Privacy Policy

Privacy Policy – Ylöstalo
Ylöstalo’s tourism operations process customers’ personal data in accordance with the EU General Data Protection Regulation (GDPR) and Finnish legislation. This privacy policy describes what information we collect, for what purpose, and how it is protected.
 
Data controller
Ylöstalon matkailupalvelut / Ylöstalo
Norrbyntie 135, 25630 Särkisalo, Finland
Website: www.ylostalo.fi
Business ID: 1508094-7
Person responsible for processing personal data
Hilkka Karimo
Email: info (att) ylostalo.fi
Phone: +358 40 568 6929
Henkilötietojen käsittelyn tarkoitus


We process customers’ personal data for the following purposes:
–    receiving and managing reservations for cottages and other services
–    managing customer relationships
–    communicating with customers about reservations
–    processing payments, sending receipts, and fulfilling accounting obligations
–    collecting feedback and developing services
–    fulfilling obligations required by accommodation legislation (passenger notification)
–    Communication with customers (e.g., booking confirmations, pre-arrival messages)
–    Newsletters and targeted marketing with the customer’s consent
Information will not be disclosed for external direct marketing without the customer’s express consent.
 
Data content of the register
The following data may be stored in the register:
–    name, address, email address, telephone number
–    reservation details (dates, cottage, number of persons)
–    details of any additional services
–    payment method and billing details
–    customer feedback or complaints
–    special requests (e.g., mobility restrictions) – only with the customer’s consent
–    passenger information (required by law)
 
Regular sources of information
Personal data is obtained:
–    from the customer during the booking process (online form, email, telephone)
–    during subsequent customer interactions and communications
–    from the passenger declaration form completed upon arrival
–    from customer feedback
Tietojen luovutukset ja siirrot
Information will only be disclosed to the extent necessary for the provision of the service:
–    to cleaners, caretakers, or key holders – only for the purposes of their own duties
–    to the accounting firm for accounting purposes
–    to authorities as required by law (e.g., the police in matters relating to passenger information)
Data will not be transferred outside the EU/EEA.
 
Data protection principles
–    Only persons who need access to the data for their work tasks will have access to it.
–    The systems are protected by passwords and firewalls.
–    Paper documents (e.g., passenger declarations) are stored in a locked room.
–    Staff are bound by confidentiality obligations.
 
Data retention period
–    Reservation data: stored for the period required by the Accounting Act
–    Passenger declarations: stored for the period required by law (one year)
–    Feedback: for no longer than is necessary for development purposes
–    Marketing consents: until the customer withdraws their consent
 
Rights of the data subject
The customer has the right to:
–    check their own data
–    request the correction or deletion of incorrect data
–    restrict processing
–    object to direct marketing
–    withdraw consent (e.g. newsletter)
–    lodge a complaint with the Data Protection Ombudsman if they consider the processing to be unlawful
Requests for inspection and correction must be made in writing to the person in charge: Hilkka Karimo.
 
Availability of the privacy policy
The privacy policy is available on the Ylöstalon website at www.ylostalo.fi and we will also send it by email upon request.