense of legal claims
  • Direct marketing to existing customers within legal limits

Consent

We process personal data based on consent when you have provided freely given, specific and informed consent.

Examples include:

  • Newsletter subscriptions
  • Analytics cookies
  • Marketing cookies
  • Remarketing activities
  • Advertising targeting

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. Special Dietary Requirements and Health Information

If you inform us of dietary requirements, allergies or other meal-related health information, we process this information solely for providing the requested service and ensuring safe catering arrangements.

Such information is processed only to the extent necessary and is never used for marketing purposes.

9. Recipients of Personal Data and Service Providers

We do not sell personal data.

We may share personal data with service providers that process data on our behalf, including:

  • Website maintenance providers
  • Hosting providers
  • Email and form service providers
  • Reservation and customer management system providers
  • Payment and invoicing service providers
  • Accounting and financial administration service providers
  • Analytics providers such as Google Analytics
  • Advertising and marketing providers such as Google Ads and Meta/Facebook
  • IT and cybersecurity service providers

Service providers may process personal data only in accordance with our instructions and solely for the purposes for which the data was provided.

We may also disclose personal data to authorities where required by law.

10. Transfers Outside the EU/EEA

As a rule, personal data is processed within the European Union and the European Economic Area.

Some service providers, such as analytics, cloud, technology or advertising providers, may process personal data outside the EU/EEA. In such cases, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.

11. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Typical retention periods include:

  • Quotations and inquiries: up to 24 months unless a customer relationship continues
  • Reservation and order information: during the customer relationship and for a reasonable period thereafter
  • Accounting and invoicing records: according to statutory retention requirements
  • Marketing consents and opt-out records: for as long as necessary
  • Newsletter subscription data: until unsubscribed or deletion is requested
  • Cookie consent records: according to cookie management settings
  • Technical website logs: only for the period required for security, maintenance and troubleshooting

When personal data is no longer needed, it is securely deleted or anonymized.

12. Data Security

We process personal data carefully and protect it using appropriate technical and organizational measures.

These measures include:

  • Restricting access to authorized personnel only
  • Individual user access management
  • Confidential handling of personal data
  • Appropriate security measures for servers, systems and online services
  • Data processing agreements with service providers
  • Retention of data only for as long as necessary

13. Rights of Data Subjects

Under applicable data protection legislation, you have the right to:

  • Obtain confirmation of whether we process your personal data
  • Access your personal data
  • Request correction of inaccurate or incomplete data
  • Request erasure of personal data in certain circumstances
  • Request restriction of processing
  • Object to processing in certain circumstances
  • Object to processing for direct marketing purposes
  • Receive personal data in a portable format where applicable
  • Withdraw consent at any time

Please note that some rights may be restricted by legal obligations. For example, accounting legislation may require us to retain certain records for a statutory period.

We generally respond to requests within one month of receipt. We may request additional information to verify your identity.

To exercise your rights, contact:

ravintola@ravintolakoski.fi

14. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with a supervisory authority.

In Finland, the supervisory authority is:

Office of the Data Protection Ombudsman
Website: https://tietosuoja.fi/en

15. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small text files stored on your browser or device. They help websites function properly, remember preferences, measure usage and provide relevant advertising.

Essential Cookies

Essential cookies are necessary for:

  • Website functionality
  • Security
  • Form functionality
  • Remembering cookie settings

These cookies do not require consent.

Analytics Cookies

Analytics cookies help us understand visitor numbers, website usage and website performance.

These cookies are used only with your consent.

Marketing and Advertising Cookies

Marketing cookies may be used for advertising measurement, remarketing and targeted advertising.

These cookies are used only with your consent.

Services may include:

  • Google Analytics
  • Google Ads
  • Meta/Facebook Pixel
  • Other similar analytics and advertising services

16. Managing Cookies

When you visit our website, you may accept or reject non-essential cookies through the cookie banner or cookie settings.

If available, you may modify or withdraw your cookie preferences at any time through the website's cookie settings tool.

You may also block or delete cookies through your browser settings. However, doing so may affect website functionality.

17. Automated Decision-Making and Profiling

We do not engage in automated decision-making that produces legal or similarly significant effects on individuals.

With your consent, we may use cookie-based profiling and advertising targeting. For example, you may see advertisements related to Ravintola Koski services based on your previous visits to our website.

18. Changes to This Privacy Policy

We may update this Privacy Policy if our operations, services, systems or applicable laws change.

The latest version is always available on our website. If significant changes are made, we may notify users through the website or by other appropriate means.

19. Contact Information

If you have any questions regarding this Privacy Policy, our processing of personal data, or if you wish to exercise your privacy rights, please contact:

Pepper Catering Oy / Ravintola Koski
Email: ravintola@ravintolakoski.fi
Postal address: Pispalan Valtatie 18 B, 33250 Tampere, Finland