What booking a table and ordering food collect about you, what it is used for, and how you can see it or have it deleted.
The controller is Ravintola Ani, Telakkakatu 2, 00150 Helsinki. Telephone 09 622 2797, email info@ani.fi.
The restaurant’s registered company name is Maisitek Oy, business ID 1937542-7.
The booking and ordering system is supplied by Klar Systems, which processes the data on the restaurant’s behalf and on the restaurant’s instructions.
No email address is asked for when ordering. No payment details are collected at all, because payment takes place at the restaurant.
The site sets no cookies of its own and does not track visitors. The one exception is the map on the contact page: it is an embed from Google Maps, and Google may set its own cookies in your browser as the map loads. The map is on that one page only. Your browser’s own storage (localStorage) holds the contents of your basket, the name and phone number you typed for an order, and the identifiers of your most recent order and booking — so that reloading the page does not lose them. These stay in your own browser, and you can clear them from your browser settings.
The page fonts are loaded from Google Fonts and the map on the contact page is a Google Maps embed, so Google sees your IP address in connection with those requests.
If you book by phone, or arrive without a booking, a member of the floor staff enters the details into the system for you: your name, phone number, party size and time, and your email address if you give one. They are the same details the online form collects, and they are used and kept in exactly the same way.
If someone else made the booking in your name, your details came from them — the restaurant did not collect them from you.
For a guest who booked by phone, this notice reaches you in two ways: the footer of your booking confirmation links to this page, and the notice is always readable here at ani.fi/en/tietosuoja.html. If you leave the restaurant no email address, we have no channel to send it to you — which is why it is published on this page, and you may also ask the restaurant staff to tell you what it says.
Data is not sold and is not passed on for marketing purposes, and the forms on this site do not collect marketing consent.
An allergy or a special diet is health data. The GDPR treats it more strictly than ordinary personal data (Article 9), so it does not travel with the rest of your booking on the same basis.
The basis is your explicit consent (Article 9(2)(a)). In practice that means:
You can withdraw your consent at any time, as easily as you gave it. The “change your booking” link in your confirmation email shows you what we have recorded and deletes it in one press. Your booking stays in place. Deletion works even after the deadline for changing a booking has passed, and even if the booking was cancelled — the right to withdraw consent is not something we put a clock on. You can also call or email us if that is easier.
Withdrawing does not make the earlier processing unlawful. The record that you gave permission and then withdrew it is kept — the allergy information itself is deleted.
Allergy information is seen only by the kitchen and the floor. It is not used for marketing or profiling, and it is not passed on.
Allergy information is deleted seven days after your visit — not after 24 months like the rest of your booking data. The deletion runs automatically, once a day. A week rather than a day, because the information has to be there for the visit itself and for the few days afterwards in which you might get in touch if something went wrong; after that it has no purpose. The same applies to an allergy noted on your customer record: if you have not been in for a week, that is deleted too, so you would tell us again on your next booking.
In their booking view, the restaurant’s staff can also see your earlier bookings: how many times you have visited, bookings you did not turn up for, and notes the staff have written themselves.
The following service providers process data on the restaurant’s behalf:
Booking and order data is stored and processed within the EU: the database is in Ireland and the booking system’s servers are in Stockholm.
Resend, which handles the sending of email, is a US provider, so the contents of confirmation, reminder and feedback messages may also be processed outside the EU.
Your bookings, your orders and the contact details attached to them are kept for at most 24 months from your most recent visit. You can also ask for deletion sooner.
Allergy and special-diet information is the exception: it is deleted seven days after your visit. It is health data, and there is no reason to keep it once the meal it was given for has been eaten. See “Allergy information” above.
The clearing is automatic: the system reviews the data once a day and treats anything past the limit exactly as it treats a deletion request made separately — the name is replaced with the marking “Poistettu”, the phone number is replaced with an identifier, and the email address, any notes, the requests and the allergy information are removed. The dates and party sizes of the bookings remain in the system with no connection to you, for the restaurant’s own statistics.
One exception: if the restaurant has marked you as a barred customer, your data is not cleared when the limit is reached, because removing the record would cancel the bar.
The restaurant’s bookkeeping is separate from this: sales records are kept for the six years required by the Finnish Accounting Act, counted from the end of the calendar year in which the financial period ended. They are not kept in this system.
You have the right to be told what data is held about you, to have incorrect data corrected, and to ask for your data to be deleted.
Requests go to the restaurant: info@ani.fi or 09 622 2797. There is no self-service button on the site that would give you the data yourself — requests are handled by the restaurant’s staff.
The restaurant looks your data up by your phone number. The copy you receive covers your name, phone number and email address, the number of visits and of bookings you did not turn up for, any notes made about you, and the dates, times, party sizes, status, requests and allergy information of your bookings, together with the history of your consents to allergy information.
On a deletion request your name is replaced with the marking “Poistettu” (Finnish for “deleted”), your phone number is replaced with an identifier, and your email address, any notes and the requests and allergy information on your bookings are removed. The dates and party sizes of the bookings remain in the system with no connection to you.
The system also keeps an unalterable log of every change made to the data. The log entry for a deletion contains the data as it stood immediately before the deletion, and the entry cannot be changed afterwards.
If you are not satisfied with the way your data has been handled, you can lodge a complaint with the Office of the Data Protection Ombudsman, tietosuoja.fi.
Updated 28 August 2026.