Privacy and cookies

Updated 20 October 2026

Controller

Merirantala Oy (Business ID 1053087-3)
Orssaarentie 115, 21590 Karuna, Finland
Phone: +358 40 545 8845
Email: jarkko.rantala@merirantala.fi

For questions about privacy, you can contact us using the details above.

Cookies

Google Analytics cookies are set only if you accept them. The first time you open the site, a bar at the bottom of the page asks whether we may use Google Analytics. If you accept, it sets the cookies _ga and _ga_…, which last up to two years. If you reject, or don't answer, Google Analytics is not loaded at all.

Your choice is stored in your browser (local storage), so you aren't asked on every page. The site sets no other cookies itself. The exception is the Instagram feed on the home page, which is loaded from an outside service — see Third-party services below.

No forms or user accounts

The site has no contact or booking forms, no newsletter and no user accounts. We don't collect names, email addresses or other contact details through the website.

It is what's called a static site: it is made of pages built in advance, with no database behind it where information about visitors could be stored.

Visitor statistics: Google Analytics

If you accept it, we use Google Analytics 4 to see how many people visit the site, where they come from (for example a search engine or social media), which pages they read and which links they click, such as the links to Lomarengas's booking pages. We use this to improve the site. We don't use it for advertising, and we haven't turned on Google's advertising features (Google signals). There is no Facebook pixel or other advertising tracker on the site.

Google Analytics processes a random identifier stored in a cookie, the pages viewed and links clicked, your device and browser type, the page you came from, and an approximate location (country and city) worked out from your IP address. Google Analytics 4 doesn't store IP addresses. We don't link the data to any particular person.

The service is provided by Google Ireland Limited, which processes the data on our behalf. The data may also be processed in the United States; Google is certified under the EU–US Data Privacy Framework. The data is kept in Google Analytics for 14 months.

The legal basis is your consent (GDPR Article 6(1)(a)). You can change your choice at any time with the Cookie settings link at the bottom of every page. When you withdraw consent, the Google Analytics cookies are deleted from your browser. See alsoGoogle's privacy policyand how Google uses data.

Server logs

The site is delivered by Cloudflare. Like every web server, the service processes the technical information needed to deliver the pages and keep them secure — for example your IP address, browser type and the address of the page you asked for. The legal basis is legitimate interest (General Data Protection Regulation, Article 6(1)(f)): making sure the site works and is secure. We don't use these logs to track or profile visitors ourselves.

Third-party services

We have aimed for a site that doesn't send visitors' data to outside parties. Google Analytics (above) loads only with your consent. The fonts and the map software are served from our own server, so loading them involves no third parties.

One exception is the map on the contact page. Its background images (map tiles) are fetched from OpenStreetMap's servers, so your browser connects to tile.openstreetmap.org and passes on your IP address. This happens only on the contact page, and only when the map is shown. See theOpenStreetMap Foundation's privacy policy.

The other exception is the Instagram feed on the home page ("Life at Merirantala"). It is embedded through SnapWidget, which fetches the public photos of the @merirantala account from Instagram. When you open the home page, your browser connects to snapwidget.com and Instagram's servers; they receive your IP address and may set cookies of their own. SeeSnapWidget's privacy policyand Meta's privacy policy.

The site also links to outside services, such as Lomarengas's booking pages, Instagram and Facebook. Once you go to them, their own privacy policies apply. We don't share your data with them — opening a link is always your own choice.

Cottage bookings

Bookings are made on Lomarengas's website, a separate service with its own privacy policy. When you book a cottage through Lomarengas, its privacy policy covers the details you give when booking.

If you contact us by phone or email, we use the details you give only to deal with your enquiry, and we don't use them for marketing without your consent.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict its processing and to object to it. Through the website we hold at most Google Analytics statistics about you, which we can't link to you. You can stop more being collected by withdrawing consent with the Cookie settings link.

If you believe your personal data is being processed unlawfully, you can lodge a complaint with the Data Protection Ombudsman in Finland (tietosuoja.fi).

Changes

If we later add a contact form, a booking system or other features to the site, we will update this page to match.