Privacy

How we handle your data

Visualsofjulius Oy, trading as Jumi Media, decides what happens to the personal data described here. Business ID 2941901-6, Lempinkuja 5, 21380 Aura, Finland. Write to hello@jumimedia.co about anything on this page, including a request to see or delete what we hold. We answer within one month.

When you send an application

The form keeps the answers you type: the hotel, where it is, its website and Instagram handle, the number of rooms, the nightly rate, the season, the budget range, your name, your role, your email address and whatever you write in the last field. Nothing else, and the form itself sets no cookie.

We use it to read your application, to answer it, and, if it fits, to prepare a partnership. The legal basis is the steps taken at your request before a contract (Article 6(1)(b) GDPR) together with our legitimate interest in answering enquiries about our work (Article 6(1)(f)). Your answers are stored in our own database at Cloudflare and emailed to the two of us; a copy goes to the address you gave, so you hold a record of what you sent.

Two things keep the form from being used for spam. We count how often it is sent from the same internet connection: that counter stores a one-way hash of your IP address, never the address itself, and it is deleted after two days. And Cloudflare Turnstile checks that a person rather than a script is filling the form in — it normally decides in the background without asking you anything, sets no advertising cookie and does not follow you around other sites, but Cloudflare does receive your IP address and technical signals from your browser in order to decide. The legal basis for both is our legitimate interest in keeping the form open and usable (Article 6(1)(f)).

If we wrote to your hotel

Sometimes we write to a hotel we admire to introduce ourselves. For that we keep a short note about the hotel and one business contact: a name, a role and a work email address, taken only from a public page (the hotel's own website, a company register or a press page), and we record which page it was. We never buy addresses and never guess them. The legal basis is our legitimate interest in offering our work to businesses it may suit (Article 6(1)(f)). We write once and follow up at most once. If you would rather not hear from us, reply to the email or write to hello@jumimedia.co: we delete your details and keep only the hotel's name and country on a short list, so that nobody here writes to it again.

Cookies

One cookie is ours: jm_consent, which remembers the choice you make in the cookie bar and lasts twelve months. Nothing else is written to your device unless you accept analytics, and you can change your mind at any time with Cookie settings at the bottom of any page.

Analytics

We use Google Analytics 4, and only after you accept it in the cookie bar. Until then nothing from Google is requested and nothing is sent. If you accept, Google receives the pages you view, your approximate location, your device and browser type, the site you came from, clicks on our links (the application button, Instagram, TikTok, reel plays) and the steps of the application form you reach. Google Analytics 4 does not store IP addresses, and we ask Google to keep this data no longer than fourteen months. The legal basis is your consent (Article 6(1)(a)), which you can withdraw at any time.

Videos and pictures

Every reel and photograph on this site is served from our own storage at Cloudflare, so browsing the site contacts no video platform and no advertising network. Links to Instagram and TikTok open those platforms in a new tab, where their own terms apply. If a testimonial filmed for YouTube is shown here, it loads only when you press play, through YouTube's privacy-enhanced domain.

Who else handles your data

Cloudflare runs this site, holds the database and the files, and checks the application form for bots. Like any host it processes the technical details of each request — IP address, browser, the page asked for — to deliver the site and protect it from attacks. We keep no server logs of our own. Resend delivers the two emails around an application. Google hosts our mailboxes, so your message to us sits there, and provides Analytics if you accepted it.

Some of these companies are based in the United States or process data there. That happens under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework. We do not sell data, we run no newsletter, and nothing you send us is used for profiling or for a decision taken by a machine alone.

How long we keep things

• An application: twenty-four months. If a partnership follows, it becomes part of the client record and stays for as long as we work together, and the invoices for the six years Finnish accounting law requires.
• A hotel we wrote to: twenty-four months without contact, then the details, the draft and the notes are deleted. The name and country stay on the short do-not-write list.
• The spam counter on the form: two days.
• Your cookie choice: twelve months.

Your rights

You can ask us what we hold about you and get a copy, have it corrected, have it deleted, ask us to restrict what we do with it, object to anything we base on legitimate interest — including any email we sent your hotel — and ask for your data in a form you can take elsewhere. Where we rely on consent, you can withdraw it at any time without giving a reason. Write to hello@jumimedia.co and we will answer within one month.

If you think we have handled your data wrongly, you can complain to the Finnish Data Protection Ombudsman: Tietosuojavaltuutetun toimisto, Lintulahdenkuja 4, 00530 Helsinki, tietosuoja.fi.

Changes

If we change what we collect or who handles it, we change this page at the same time and move the date below. Last updated 19 September 2026.