Lapland Villas

Privacy policy

Register and Privacy Policy

This is the Lapland Villas Privacy and Data Protection Statement in accordance with the EU General Data Protection Regulation (GDPR). Established 29.04.2025.

Data Controller

Lapland Chalets Oy

+358415474077

Kiviniemi Rantatie 3 A,
FIN-90810 Kiviniemi

Data Protection Requests

Data protection requests are handled by Louru Oy.

Name of the register

Lapland Villas online service user register.

Purpose of processing personal data

The purpose of processing personal data is to maintain contact with customers, manage customer relationships, and conduct marketing activities. Additionally, collected data may be used for the development of the online service. No automated decision-making or profiling is carried out based on the data.

Data content of the register

The following information may be stored in the register: -Name of the person -Company name -Contact details (phone number, email address, postal address) -Website addresses -Information about ordered services and any changes to them -Billing information -Other information related to the customer relationship and ordered services

Data will be retained until further notice.

Regular Sources of Data

Data stored in the register is obtained from the customer via email, phone, social media services, contracts, customer meetings, and other situations where the customer provides their information.

Information about company and organizational contact persons may also be collected from public sources such as websites, directory services, and other companies.

Transfer of data outside the EU or EEA

Data will not be regularly disclosed to third parties. Data may be published only to the extent agreed upon with the customer. Data may also be transferred by the controller outside the EU or EEA.

Principles of Register Protection

The data controller ensures that all stored information, as well as server access rights and other critical personal data security aspects, are handled confidentially and only by employees whose job duties require it.

Risks

Risks related to personal data include, for example, data breaches. Personal data stored in the register is protected against unauthorized access and against accidental or unlawful destruction, alteration, disclosure, transfer, or other illegal processing.

Right of Access and Rights Related to the Processing of Personal Data

Every individual whose data is stored in the register has the right to access their information and to request correction of any incorrect or incomplete data.

If a person wishes to check what information has been stored about them, request correction, or ask for their personal data to be deleted, the request must be sent in writing to the data controller. The controller may request verification of the requester’s identity if necessary. The controller will respond to the customer within the time frame specified in the EU General Data Protection Regulation (usually within one month).

Cookies and visitor tracking

Visitor information and statistics from the website are stored via the Google Analytics web analytics service, which operates on Google’s servers that may also be located outside the EEA (in Privacy Shield countries).

What are cookies?

Cookies are small text files stored on the user’s device when visiting a website. Each time a visitor returns to the site, these cookies are sent back to the website that recognizes them. Cookies can be used to identify the user’s device, store user preferences, save login information, and implement visitor tracking to improve the user experience and target advertising.

Cookies Used on this Website

This website uses the Google Analytics web analytics service, which employs cookies for visitor tracking. Google Analytics cookies may collect information about, for example:

  • The user’s device

  • Location

  • Pages visited on this website

  • Links opened

  • Visit duration

  • Source of visit

This website may also contain embedded content from other sources. Loading or opening embedded content is comparable to visiting the third-party website directly.

Personal Identification in Collected Data

No collected data can be used to personally identify visitors, as IP addresses and other identifying details have been removed from the reports. Google Analytics reports provide indicative figures about the number of visitors, information about their devices, and general behavior on this website.

See also: