Privacy Policy – Lapland Delight

1. Data Controller

Saariselän Loma- ja Ohjelmapalvelu Ky

Business ID: 1872277-3

Sarviniementie 590, 99870 Inari, Finland

Email: info@laplanddelight.fi

Phone: +358 40 560 9797

2. Purpose of Processing Personal Data

We process personal data for the following purposes:

• Managing and maintaining customer relationships (e.g. communication, invoicing, newsletters)

• Contact forms submitted via the website

• Website visitor analytics (Google Analytics)

3. Categories of Personal Data Collected

We may collect the following information:

• Name

• Email address

• Phone number

• Postal address

• Business ID (for business clients)

4. Sources of Personal Data

Personal data is collected directly from the data subject via:

• Completed online forms

• Customer-initiated contact or orders

5. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• Contractual necessity: For providing agreed services and fulfilling customer orders

• Consent: For example, submitting a contact form or subscribing to a newsletter

• Legitimate interest: For customer service, service development, and marketing to existing customers

6. Data Storage and Protection

Personal data is securely stored using the cloud services of our service providers (e.g. Dropbox, Microsoft, Mailchimp, Meritaktiva, Google, and Webnode).

Access is restricted to authorized personnel only.

Data protection is ensured through:

• Password-protected systems

• Restricted access rights

• Adherence to best practices in data processing

7. Data Retention

Personal data is retained for as long as necessary to manage the customer relationship, and for three (3) years after the relationship has ended, unless a longer retention period is required by law.

8. Data Sharing and Third Parties

We do not share personal data with third parties unless there is a legal basis to do so.

We use the following external service providers for business operations:

• Google Analytics – website analytics: https://policies.google.com/privacy

• Webnode – website platform: https://www.webnode.com/en/privacy-policy/

• Mailchimp – marketing communications: https://www.intuit.com/privacy/statement/

• Meritaktiva (Visma) – accounting services: https://www.visma.com/privacy-statement/

• Dropbox – cloud storage: https://www.dropbox.com/privacy

• Microsoft – office software and services: https://privacy.microsoft.com/en-us/privacystatement

Some of these service providers may transfer data outside the EU/EEA. In such cases, data transfers are conducted in compliance with the EU General Data Protection Regulation (GDPR) using Standard Contractual Clauses or under the EU–US Data Privacy Framework to ensure an adequate level of data protection.

9. Your Rights as a Data Subject

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion of your data

• Restrict or object to data processing

• Transfer your data to another controller

• Withdraw your consent, if processing is based on consent

• File a complaint with the supervisory authority if you suspect misuse of your personal data

To exercise your rights, contact us via email at info@laplanddelight.fi. We may request additional information to verify your identity before processing your request.

10. Supervisory Authority

Office of the Data Protection Ombudsman (Finland)

Website: https://www.tietosuoja.fi/en

Mail: PO Box 800, FI-00531 Helsinki, Finland

Phone: +358 29 56 66700