This policy describes how Northern Adventures Oy collects, processes, and protects its customers’ personal data in accordance with the EU General Data Protection Regulation (GDPR).
Data Controller:
Northern Adventures Oy
Business ID: 3541194-2
Address: Haanpäänpolku 20, 97110 Rautiosaari, Finland
Contact person: Janne Takkinen, info@northernadventures.fi
What data do we collect
We collect only the data necessary for providing the service at the time of booking:
● Name, email address, and phone number.
● Details of the booked service (date, time, number of participants).
● Any additional information provided by the customer (e.g., allergies or special requirements).
● Information related to the payment transaction (note: we do not store credit card numbers; they are processed securely by the payment provider, such as Stripe).
What do we use the data for
The data is used for the following purposes:
● Confirming and managing bookings.
● Communication related to the service (e.g., reminders and possible changes).
● Invoicing and accounting.
● Compliance with legal obligations.
Disclosure of data to third parties
We use trusted partners to provide our services. Data may be disclosed to:
● The Bokun booking system: For managing bookings.
● Payment service providers: For secure payment processing.
● Sales channels (such as Viator or GetYourGuide): If the booking was made through these platforms.
● Authorities: In cases required by law.
Data retention period
We retain personal data only for as long as necessary to provide the service or to comply with accounting legislation. After this, the data is deleted or anonymized.
Customer rights
You have the right to:
● Access the data concerning you.
● Request correction of inaccurate data.
● Request deletion of your data (“right to be forgotten”) if there is no legal basis for retaining it.
● Withdraw your consent to marketing communications.
Requests: info@northernadventures.fi