Privacy and cookies

Accommodation at Ipu Puhkemaja is provided by Luks Capital OÜ, registry code 16593120, which is also responsible for the personal data processed on this website. Privacy contact: ipu@ipu.ee.

Availability enquiries

The enquiry form asks for arrival and departure dates, guest count, name and email address. Phone and message are optional. We use this information to offer accommodation and respond at your request, including taking steps before entering a contract. Please do not include sensitive personal information in your message.

The server sends the enquiry to our mailbox over an encrypted SMTP connection and sends you a confirmation. Names, email addresses, phone numbers and messages are not stored in the website database. Only a hashed technical identifier and delivery status are retained to prevent duplicate submissions. Records older than seven days are removed when the next enquiry succeeds.

Enquiry correspondence is kept for as long as needed to handle the enquiry, any resulting stay and related questions. Unnecessary correspondence is deleted; contract and accounting records are kept as required by applicable law.

Security and service providers

Website and email hosting are provided by Veebimajutus.ee. To limit spam and abuse, the server temporarily uses keyed hashes of IP and email addresses and submission times. Rate-limit records older than two days are removed on the next request. Hosting server security-log retention is managed by the hosting provider. The private administration area uses a secure session cookie; ordinary visitors do not need it.

The map loads tiles from OpenStreetMap, the weather uses Open-Meteo, and fonts load from Google Fonts. These services receive technical connection information, such as an IP address, when those features load. They are not our analytics or marketing tools. Following Booking.com or social media links takes you to services with their own privacy policies.

Your cookie choices

Necessary storage remembers your cookie choice in your browser for up to 180 days. Analytics and marketing are off by default. Consent is optional; refusing it does not prevent you from using the website or enquiry form.

If Google Analytics 4 is configured and you allow analytics, we measure page views, gallery and form openings, successful enquiries and contact or Booking.com clicks. If Meta Pixel is configured and you allow marketing, we measure page views, gallery interactions, successful enquiries and contact clicks. We do not attach your name, email, phone or message to these events.

With consent, Google and Meta may process technical identifiers, including cookies and IP addresses, and data may be processed outside the European Economic Area under their terms. More information: Google · Meta.

You can change your choice below at any time. Withdrawing consent stops the relevant tracking and removes its cookies on this website. This does not affect the lawfulness of earlier processing.

We configure Google Analytics _ga cookies for up to 180 days. Meta’s _fbp cookie normally lasts 90 days. Browser settings may shorten these periods.

Your rights

Where applicable, you can access, correct or request deletion of your data, restrict or object to processing, and request data portability. Contact us using the email above. You may also contact the Estonian Data Protection Inspectorate: aki.ee.