Data protection

Date 16.12.2020

Controller

Koihu Adventures Oy / Business ID: 2833138-9

Huhuksentie 42, 81415, Huhus

Päivi Lehtinen

Tel: +358 405002084 | Email address info @ koihu.com

This Privacy Statement explains how Koihu Adventures collects and processes your personal information, and what your rights are with respect to your personal information. Personal information means information that can be linked to you directly or indirectly.

Collection of personal information

We collect your personal information when you make a booking of a cottage or activity on our website or on the website of our partner. We only process the information you provide when making your booking, either on the website, by email or by phone, or you register or make booking contract with us on paper. 

Purpose and legal basis of the processing of your personal data

We collect personal information in order to deliver the service you have booked or purchased in accordance with our agreement. In addition, we process information about services ordered by customers for targeted communication about the service, or collecting feedback, as well as for marketing purposes based on a legitimate interest or consent.

Personal data groups

We process basic personal information such as name, address, email address and telephone number for the purposes described above. In the case of food service orders, we can also ask about food allergies or restrictions.

Data disclosures and data transfers outside the EU or the European Economic Area

We do not share your information with third parties or outside the EU or the EEA. You may make booking on our cottage and outdoor activity service through partner which may process the data outside the EU or the EEA. We may disclose your information to our Finnish partners for the implementation of the service.

Subprocessors

To provide services and enable a customer-friendly booking and service platform, we use partners. Cottage bookings made through our website are on AtFlow Oy's platform. Cottage reservations can also be made through Booking.com, Airbnb or Lomarengas Oy, in which case they are also deposited on our website via the Smoobu GmbH platform.

Many of our outdoor activity packages are booked through the Bokun.io platform.

Cookies

We automatically receive and store data for use in Google Analytics. The information includes, for example, page visits, web browser name, and version. Google Analytics data, which we use, is not personally identifiable and is used only for statistical purposes and to evaluate the effectiveness of marketing.

Security principles

The reservation information stored in Koihu.com booking platfrom is stored in the partner's system, access to which requires the entry of a username and password. The system is protected by a firewall. Only certain, pre-defined employees of the controller and the service provider have access to and are entitled to use the information contained in the register stored in the system.

Only separately designated Koihu Adventures Oy representatives are entitled to use the system containing customer information and to change customer information. The customer register and the information system equipment processing it are located in Finland, in locked premises closed to outsiders, and only relevant persons have access to it.

The data is regularly backed up. Persons handling the Koihu.com booking service's customer register information are bound by professional secrecy.

Rights of the data subject - meaning you

Right of access 

You have the right to inspect and obtain copies of the personal data stored with KoiHu Adventures Oy. The request for accss must be made in writing.

Correcting information

You have right to correct your data and, if necessary, supplement it. The data subject must contact the data controller in writing.

Right to object to processing

You have the right to oppose the processing of personal data by KoiHu Adventure Oy or by our parterner if the legal basis for the processing is legitimate interest, and if your personal situation displace such a legitimate interest. We may reject a request if processing is necessary to exercise our mandatory and legal rights. You may object to the processing of your personal data for direct marketing purposes at any time.

The right to be forgotten

You can ask us to delete your personal data if there is no valid reason to continue processing it, for example if you consider the processing of your personal data is unnecessary for the purposes described above or if you wish to withdraw your consent.

Right to restrict data processing

You have the right to request Koihu Adventure Oy to restrict the processing of your personal data in certain circumstances, for example for the period of ensuring the correctness of personal data.

Retention of personal data

Your personal information will only be kept for as long as is necessary for the purposes of the processing. This may be to meet legal, accounting or reporting requirements as described in this Statement.

Personal information processed under a contractual relationship with you is generally retained for the period necessary to provide the services. When a customer relationship or service is terminated, personal information will be retained, to the extent necessary, for the other purposes described in this statement, such as collecting feedback. We may also retain personal information to the extent necessary to comply with your direct marketing request.

Personal data processed on the basis of a legitimate interest shall be processed for as long as there are grounds for their processing. If you object to such processing, your information will be deleted. An example of such treatment is direct marketing.

In order to fulfill our legal obligations, personal data will be stored in accordance with the requirements of the law. The obligation to retain personal data is regulated, for example, in accounting legislation.

The retention period of personal data processed on the basis of consent is determined by the purpose of the processing.

The right to give and withdraw consent

If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time.

How to exercise your rights

You can exercise your rights by sending your request to info (at) koihu.com. If you consider that the processing of your personal data is not appropriate, you may contact the Data Protection Authority in Finland.