This policy explains how we handle personal data in connection with the Northern Lights Villas website, our marketing, the management of customer relationships, and the accommodation and services we provide.
We collect the personal data needed to answer your enquiry and to look after a customer relationship. In practice that means:
Most of this comes from you directly, through the enquiry form or by email. We may also use publicly available official registers, such as the Finnish Trade Register, where we are dealing with a company rather than a private individual.
Bookings themselves are not made on this website. They are completed through our booking platform or through Booking.com or Airbnb, each of which handles your data under its own privacy terms as well as ours.
Where processing rests on your consent, you may withdraw that consent at any time by writing to the contact address above. Withdrawal does not affect processing that took place beforehand.
Where processing rests on legitimate interest, we have weighed the benefit to us against the effect on you and concluded that your rights and interests are not overridden. We will explain that assessment on request.
Access is limited to the people responsible for handling customer relationships and marketing.
We use service providers to run the business — website hosting, the booking platform, email, and accounting and financial administration. These act on our instructions under the data processing agreements required by data protection law.
Personal data may also be disclosed where the law or an authority requires it, to investigate misuse, to ensure security, or in the course of legal proceedings. If the company takes part in a merger, business sale or similar arrangement, personal data may be disclosed to the parties involved. We will provide further detail about recipients on request.
Personal data is not transferred outside the European Union or the European Economic Area unless it is necessary for the technical operation of a service. Where a transfer does take place, we apply the level of protection and safeguards required by data protection law, and we will explain the mechanism used on request.
A cookie is a small text file your browser stores on your device. This website uses only the cookies our hosting provider needs to serve the pages and keep them working. We do not currently run advertising or analytics cookies on it.
If that changes and we introduce analytics or advertising tools, we will ask for your consent first through a cookie notice, and you will be able to change or withdraw that consent at any time.
We protect personal data with appropriate technical and organisational measures. Data is held in databases protected by firewalls, passwords and other technical safeguards, and only named individuals have access.
We keep personal data for as long as it is needed for the purpose it was collected for, for as long as a contract requires, or for as long as law and regulation require — bookkeeping records, for example, must be kept for a set period. After that it is properly destroyed.
As a data subject you have the right to:
Send requests in writing or by email to Karl Pärn at marketing@booklapland.fi, marking them as a request concerning personal data. We may verify your identity before acting on a request. We respond within one month unless there is a particular reason to extend that period, in which case we will tell you.
If you believe your personal data has been handled contrary to data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Finland this is the Office of the Data Protection Ombudsman; its contact details are published at tietosuoja.fi.