Privacy Policy

Data Controller

Hannu Leskelä
Juumantie 65 B
93900 Kuusamo, Finland
+358405416191
info@villapikkukarhu.fi
Our website is: https://villapikkukarhu.fi/

Name of the Register

Customer Register of Villa Pikku Karhu

Purpose of Processing Personal Data / Purpose of the Register

The purpose of this register and privacy policy is to enable online commerce, such as the transmission of order details, billing information, payment confirmation data, or processing information between the merchant and the customer. Additionally, the register is intended to facilitate customer service communication and maintain the customer relationship.

Content of the Register

Customer-provided information: First and last name, date of birth, contact details (e.g., phone number and email address), gender, nationality, number, age, and names of children staying with the customer, and billing information if necessary.

For corporate customers, additionally: Company name, company address, contact details, and business ID (Y-tunnus).

Customer feedback data: Customer satisfaction information, comments on the services provided by the data controller, and other information provided with the customer’s consent.

Reservation details: Past and future bookings. Information related to the customer’s preferences and choices.

Customer’s payment method and payment behavior (including payment reference details) as well as billing information.

Data related to prohibitions of direct marketing, distance selling, and other direct advertising as required by law.

Other information collected with the customer’s consent (e.g., information on mobility
restrictions and illnesses necessary for the customer’s accommodation).

Regular Data Sources

Customers input their data electronically into the reservation system during the booking process, and the information is collected manually during check-in.

Regular Data Disclosures and Transfer of Data Outside the EU or European Economic Area

The data is not disclosed separately and remains with the data controller. The data is not transferred outside the EU or the European Economic Area. The data controller may disclose personal data to third parties, such as the police or other authorities, if the matter concerns a criminal investigation or if required by law or an official decision.

Principles of Register Protection

Manual material
If manual material is printed from the server-stored register, it is kept in a locked area. Only the data controller and authorities authorized by law have access to the material.

Right to Inspect and Exercise of Inspection Rights
Everyone has the right to inspect their personal data.
The inspection request must be made in writing, either on a handwritten, signed form or in person at the data controller’s office.

Data Correction and Exercise of Data Correction
Everyone has the right to request the correction of incorrect data in the register. The correction request must be made in writing and sufficiently detailed.

Other Possible Rights

According to Section 30 of the Personal Data Act, “the data subject has the right to prohibit the data controller from processing personal data concerning him or her for purposes of direct marketing, distance selling, and other direct marketing, as well as for market and opinion research, personal directory, and genealogy purposes.”

Inspection, correction requests, and prohibitions regarding the processing of personal data.

Leskelä Hannu
Juumantie 65 b
93900 Kuusamo Finland
+358 40 541 6191