Privacy Policy

Principles of data processing
1.1. Data processing principles apply to users of LaSpa Group OÜ website www.laspa.ee.

LaSpa Group OÜ is the controller of personal data. We only process your personal data to provide you with the service. We will not transfer, sell or disclose your data to third parties without your prior consent. LaSpa Group OÜ only forwards the personal data necessary for making payments to the authorized processor Maksekeskus AS.

Data Collection

We collect data when filling out forms.
1.2. When filling out the order forms, the data that needs to be submitted by the Customer is divided into mandatory and voluntary data.
1.3. The Customer must provide the following information:
1.3.1. Name – required to complete and secure the reservation.
1.3.2. E-mail address – necessary to complete the reservation and, if necessary, submit invoices.
1.3.3. Telephone number – necessary for fulfilling the order and ensuring fulfilment of the order, including the transmission of service error messages.
1.3.4. The security of paying with a bank link and/or bank card is protected by the SSL security protocol, which ensures that the exchanged information cannot be intercepted or changed by outsiders. Maksekeskus AS keeps the Customer’s card data securely and never shares it with merchants or third parties. The information accessible by the merchant is limited to the type of card (e.g. Visa or MasterCard) and the last two digits of the card number.
1.3.5 When paying by bank transfer, LaSpa Group OÜ processes the current account number and, in the case of card payment, the details of the payment card.

Data collection when subscribing to newsletter

1.5. By subscribing to the newsletter, the subscriber gives consent to the use of his contact data for direct marketing purposes, i.e. marketing announcements will be sent to using the contact data provided by.

1.6. The subscriber has the right at any time to opt-out of receiving newsletters sent for direct marketing purposes. Instructions for opting out of the newsletter list are attached to each newsletter sent out.

1.7. The responsible processor of the subscriber’s data is LaSpa Group OÜ, Puhkekodu tee 4, Laulasmaa, 76702 Harju county, registry number 16097332.

Data retention period

1.8. LaSpa Group OÜ stores the data as long as it is needed to use the data or until the expiration dates of legal claims and the legal document retention period (7 years according to the VAT Act and the Accounting Act).

Your rights regarding the use of data

1.9. You have the right to receive LaSpa Group OÜ information about the use of your data in the manner and to the extent provided by law.

1.10. You have the right to ask LaSpa Group OÜ to stop using your data and to correct, close and delete the data.

1.11. You have the right to allow or refuse the use of your data for direct marketing or marketing purposes.

1.12. You have the right to contact the Data Protection Inspectorate and the court to protect your rights.

1.13. In case of any questions regarding personal data, you have the right to send us an e-mail at reservations@laspa.ee or call the hotel reception at +372 687 0800.

2. Principles of using cookies

Cookie Usage

2.1. To offer better service to its customers, LaSpa Group OÜ websites use cookies.

2.2. Domains belonging to LaSpa Group OÜ may, among other things, contain an element that stores cookies on behalf of third parties, which is necessary to provide service.

Declining Cookies

2.3. The user has the right to refuse to save cookies on the computer. If desired, the User must change the settings of one’s web browser.

2.4. Different types of web browsers use different methods to disable cookies. More detailed information is displayed on the website http://www.aki.ee/et/kupsised or on the English page http://www.allaboutcookies.org/.

2.5. When blocking cookies, the User must take into account that all website functions may no longer be available to the User after blocking cookies.

What is a Cookie?

2.6. A cookie is a text file that is sent and stored on the User’s computer by the web pages that the User visits. The cookie is stored in the file directory of the User’s web browser. If the User has visited the website before, the web browser reads the cookie and transmits the relevant information to the website or element that originally stored the cookie. More information about cookies is available on the website www.aki.ee/et/kupsised or on the English page http://www.allaboutcookies.org/.

2.7. Cookies make it possible to monitor website usage statistics, the popularity of sections and other actions performed on the website. The information obtained from the cookie is used for the purpose of improving the usability and content of the website.

Types of cookies used on the website

2.8. Persistent cookies are essential for navigating the website and using its functions. In the absence of persistent cookies, the User would not be able to use all the functions of the website.

2.9. Session cookies allow the website to remember previous choices made by the User (for example, username, language selection, etc.) and thereby offer more efficient and personalized functions.

2.10. Tracking cookies collect data about the User’s behaviour on the website. The information obtained from the tracking cookie makes it possible to increase the ease of use of the website.