Your data on anystay.fi.

1. Who is responsible

anystay.fi is run by Easy Host Oy, business ID 3288005-7, Sörnäistenkatu 19 B 21, 00580 Helsinki, Finland. Easy Host Oy is the controller for the data described here. Contact: [email protected].

Each place is offered by its host, who is a separate controller for the data they need to provide your stay. Stripe is a separate controller for the card payment.

2. Guests

• Account: your email address, and your name if you give it. Used to sign you in by email link and to show your trips, saved places and messages. Legal basis: our contract with you (GDPR Art. 6(1)(b)). If you sign in with Google, we receive only your Google account’s email address.
• Booking: your name, email, phone number, number of guests, dates, your message to the host and the payment record (amount, date, card brand and last four digits; we never see the full card number). Used to make and manage the booking. Legal basis: contract (Art. 6(1)(b)) and accounting law (Art. 6(1)(c)).
• Messages: questions you send a host before booking, and messages about your booking. Before a booking is confirmed, contact details in messages are hidden automatically, to keep payments safe on anystay.fi. Legal basis: contract, and our legitimate interest in preventing payment fraud (Art. 6(1)(f)).
• Reviews: your rating and text, shown with your first name and the date of the review. Legal basis: our legitimate interest in giving guests honest information about places (Art. 6(1)(f)).

When you book, we pass your booking details and messages to the host, who uses them to provide the stay and to meet their own legal duties, such as the guest register.

3. Hosts

• Account and listings: your name, email, phone number, listing details and photos, and your Stripe account identifier. Legal basis: contract (Art. 6(1)(b)).
• Identity and tax details (DAC7): name, address, date of birth or business ID, tax identification number, bank account, and the income and number of bookings per listing. Identifiers and the bank account are stored encrypted. Reported once a year to the Finnish Tax Administration, which may pass them to another EU tax authority. Legal basis: legal obligation (Art. 6(1)(c)).
• Cancellations and review figures per listing, to apply the host quality rules. Legal basis: contract (Art. 6(1)(b)).

4. Cookies

anystay.fi sets one cookie that keeps you signed in for up to 90 days, and, when you sign in with Google, a second one that lasts 10 minutes and only links Google's answer to your sign-in. Both are needed for the service and neither is used for tracking. We count visits with Cloudflare Web Analytics, which sets no cookies and does not follow you across sites. We use no advertising cookies on anystay.fi, and the map is served from our own servers.

5. How long we keep it

• Guest account: until you ask us to delete it, or after three years without signing in.
• Bookings and payment records: six years after the end of the year of the booking, as Finnish accounting law requires.
• Messages: two years after the stay or the last message, whichever is later; a question asked before booking, two years after its last message.
• Reviews: as long as the listing is on anystay.fi.
• DAC7 details and reports: six years after the end of the year they concern, as the Finnish Tax Administration requires.

6. Who processes data for us

• Railway: application hosting and database, EU region.
• Cloudflare: network and photo storage, EU jurisdiction.
• Resend: email (sign-in links, booking emails), USA, under Standard Contractual Clauses.
• Sentry: error reporting with personal data removed, EU region.
• Stripe: card payments to the host’s account; Stripe is an independent controller for the payment.

We do not sell personal data and do not use it for advertising.

7. Your rights

You have the right to see the data we hold about you, to have it corrected or deleted, to restrict or object to its use, and to get it in a portable format. Write to [email protected]. Data we must keep by law, such as accounting and DAC7 records, is kept for the required time even if you ask us to delete it.

For the data a host holds to provide your stay, contact the host; we help them answer you. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

8. Changes

We post changes here with the date above. Hosts are told about material changes by email before they take effect.