Privacy Policy for Marketing and Customer Registers
1. Data Controller
SkiOne Group Oy
Huippupaikat Oy
Vuokatinrinteet, Tahko Mountain, and Kasurila Ski Resort
Ilkantie 8, 88610 Vuokatti
toimisto@vuokatinrinteet.fi / info@tahkomountain.fi / hiihtokeskus@kasurila.com
Contact: Lauri Suutarinen, lauri@skione.fi / +358 50 597 5397
2. Name of the Register
Marketing and Customer Register
3. Purpose of Processing Personal Data
We collect and process personal data to provide services to our customers and for marketing communication purposes. The data is processed for the following purposes:
- Customer Relationship Management: Personal data is collected during online purchases, accommodation bookings, lift ticket sales, ski school services, and equipment rentals to support customer service, bookings, and payment processing.
- Marketing and Customer Communication: Data is used for targeted marketing and promotional activities such as newsletters, campaigns, and customer updates.
- Website Usage Tracking and Analysis: Data is collected to monitor website and online store usage to improve our services and enhance user experience.
4. Processed Personal Data
We collect the following personal data to provide our services:
- Contact Information: Name, email address, phone number, date of birth/age
- Photograph: For ski passes
- Weight and Skill Level: For equipment rental services
- Personal Identity Code: For accommodation services and equipment rental
- Customer Service Information: Data from bookings and customer service interactions (e.g., accommodation, ski passes, ski school, and equipment rental)
- Communication Data: Information collected during customer communication and marketing activities
- Website Behavior Data: Cookies and analytics tools tracking website usage (e.g., visits, purchase history)
5. Legal Basis for Processing Personal Data
Personal data is processed based on the following legal grounds:
- Contractual Obligation: To fulfill customer relationships and provide services (e.g., bookings, purchases).
- Consent: For sending marketing communications to customers who have provided their consent. Consent can be withdrawn at any time.
- Legitimate Interest: For developing the website and services, improving customer experience, and supporting business operations.
6. Data Retention Period
Personal data is retained as long as necessary for managing the customer relationship, in accordance with legal requirements (e.g., accounting obligations), and for marketing purposes unless the customer requests data deletion. Marketing data will be deleted if the customer withdraws consent or requests deletion. Data related to online purchases will be retained for six years to comply with accounting obligations.
7. Recipients of Data
Personal data may be shared with:
- Service Providers and Subcontractors: Data may be transferred to partners and subcontractors providing technical, payment processing, or customer service-related services (e.g., payment services, website maintenance).
- Authorities and Legal Compliance: Data may be disclosed to authorities, such as tax authorities, as required by law.
8. Transfer of Data Outside the EU
Personal data may be transferred outside the EU when necessary for providing services, such as online payment processing or customer service. These transfers are carried out in compliance with the GDPR using standard contractual clauses approved by the European Commission or other appropriate safeguards, such as encryption, data security measures, or specific contractual arrangements.
9. Rights of Data Subjects
Customers have the following rights regarding their personal data:
- Right of Access: Request a copy of personal data being processed. Requests must be submitted in writing.
- Right to Rectify Data: Request the correction of inaccurate or incomplete data.
- Right to Erasure: Request the deletion of personal data that is no longer necessary or unlawfully processed.
- Right to Restrict Processing: Request the restriction of data processing under certain conditions.
- Right to Data Portability: Request the transfer of personal data to another service provider.
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.
To exercise these rights, please contact the respective ski resort using the following details:
Vuokatinrinteet: toimisto@vuokatinrinteet.fi
Tahko Mountain: info@tahkomountain.fi
Kasurila Ski Resort: hiihtokeskus@kasurila.com
10. Complaints and Data Protection Authority
If you believe that your personal data is being processed unlawfully, you have the right to file a complaint with the data protection authority.
For more information, visit: https://tietosuoja.fi/en/home
11. Cookies and Website Tracking
Our website uses cookies to enhance user experience and deliver targeted advertising. The cookies we use include:
- Functional Cookies: Enhance the functionality of the website.
- Analytics Cookies: Collect information on user behavior.
- Marketing Cookies: Target advertising based on user preferences.
You can manage cookie settings in your browser. If you do not accept cookies, you can adjust your settings at any time.
12. Changes to the Privacy Policy
This privacy policy may be updated periodically, and all changes will be published on this page. We recommend reviewing the policy regularly.
Last updated: 18 November 2024