Book accommodation

Privacy Statement

Privacy Statement

Personal Data Act (523/99) Section 10
Date of Preparation: January 14, 2013


DATA CONTROLLER

Hullu Poro Oy (Hotel Merihovi)
Keskuspuistokatu 6-8, 94100 Kemi, FINLAND
Tel: +358 40 6853 500


PERSON RESPONSIBLE FOR REGISTER MATTERS

Pirita Laru
Keskuspuistokatu 6-8, 94100 Kemi
Tel: +358 40 6853 500


REGISTER NAME

Hotel Merihovi’s Marketing and Customer Register


PURPOSE OF THE REGISTER

The data controller processes customers’ personal data for the following purposes:

  • Establishment, implementation, management, billing, and enforcement of the customer relationship.

  • Implementation of communication, analysis, statistics, maintenance, and development activities required by the customer relationship or a similar connection.

  • Monitoring, analyzing, and developing customer service related to customer preferences and choices concerning accommodation and dining.

  • Marketing of Oy Sea Lapland Hotels & Restaurants’ goods and services.

  • Various direct marketing activities such as sending brochures, informing about new products via email, and remote sales.

  • If the customer has given consent, the register may be used for mobile marketing of Oy Sea Lapland Hotels & Restaurants’ services.

  • Development of Oy Sea Lapland Hotels & Restaurants’ business operations and management of customer relationships.

  • Taking customer wishes into account and developing customer service and targeting offers.

  • Proper identification of individuals participating in competitions or other activities.

The processing of personal data is based on Section 8, Paragraph 1, Points 1, 2, 5, and 6 of the Personal Data Act.
The goal is to act in a customer-oriented manner, respecting privacy and taking into account the customer’s various purchasing and communication habits. Customer data in the register is not disclosed to parties outside Oy Sea Lapland Hotels & Restaurants.


REGISTER DATA CONTENT

The user-specific data content of the register may vary depending on how the user interacts with the services.

Customer Data Collected and Stored:

  • Customer Information: Name, date of birth, customer number, contact information (e.g., phone numbers, email address, and other electronic addresses) for communication, gender, nationality, number of adults and children staying with the customer, and billing information.

  • Booking and Reservation Information:

    • Reservation details (e.g., previous and upcoming reservations).

    • Information related to the use of services: usage, purchase, and cancellation details.

    • Information related to customer preferences and choices.

    • Payment methods, payment behavior information, and billing details.

    • Customer’s consent to direct marketing via email, text message, and other automated systems.

    • Legally required opt-out information for direct advertising, remote sales, and other direct marketing.

    • Other information collected with the customer’s consent (e.g., details about physical limitations, injuries, or illnesses necessary to fulfill requested services).


REGULAR DATA SOURCES

Information is collected from the customer when using online store services, participating in activities requiring information on the website, providing information during reservations or accommodation, or completing the Hullu Poro loyalty membership form.


REGULAR DATA DISCLOSURES AND DATA TRANSFER OUTSIDE THE EU OR EEA

No transfer of data, except upon request to relevant parties and for use by authorities.


PRINCIPLES OF REGISTER SECURITY

A) Manual Material:
Stored in locked and monitored facilities of Oy Sea Lapland Hotels & Restaurants, accessible only to authorized personnel.

B) Data Stored on Computer Systems:

  • Access to the register is limited to employees of Oy Sea Lapland Hotels & Restaurants who need the information for their duties.

  • They have user IDs and passwords.

  • Data is stored within the closed network of Oy Sea Lapland Hotels & Restaurants, which is technically protected by a firewall.

Personnel handling the data are subject to confidentiality obligations under Section 33 of the Personal Data Act and penalty provisions under Section 48.


DATA SUBJECT’S RIGHTS

Register Review:
Anyone wishing to review their personal data must submit a request to the data controller with a handwritten signature or personally visit the data controller’s premises.