Effective from 9 November 2026.
Maria Rooms handles your data with care and collects only what is needed to host you. This page explains what data we collect, why we collect it and what your rights are.
Who processes your data
Maria Rooms guest apartments in Kuressaare are run by the family business Ringipood OÜ (registry code 12439675, address Pargi tn 3-3, 93813 Kuressaare, Estonia). Ringipood OÜ is the controller of your personal data.
For any data protection question, write to eva@mariarooms.ee or call +372 5396 6787.
What data we collect and why
Enquiries and bookings
When you contact us through a website form, by email or by phone, we use your name, email address, phone number, requested dates, number of guests (and the ages of children) and the content of your message. We need this to send you an offer, confirm your booking and stay in touch before and during your stay. The legal basis is entering into and performing a contract.
Invoices and payments
The prepayment and final invoices show the payer’s name or company details. When a bank transfer arrives, we see the payer’s name and account number. We are required by law to keep accounting records.
Guest registration
The Estonian Tourism Act requires accommodation providers to register their guests. On arrival we ask for the guest’s name, date of birth, citizenship and address, the names and dates of birth of accompanying family members and, where the law requires it, travel document details. The legal basis is a legal obligation.
Booking through Booking.com or Airbnb
If you book through a booking platform, the platform sends us the details needed for your stay (name, contact details, dates, number of guests). The platform processes your data under its own privacy policy.
Visiting the website
- Contact forms. The content of a form reaches us as an email. To block spam, the form uses Google reCAPTCHA, which processes your IP address and device information.
- Visitor statistics. We use Jetpack Stats (Automattic Inc.), which processes technical visit data, including your IP address. Statistics help us understand which pages are read. The legal basis is our legitimate interest in improving the website.
- Cookies. The website uses cookies that are necessary for it to work. You can choose whether to allow other cookies in the cookie banner and change your choice there at any time.
- Fonts and maps. The fonts on this site are loaded from Google Fonts, which means Google sees your IP address. Map links open Google Maps, where Google’s terms apply.
- Security. To protect the website from attacks, our security tools (Wordfence, Patchstack) temporarily store the IP address and technical details of a visit.
How long we keep your data
- Enquiries that did not lead to a booking: up to 1 year.
- Booking correspondence: up to 3 years after your stay, in case of any claims.
- Guest registration data: 2 years, as required by the Tourism Act.
- Invoices and other accounting records: 7 years, as required by the Accounting Act.
Who we share your data with
We do not sell your data or pass it to third parties for marketing. Your data is seen only by those who need it for their work:
- our team, who manage bookings and welcome guests;
- service providers who help us run the business: our accountant, web hosting, email service and the statistics and security services named above;
- public authorities when the law requires it (for example the police or the Estonian Tax and Customs Board).
Some service providers (Google, Automattic) are based in the United States. For data transfers they rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
Your rights
You have the right to:
- ask what data we hold about you and receive a copy of it;
- have incorrect data corrected;
- ask us to delete your data, unless the law requires us to keep it;
- restrict the processing of your data or object to it;
- have your data transferred to another service provider.
To make a request, write to eva@mariarooms.ee. We will reply within one month.
If you believe we have handled your data incorrectly, please tell us first. You also have the right to contact the Estonian Data Protection Inspectorate (Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee).
Changes
If the way we process data changes, we will update this page. The current version is always available here, together with its effective date.