REGISTRY STATEMENT IN ACCORDANCE WITH THE EUROPEAN UNION DATA PROTECTION REGULATION

This description of personal data describes and specifies the principles governing the processing of personal data.

The description describes, among other things:

• How our company handles customer data
• What kind of personal information do we collect?
• For what purposes may we use the personal information we collect
• How registries containing personal information are protected

We process our customers’ personal data in accordance with the EU Data Protection Regulation and Finnish national data protection legislation.

This privacy statement may be updated from time to time, for example as legislation changes.

Updated 4.5.2022

REGISTRAR, NAME AND CONTACT DETAILS OF THE REGISTER

PP Pello Travel Oy (business ID 3239073-6 ) (later also “Company”, “Me”)
Ka hdeksas huvilatie 4 b
02730 Espoo

Contact person:

Pekka Roos
[email protected]
+358 500 443 046

Registry name:

Customer information register

PURPOSE OF THE PROCESSING OF PERSONAL DATA

The registrar processes customers’ personal data for the following purposes:

• Providing the services of a registrar to customers
• Continuous management and development of customer relationships and reservations
• Payment of reservations, control of payments and collection
• Development of the registrar’s business and related service development
• Monitoring, analyzing and related service development of potential customers’ interest information and accommodation-related choices and wishes
• Taking into account the wishes of customers and developing the service and targeting the offer

Personal data will be processed for the purposes of customer relationship management and communication, business and service and product development, analysis and statistics, data controller publications, newsletters and marketing messages, direct marketing, opinion or market research, or other similar addressed broadcasts, including electronic direct marketing. Personal information may also be processed to create classifications, groups or profiles and to target marketing to the data subject.

The processing of personal data is based on the legitimate interest of the controller and / or the consent of the data subject. Based on the processing, a legitimate advantage is the need for the controller to market its products and services efficiently and the development of services.

INFORMATION CONTENT OF THE REGISTER

The register contains the following identification data of persons, if the person has provided them:

• First name, last name, local address, zip code, post office, country, phone number, and email address
• Customer feedback and contacts
• Information about your use of our services, such as website browsing and search information
• Booking information (eg past and future bookings)
• Customer payment method and payment behavior information (including late payment information) and billing information
• Statutory prohibitions on direct mail, distance selling and other direct marketing (eg removal of a newsletter from a mailing list)
• Other information collected with the customer’s consent that is necessary to perform the service requested by the customer

REGULAR SOURCES OF INFORMATION

Information about customers is obtained with the customer’s consent from himself and from events related to the booking and purchase of the desired services (during the booking and purchasing process). The register contains information provided by the person about themselves, for example by e-mail or otherwise. In addition, information can be collected from open websites and other open databases.

REGULAR DATA RELEASES

The information will not be disclosed to third parties without an order from the authority. The controller will not disclose customers’ personal data to third parties for marketing purposes or opinion and market research. The data will not be disclosed outside the EU or the European Economic Area.

DATA COLLECTION

Personal data is collected when the customer makes reservations and collects personal data from the registrant himself, customer surveys and lottery and competition responses, customer data updates, and invoicing and payment control.

DATA RETENTION

The information in the register may be kept for as long as it is needed for the purpose for which it was collected and processed, or for as long as required by law and regulations. However, the data will be deleted immediately if the data subject withdraws his or her consent or otherwise exercises his or her right to be forgotten.

PRINCIPLES FOR THE PROTECTION OF THE REGISTER

Registry information is collected on systems to which users of the information have specific access rights. Use requires a personal username and login to the information system. The register is protected by appropriate technical measures.

RIGHT OF INSPECTION

Every data subject has the right to know what information about him or her has been stored in the register or to find out whether he or she is in the register. In principle, the data subject has the right, in accordance with the applicable data protection legislation:

• to be informed about the processing of their personal data;
• gain access to their own data;
• demand the correction of inaccurate and incorrect personal data;
• request the restriction of processing or the deletion of their personal data; and
• withdraws his consent and objects to the processing of his personal data insofar as the processing of personal data is based on the consent of the Data Subject and there are no other grounds for it.
• the right to transfer data from one system to another, ie to obtain personal data concerning oneself in a structured and publicly available form, and to transfer them to another controller.
• the right to lodge a complaint with the competent supervisory authority (in Finland) if, in the customer’s opinion, the controller has not acted in accordance with the EU Data Protection Regulation and Finnish national data protection legislation.
• the right to have his or her data deleted and forgotten.

To the extent that the customer is able to act himself, he shall, without undue delay, upon receipt of the error or, if he detects the error himself, rectify, delete or supplement the information in the register that is inappropriate, unnecessary, incomplete or out of date. A written request for rectification may be addressed to the registry contact person. The person must submit a request for the right of inspection in writing, stating at least his or her name and e-mail address. The person concerned must make a request for inspection either by e-mail or by handwritten letter. Requests for verification and information are not received by telephone, but we always require a written request for verification of information. Necessary and appropriate measures to identify the person shall be taken prior to the investigation and / or disclosure to the data subject.

PAGES MAINTAINED BY PP PELLO TRAVEL OY ON SOCIAL MEDIA

PP Pello Travel Oy maintains pages on social media. If you like a social media page hosted by the Company, comment on a post, or otherwise interact with the social media pages listed above, we will make your public profile information, such as your username and profile picture, visible to all their users.

We process data e.g. to report on the sites, services, events we manage, to conduct marketing campaigns, to receive feedback, to purchase advertising on social media, and to measure the effectiveness of our advertising. If you have provided feedback, contacted us or made a complaint on the social media page, we may direct the handling of the contact, feedback or complaint outside of these, in which case we will process your information in the same way as in other customer service situations.

We also receive traffic information from our social media pages that is collected by social media service providers when users visit our Company’s pages or interact with those pages or their content. Such aggregated statistics help us understand how users interact with the Company on its social media pages.

PP Pello Travel Oy processes the information on its social media pages on the basis of a legitimate interest.