Privacy policy

Wonderland Group Oy (Business ID 3282628-8), Kempele, Finland, help@wholestay.app

This policy covers this website. When a guest books on a property's website with the Wholestay booking engine, the property is the controller of the guest's data.

Personal data is processed in accordance with the EU General Data Protection Regulation (2016/679) and the Finnish Data Protection Act (1050/2018).

Quote request

When you send a quote request, we receive the details you type or choose in the form:

• Property: name, website, location, property type and number of units.
• Current systems: PMS, booking engine and its notice period, activity and restaurant systems, and tracking tools.
• The size of monthly sales, your goals and your timeline.
• Contact details: name, role, e-mail and phone number.
• Preferred demo time, your message and whether the request concerns the offer.

E-mails

When you e-mail us, we receive the message and the sender's details.

Dashboard demo

Signing in to the demo stores one functional cookie in your browser. It is described under Cookies.

Chat assistant

When you ask the website's AI assistant something, your question and the earlier messages of the same conversation are sent to Anthropic to generate the answer. We do not store conversations on our side. Please don't type personal data into the chat.

We use the data to get in touch with you and to prepare a demo or quote for your property.

The legal basis is legitimate interest in business-to-business communication, or steps prior to a contract when you ask for a demo or quote.

• The website runs on Vercel's servers. The server stores standard technical log data, such as the IP address, to keep the website running and secure.
• Vercel is a US service provider, so data may also be processed outside the EU. Such transfers rely on safeguards approved by the EU, such as the Commission's standard contractual clauses.
• A quote request is forwarded as an e-mail to the company mailbox through NordicHost's e-mail service when sending is in use. Otherwise the form opens a ready message in your own e-mail program, and you send it yourself.
• Chat assistant messages are sent to Anthropic, which generates the answer. Anthropic is a US service provider, and the transfer relies on the Commission's standard contractual clauses. We do not store the messages on our side.
• When the quote form's bot protection (Cloudflare Turnstile) is in use, Cloudflare processes technical data, such as the IP address and browser details, to check that a person is sending the form.
• Analytics (Google Analytics) and marketing (Google Ads, Meta) are only loaded if you give your consent. Google and Meta then receive data about how the website is used, and it may also be processed outside the EU under safeguards approved by the EU.
• We do not sell data to anyone.

We keep the data as long as it is needed to manage the sales relationship. After that we delete it.

You have the right to

• see what data about you has been stored
• ask for incorrect data to be corrected
• ask for the data to be deleted
• object to the processing of the data
• ask for the processing to be restricted.

Send your request to help@wholestay.app.

If you believe your data is processed unlawfully, you can lodge a complaint with the Finnish Data Protection Ombudsman: tietosuoja.fi.

Necessary cookies keep the website working and need no consent. Analytics and marketing cookies are only set if you give your consent in the cookie banner.

• ws_consent

  Purpose

  Remembers your cookie choice, so we don't ask on every visit.

  Set by

  Wholestay

  Duration

  12 months

  Category

  Necessary

• xp_demo_session

  Purpose

  Keeps the dashboard demo session open after signing in.

  Set by

  Wholestay

  Duration

  14 days or until you sign out

  Category

  Necessary

• Cloudflare Turnstile

  Purpose

  Bot protection on the quote form: checks that a person is sending it.

  Set by

  Cloudflare

  Duration

  For the check

  Category

  Necessary (security)

• _ga

  Purpose

  Tells visitors apart for the website's usage statistics.

  Set by

  Google (Google Analytics)

  Duration

  2 years

  Category

  Analytics, only with consent

• _ga_<id>

  Purpose

  Keeps track of the visit for the usage statistics.

  Set by

  Google (Google Analytics)

  Duration

  2 years

  Category

  Analytics, only with consent

• _gcl_au

  Purpose

  Measures whether a Google ad led to an enquiry.

  Set by

  Google (Google Ads)

  Duration

  90 days

  Category

  Marketing, only with consent

• _fbp

  Purpose

  Measures the results of Meta ads and helps target them.

  Set by

  Meta

  Duration

  90 days

  Category

  Marketing, only with consent

At the moment the website has no analytics or marketing tools, so we don't ask for consent.

The website also stores a couple of things in your browser that are not tracking. The chat assistant notes in sessionStorage that you have already opened it during this visit, so its button stops wiggling. The note goes when you close the tab. The demos keep their example data in localStorage. None of this leaves your browser, and you can remove it by clearing the website's data in your browser.