Privacy policy in accordance with Section 10 of the Personal Data Act (523/1999).
1. Controller
Onni Heikkinen
Niinilahdentie 100, 83960 Koli
Business ID: 1283303-4
Tel: 0400 198 900
2. Contact person for register matters
Anita Heikkinen
Niinilahdentie 100, 83960 Koli
040 770 2277, info@niinilahti.fi
3. Name of register
Koli Niinilahti Holiday Cottages
4. Purpose of processing personal data
The purpose of processing is managing the customer relationship, realizing the rights and obligations of the customer and the controller, and processing personal data in accordance with the Personal Data Act for purposes related to online services, research activities, and targeting advertising and/or direct marketing of the controller and/or its partners based on customer data through the controller's media and services without disclosing personal data to external parties.
5. Data content of the register
The register may contain the following customer details:
Name
Address
Phone number
Email address
Country of residence
Company
Personal data is retained at least for the duration of the customer relationship; for retention beyond this, statutory obligations are complied with. The duration of data storage varies depending on the purpose and situation, and storage periods may also be based on legislation, such as the Accounting Act.
6. Regular sources of data
The register is compiled from the controller's customer data system and internet sources from forms submitted via the online service.
7. Regular disclosures of data
Data is not used for marketing measures unless the customer has given their separate consent. Data is not regularly transferred or disclosed outside the EU or the European Economic Area. The controller does not disclose customer personal data to third parties, except where required by the actions of Finnish authorities.
8. Deletion of data
Data may be deleted upon the request of the individual or due to the termination of the customer relationship. The duration of data storage varies depending on the purpose and situation, and storage periods may also be based on legislation, such as the Accounting Act. Unnecessary data is deleted from the registers.
9. Principles of register security
Personal data is kept confidential. The data network and hardware of the controller and its potential IT partners on which the register is located are protected by a firewall and other necessary technical measures.
10. Right of prohibition of the data subject
The data subject has the right to prohibit the controller from processing personal data concerning themselves for direct advertising, distance selling, and other direct marketing, as well as market and opinion research. The prohibition must be made in writing and addressed to the person responsible for register matters.
11. Right of access of the data subject
The data subject has the right to inspect personal data concerning themselves stored in the register and to obtain copies thereof. The request for inspection must be made in writing and addressed to the person responsible for register matters.
12. Rectification of data
The controller shall rectify, erase, or supplement personal data in the register that is erroneous, unnecessary, incomplete, or outdated for the purpose of the processing, on its own initiative or at the request of the data subject. The data subject must contact the controller's person responsible for register matters to rectify the information.
13. Changes to the privacy policy
We reserve the right to make changes to this privacy policy, including changes resulting from legislative amendments, at any time without prior notice.
The data subject is responsible for familiarizing themselves with the privacy policy in force at any given time and, by submitting the form, accepts the privacy policy.
