Privacy related to services provided by Ruka-Kuusamo Tourist Association

1. Data Controller: Ruka-Kuusamo Tourist Association, Rukatunturintie 9, 93830 Rukatunturi.

2. Person Responsible for Register Matters: Ruka-Kuusamo Tourist Association, Rukatunturintie 9, 93830 Rukatunturi, Sari Kumpuniemi, sari.kumpuniemi@rukakuusamo.fi.

3. Name of the Register: Customer register for services on the Ruka.fi website.

4. Legal Basis for Personal Data Processing: The processing of customer information is based on the data controller's legitimate interest or a contract between the data controller and the data subject.

5. Purpose of Personal Data Processing: Management and development of the customer relationship, such as the sale and purchase of services, confirmation of online purchases, and identification of online reservations. Marketing and communication by the company and its partners. Development of partners’ business and customer service.

6. Content of the Register: The data controller processes the following personal data of customers:

• Customer's first and last name, date of birth, phone number, address, email address
• Nationality
• Information related to activity bookings (value of booking, booked service, special diets)
• Customer payment information
• Information on the use or purchase of services
• Information related to customer behavior, choices, and preferences
• Possible customer feedback and complaint information

7. Profiling: As part of the processing activities of personal data stored in the customer register, Ruka-Kuusamo Tourist Association may use the information for profiling purposes. Profiling is done by creating a customer identifier for the registered individual, allowing various data arising from the use of the service to be combined. Profiles created in this way can then be compared to profiles created for other registered individuals. The purpose of profiling is to determine the demand for services and customer behavior.

8. Regular Data Sources: Data is collected from customers at the time of booking, from the registered person themselves. Additionally, data is collected on the use of services, from information on purchases, or possibly from third parties. By accepting Ruka-Kuusamo Tourist Association's communication and marketing, you give permission for your personal data to be stored and processed so that you can be sent the content you subscribed to via email.

9. Recipients of Personal Data: The data controller uses subcontractors or subcontractors to implement its services, which require personal data to implement their own service.

10. Data Transfer Outside the EU: According to data protection legislation, personal data may be transferred outside EU member states or the EEA to the extent that the European Commission has found that the country in question ensures an adequate level of data protection. Ruka-Kuusamo Tourist Association uses partners located outside the EU or EEA for customer management, customer service, marketing support, technical support, and analytics. When transferring user personal data outside the EU or EEA, we use data transfer mechanisms approved by the European Commission, such as standard contractual clauses. Ruka-Kuusamo Tourist Association is responsible for third-party data processing in accordance with data protection legislation.

11. Retention Period for Personal Data: Customer personal data stored in the customer register is processed for the duration of the customer relationship. The data controller considers the customer relationship to have ended if the customer has not used the company's services for twenty (20) years. The time is calculated from the end of the calendar year when the customer last used the company's services. The data is deleted within six (6) months after the customer relationship has ended unless there is another reason for retaining the data.

After the end of the customer relationship, data can still be stored and processed if it is necessary for handling complaints. The retention period for data in the customer register also follows legally mandated retention periods, such as accounting laws. Data required by accounting laws are kept for as long as the accounting law requires.

When data is processed based on a contract between the data controller and the registered individual, the data is kept for as long as needed to fulfill the contract. Once the contract is executed, the data is kept for as long as the customer relationship exists or there is another basis for processing (e.g., complaint cases or accounting laws).

1. Data Controller: Ruka-Kuusamo Tourism Association (Ruka-Kuusamo Matkailu ry), Rukatunturintie 9, 93830 Rukatunturi.

2. Person Responsible for the Register: Ruka-Kuusamo Tourism Association, Rukatunturintie 9, 93830 Rukatunturi, Administrative Manager Suvi Juntunen, suvi.juntunen@rukakuusamo.fi. We will respond to questions and feedback about the registry within two working days.

3. Register Name: Ruka-Kuusamo Tourism Association's Membership Register.

4. Legal Basis for Processing Personal Data: The processing of personal data is based on the data controller’s legitimate interest or on an agreement between the data controller and the data subject.

5. Purpose of Processing Personal Data (Purpose of the Register): Ruka-Kuusamo Tourism Association’s membership register, invoicing of membership fees, management of matters related to membership. The information will not be used for direct marketing or advertising.

6. Content of the Register: The register may contain the following categorized information about members:
Official name and trade name of the company
Email address
Address and telephone details
Billing address
Turnover information by sector
Previous year’s membership fee information
Company's email address, website
Company's marketing contacts (name and email address)
Other contacts concerning Ruka-Kuusamo Tourism and the company: names, titles, email addresses, phone numbers, information on receiving the membership newsletter

7. Regular Sources of Data: The register is compiled by the staff of Ruka-Kuusamo Tourism Association individually and is based on communication with the people listed in the register.

8. Regular Disclosures of Data: The data controller does not disclose address information to external parties, except as required by Finnish authorities.

9. Data Deletion: Data can be deleted at the request of the address holder.

10. Principles of Register Protection: Personal data is kept confidential. The data network and hardware, on which the register is located, are protected by a firewall and other necessary technical measures.

11. Right to Object: The address holder has the right to prohibit the disclosure and processing of their information for direct advertising and other marketing.

1. Data Controller: Ruka-Kuusamo Tourism Association (Ruka-Kuusamo Matkailu ry), Rukatunturintie 9, 93830 Rukatunturi.

2. Person Responsible for the Register: Ruka-Kuusamo Tourism Association, Rukatunturintie 9, 93830 Rukatunturi, International Sales Manager Kimmo Ratiainen, kimmo.rautiainen@rukakuusamo.fi.

3. Register Name: Ruka-Kuusamo Tourism Association's Travel Organizers and Media Registry.

4. Legal Basis for Processing Personal Data: The processing of personal data is based on an agreement between the data controller and the data subject.

6. Purpose of Processing Personal Data (Purpose of the Register): The registry for Ruka-Kuusamo Tourism Association’s partners such as travel organizers, airlines, and media representatives. The information will be used for direct marketing regarding the offerings of the area.

6. Content of the Register: The register may contain the following categorized information about members:
Person's first and last name, phone number, address, email address
Company's name, email address, website
Information about contact with the person
Information on whether the person wants to receive direct marketing

7. Regular Sources of Data: The register is compiled by the staff of Ruka-Kuusamo Tourism Association individually and is based on communication with the people listed in the register.

8. Regular Disclosures of Data: The data controller will disclose information to representatives of their member companies in a separately agreed manner (aiming for commercial cooperation). 

9. Data Deletion: Data can be deleted at the request of the address holder.

10. Principles of Register Protection: Personal data is kept confidential. The data network and hardware, on which the register is located, are protected by a firewall and other necessary technical measures.

11. Right to Object: The address holder has the right to prohibit the disclosure and processing of their information for direct advertising and other marketing.
 

1. Data Controller: Ruka-Kuusamo Tourism Association (Ruka-Kuusamo Matkailu ry), Rukatunturintie 9, 93830 Rukatunturi.

2. Person Responsible for the Register: Ruka-Kuusamo Tourism Association, Rukatunturintie 9, 93830 Rukatunturi, Event Producer Niina Kukka, niina.kukka@rukakuusamo.fi.

3. Register Name: Ruka-Kuusamo Tourism Association and the City of Kuusamo Performer Registry.

4. Legal Basis for Processing Personal Data: The processing of personal data is based on an agreement between the data controller and the data subject.

5. Purpose of Processing Personal Data (Purpose of the Register): Registry of service providers performing in events marketed by Ruka-Kuusamo Tourism Association and the City of Kuusamo. The information in the register is used to assist event organizers in event production.

6. Content of the Register: The register may contain the following categorized information about members:
Person's first and last name, phone number, address, email address
Possible company name, email address, website
Service provided by the person and/or company

7. Regular Sources of Data: The register is compiled by the staff of Ruka-Kuusamo Tourism Association individually and is based on communication with the people listed in the register.

8. Regular Disclosures of Data: The data controller will disclose information to representatives of the City of Kuusamo and event producers in a separately agreed manner (aiming for the development of event production).

9. Data Deletion: Data can be deleted at the request of the address holder.

10. Principles of Register Protection: Personal data is kept confidential. The data network and hardware, on which the register is located, are protected by a firewall and other necessary technical measures.

11. Right to Object: The address holder has the right to prohibit the disclosure and processing of their information for direct advertising and other marketing.

Data subjects have the right to request access to their personal data to ascertain whether or not their data is being processed.

They generally have the right to know what information about them has been stored in the customer register. The data controller can ask the data subject to specify what information or processing activities their request pertains to.

The right to access information may be restricted or denied under GDPR if providing the information would adversely affect the rights and freedoms of others. Such protected rights include, for example, the trade secrets of the data controller or another person's personal data. The right may also be restricted by national legislation (e.g., the Data Protection Act).

Data subjects have the right to demand that the data controller rectify without undue delay any inaccurate or incorrect personal data concerning them.

The data controller must, upon request by the data subject, erase their personal data without undue delay if any of the following conditions are met:

• Data is no longer needed for the purposes for which they were collected or otherwise processed.
• The data subject opposes the processing and there is no justified reason for the processing.
• The data subject opposes the processing for direct marketing (though processing may still be possible for other purposes).
• Data has been processed unlawfully.

Data subjects have the right to object to the processing of their data based on their specific personal situation when the data is processed based on legitimate interest.

Data subjects do not have the right to object to data processing when it is based on a contract between the data controller and the data subject.

If the registered individual has objected to the processing of their data based on a specific personal situation, they must identify the special circumstance on which they base their objection to processing carried out on legitimate interest grounds. The data controller may continue processing the data despite the objection if there are significantly important and justified reasons that override the registered individual's interests, rights, and freedoms, or if it is necessary for the establishment, exercise, or defense of legal claims.

The registered individual has the right to object at any time to the use of their personal data for direct marketing purposes. If the registered individual objects to the use of their personal data for direct marketing, the data may no longer be processed for this purpose.

The data controller must, upon the request of the data subject, restrict the active processing of personal data in the following situations:

• The data subject disputes the accuracy of the personal data.
• The processing is unlawful and the data subject requests restriction instead of erasure.
• The data controller no longer needs the data but the data subject requires it for legal claims.
• The data subject has objected to the processing and the evaluation of whether the legitimate grounds of the data controller override those of the data subject is pending.

To the extent that the data subject has provided data that is processed automatically and based on a contract between the data controller and the data subject, the data subject has the right to receive such data in a generally machine-readable format and to transfer the data directly from one data controller to another, if technically feasible.

Data subjects have the right to file a complaint with the competent supervisory authority if they believe that the data controller has not complied with applicable data protection regulations.

For questions related to data processing and exercising their own rights, data subjects can contact the person mentioned in section 2 of each register's privacy clause.

Requests for access rights or other requests related to exercising the data subject's rights should be made in writing, either by email or by post. The request can also be presented in person at the data controller's location. The data controller may ask the data subject to specify adequately what data or processing activities the request pertains to.

The Ruka-Kuusamo Matkailu ry website, maintained in collaboration with Rukakeskus Oy, uses cookies to ensure the site's functionality and to improve user experience. These performance and user experience cookies are essential for the functionality of the website. With your consent, we use cookies for data collection, usage, and storage, as well as for statistics. Additionally, with your consent, we use third-party cookies for site usage analysis, targeted advertising and marketing, and content personalization. By using our web service, you accept the use of cookies.

Some cookies are session-specific, disappearing when you leave the website. Some cookies are permanent and remain for a certain period (from a few days to several months). Detailed retention times for third-party cookies can be found in the service providers' cookie policies.

More information about cookies and online marketing on youronlinechoices.com. 

You can disable cookies by changing your browser settings. Disabling cookies may impair the service's functionality and user experience.

The website and services maintained in collaboration with Rukakeskus Oy contain links and connections to third-party websites as well as so-called social extensions (e.g., Facebook community plugins, Bokun booking service embeds). Plugins maintained by third parties on the sites are loaded from these services' own servers.

Terms and conditions of use and other terms of the third-party services or third-party extensions available on the sites and services are subject to that third party’s current cookie and privacy policies.