Privacy statement

REGISTRY AND PRIVACY STATEMENT

This is the register and privacy notice of Kuerkaltio Holiday Village in accordance with the EU General Data Protection Regulation (GDPR). Compiled on October 24, 2024.

 

DATA CONTROLLER

Kiinteistö Oy Kuerkaltio, Kuerkaltion Lomakylä                                                                        
Karhukoantie 6
95970 Äkäslompolo

Phone: +358 16 5100 100
Emai: infon.hoitaja@kuerkaltio.fi
Business ID: 0720657-0

REQUESTS RELATED TO DATA PROTECTION

Data protection requests are handled by Louru Oy.

NAME OF THE REGISTER

Kuerkaltion Lomakylän verkkopalvelun käyttäjärekisteri.

PURPOSE OF PROCESSING PERSONAL DATA

The purpose of processing personal data is to communicate with customers, maintain customer relationships, and marketing. Additionally, the collected data may be used to develop the online service. The data will not be used for automated decision-making or profiling.

CONTENT OF THE REGISTER

The data stored in the register includes: the person’s name, company name, contact information (phone number, email address, address), website addresses, details of ordered services and their changes, billing information, and other information related to customer relationships and ordered services.

Data will be retained indefinitely.

REGULAR SOURCES OF INFORMATION

The data stored in the register is obtained from customers via email, phone, social media services, contracts, customer meetings, and other situations where the customer provides their information.

Information about contact persons from companies and other organizations may also be collected from public sources such as websites, directory services, and other companies.

TRANSFER OF DATA OUTSIDE THE EU OR EEA

Data is not regularly disclosed to other parties. Data may be published to the extent agreed upon with the customer. Data may also be transferred by the data controller outside the EU or EEA.

PRINCIPLES OF REGISTER SECURITY

The data controller ensures that the stored data, as well as access rights to servers and other information critical to data security, are handled confidentially and only by employees whose job description includes this.

RISKS

Risks related to personal data include data breaches. Personal data stored in the register is protected from unauthorized access, as well as accidental or unlawful destruction, alteration, disclosure, transfer, or any other unlawful processing.

RIGHT OF ACCESS AND RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA

Every individual in the register has the right to check their stored data and request correction of any incorrect information or completion of any incomplete information.

If an individual wishes to check their stored data, request corrections, or request the deletion of their personal data, the request must be sent in writing to the data controller. The data controller may ask the requester to verify their identity if necessary. The data controller will respond to the customer within the time frame specified by the EU data protection regulation (generally within one month).

COOKIES AND VISITOR TRACKING

Visitor data and statistics on the website are stored via Google Analytics on Google's servers, which may also be located outside the EEA (in Privacy Shield countries).

WHAT ARE COOKIES?

Cookies are small text files that are stored on the user's device when they visit a website. Each time the user visits the site, these cookies are sent back, allowing the website to recognize the cookie. Cookies can be used to identify the user’s device, save the choices made by the user on the site, and retain login information. Cookies can also enable visitor tracking, which aims to improve user experience and target advertisements.

COOKIES USED ON THIS WEBSITE

This website uses the Google Analytics service, which uses cookies for visitor tracking. Google Analytics cookies can collect information about the user’s

  • device
  • location
  • pages visited (on this site)
  • opened links
  • visit duration
  • source of arrival.

This website may contain embedded content from other sources. Loading or opening embedded content is comparable to the user visiting a third-party website themselves.

TARGETING COLLECTED DATA TO INDIVIDUALS

No collected data can be targeted to individuals, as IP addresses and other identifiers of individuals have been removed from reports. Google Analytics reports provide indicative numbers regarding visitor counts, information about their devices, and behavior on this website.