{"id":8346,"date":"2026-09-30T16:21:28","date_gmt":"2026-09-30T13:21:28","guid":{"rendered":"https:\/\/ski.salla.fi\/privacy-policy\/"},"modified":"2026-11-09T17:13:54","modified_gmt":"2026-11-09T15:13:54","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/ski.salla.fi\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n
<\/div>\n
\n
\n
\n

Privacy Policy<\/h1>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
\n \n <\/path>\n <\/svg>\n<\/div>\n<\/div>\n\n
\n
\n
\n
\n

1. Data Controller<\/h2>\n\n\n\n

Kaunisharju Oy (Salla ski & active)Revontulentie 7, 98900 SallaTel. 016 837 711Email:<\/strong> ski@salla.fiBusiness ID:<\/strong> 0696361-7<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\n

2. Contact details for data protection matters<\/h2>\n\n\n\n

Kaunisharju Oy (Salla ski & active) \/ Customer Service Revontulentie 7, 98900 SallaEmail:<\/strong> ski@salla.fiTel. 016 837 711<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\n

3. Name of the register<\/h2>\n\n\n\n

Customer register for Kaunisharju Oy’s (Salla ski & active) online shop for lift passes, activities and rental equipment.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n
\n

4. Legal basis for processing personal data<\/h2>\n\n\n\n

The processing of personal data is based on the following grounds in accordance with the EU General Data Protection Regulation (GDPR):<\/p>\n\n\n\n

    \n
  • Contract (GDPR Art. 6(1)(b)):<\/strong> Implementation and management of an order, booking, rental or other agreement between the customer and the controller.<\/li>\n\n\n\n
  • Legal obligation (GDPR Art. 6(1)(c)):<\/strong> Compliance with legislation binding the controller, such as the Accounting Act and tax regulations.<\/li>\n\n\n\n
  • Legitimate interest (GDPR Art. 6(1)(f)):<\/strong> Maintenance of the customer relationship, customer communication, development of business and services, prevention of misuse, and the establishment and defence of potential legal claims.<\/li>\n\n\n\n
  • Consent (GDPR Art. 6(1)(a)):<\/strong> Electronic direct marketing (e.g. newsletters) and the use of non-essential cookies and tracking technologies on the website.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
    \n
    \n
    \n

    5. Purpose of processing personal data<\/h2>\n\n\n\n
      \n
    • Management, maintenance and development of the customer relationship<\/li>\n\n\n\n
    • Sale and delivery of lift passes, rental equipment and activities, confirmation of bookings and customer identification<\/li>\n\n\n\n
    • Invoicing, monitoring of payment transactions and debt collection<\/li>\n\n\n\n
    • Fulfilment of legal obligations (such as accounting)<\/li>\n\n\n\n
    • The controller’s own marketing and communication, as well as that of its partners<\/li>\n\n\n\n
    • Development of customer service and business, statistics and demand analysis<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
      \n
      \n
      \n

      6. Data content of the register<\/h2>\n\n\n\n

      The controller processes the following information about customers:<\/p>\n\n\n\n

        \n
      • Basic and contact information:<\/strong> First and last name, date of birth, phone number, address, email address, nationality<\/li>\n\n\n\n
      • Order and payment information:<\/strong> Purchased services and products, booking times, rented equipment, payment method details, billing information, potential payment delay information<\/li>\n\n\n\n
      • Permissions and prohibitions:<\/strong> Direct marketing bans and consents given for electronic marketing (email, SMS, social media)<\/li>\n\n\n\n
      • Customer relationship information:<\/strong> Service usage history, interests, customer feedback and complaint information<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
        \n
        \n
        \n

        7. Mandatory nature of providing data and consequences of failure to provide it<\/h2>\n\n\n\n

        Providing a name, contact details and payment information is a prerequisite for the creation of a rental, activity or lift pass agreement, and an order or booking cannot be completed without this information. Providing consent for electronic direct marketing and other voluntary information is optional, and refusing them does not affect the completion of the order.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

        \n
        \n
        \n

        8. Profiling<\/h2>\n\n\n\n

        As part of the processing of personal data stored in the customer register, Salla ski & active may also utilise the data for profiling purposes. Profiling is carried out by creating a customer identifier for the data subject, which allows various information concerning the data subject generated in connection with the use of the service to be combined. The created profile can be compared with other profiles. The purpose of profiling is to determine the demand for services and customer behaviour, and to target services. Profiling does not lead to automated decisions concerning the data subject that would have legal effects on them.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

        \n
        \n
        \n

        9. Regular sources of information<\/h2>\n\n\n\n

        Information is primarily collected directly from the customer themselves in connection with a booking, purchase, contact or newsletter subscription via the online service, email, telephone or at the point of sale. In addition, data is accumulated in connection with the use of services and making purchases.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

        \n
        \n
        \n

        10. Recipients of personal data<\/h2>\n\n\n\n

        To implement its services, the controller uses reliable subcontractors (data processors), such as payment intermediaries, providers of booking and ERP systems, IT and service providers, and marketing partners. Subcontractors process data only on behalf of the controller and in accordance with data protection agreements made at the controller’s request. Data may be disclosed to authorities based on a legal obligation.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

        \n
        \n
        \n

        11. Transfer of data outside the EU or EEA<\/h2>\n\n\n\n

        Personal data is primarily stored within the EU and EEA. If data is transferred outside the EU or EEA when using partners or server systems (for example, customer relationship management, communication or analysis services), an adequate level of data protection is ensured during the transfer by applying standard contractual clauses approved by the European Commission or by transferring data to countries whose level of data protection has been deemed adequate by the Commission.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

        \n
        \n
        \n

        12. Retention period of personal data<\/h2>\n\n\n\n

        The data subject’s personal data is stored only as long as is necessary to fulfil the defined processing purposes:<\/p>\n\n\n\n

          \n
        • Customer and booking information:<\/strong> Data is stored for the duration of the active customer relationship. The customer relationship is considered to have ended when three (3) years have passed since the last use of the service or online shop, after which the data is deleted without undue delay.<\/li>\n\n\n\n
        • Accounting material:<\/strong> Voucher and payment transaction material required by Chapter 2, Section 10 of the Accounting Act (1336\/1997) is stored for six (6) years from the end of the calendar year in which the financial year ended.<\/li>\n\n\n\n
        • Direct marketing information:<\/strong> Electronic direct marketing data based on consent is stored until the data subject withdraws their consent or prohibits marketing.<\/li>\n\n\n\n
        • Dispute and complaint information:<\/strong> Data may be stored in accordance with the statutory limitation period (Act on the Limitation of Debts 728\/2003) until the expiry of a potential legal claim.<\/li>\n\n\n\n
        • Contact information for corporate customers:<\/strong> Data is deleted in a corresponding manner after the company’s customer relationship is considered to have ended, unless there is another basis for retention.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
          \n
          \n
          \n

          13. Rights of the data subject<\/h2>\n\n\n\n

          In accordance with data protection legislation, the data subject has the following rights:<\/p>\n\n\n\n

            \n
          • Right of access (right of inspection):<\/strong> The data subject has the right to receive confirmation as to whether personal data concerning them is being processed, as well as the right to receive a copy of the data being processed.<\/li>\n\n\n\n
          • Right to rectification:<\/strong> The data subject has the right to demand the rectification or completion of inaccurate, incorrect or incomplete data without undue delay.<\/li>\n\n\n\n
          • Right to erasure (“right to be forgotten”):<\/strong> The data subject has the right to have their data deleted if the data is no longer needed for the purposes for which it was collected, the data subject withdraws consent or objects to processing for direct marketing, or if the processing has been unlawful. The right to erasure does not apply to data that the controller has a legal obligation to retain (such as accounting) or for the establishment, exercise or defence of a legal claim.<\/li>\n\n\n\n
          • Right to withdraw consent:<\/strong> To the extent that the processing of personal data is based on consent given by the data subject (such as electronic direct marketing or non-essential cookies), the data subject has the right to withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Consent for newsletters and marketing can be withdrawn via the link in the marketing message or by contacting the controller. Cookie consent can be changed in the website’s cookie settings.<\/li>\n\n\n\n
          • Right to object to processing:<\/strong> The data subject has the right, on grounds relating to their particular personal situation, to object to the processing of data when the basis is the controller’s legitimate interest (GDPR Art. 6(1)(f)). The data subject also has the right at any time to prohibit the use of their data for direct marketing, in which case processing for this purpose will be stopped immediately.<\/li>\n\n\n\n
          • Right to restriction of processing:<\/strong> In certain statutory situations (for example, when the accuracy of the data is being clarified), the data subject has the right to demand that the processing of their data be restricted so that the data may, in principle, only be stored.<\/li>\n\n\n\n
          • Right to data portability:<\/strong> The data subject has the right to receive the personal data they have provided themselves in a structured, commonly used and machine-readable format and to transfer it to another controller when the processing is based on a contract or consent and the processing is carried out automatically.<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
            \n
            \n
            \n

            14. Right to lodge a complaint with a supervisory authority<\/h2>\n\n\n\n

            The data subject has the right to lodge a complaint with the competent supervisory authority if they consider that the controller has not complied with data protection regulations in its operations.<\/p>\n\n\n\n

            In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (Lintulahdenkuja 4, 00530 Helsinki, www.tietosuoja.fi).<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

            \n
            \n
            \n

            15. Exercising the rights of the data subject<\/h2>\n\n\n\n

            All requests concerning the exercise of the data subject’s rights should be addressed in writing to the contact person mentioned in section 2, either by email or by post. The request can also be presented in person at the place of business. If necessary, the controller may ask the person making the request to prove their identity and to specify their request. Requests will be answered without undue delay and at the latest within one month of receiving the request.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-8346","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nPrivacy Policy | Salla Ski Resort<\/title>\n<meta name=\"description\" content=\"Read Salla Ski & Active\u2019s privacy policy to learn how customer data is processed and stored, what your rights are and how to contact us about privacy.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ski.salla.fi\/en\/privacy-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy | Salla Ski Resort\" \/>\n<meta property=\"og:description\" content=\"Read Salla Ski & Active\u2019s privacy policy to learn how customer data is processed and stored, what your rights are and how to contact us about privacy.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ski.salla.fi\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Salla Ski Resort\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-09T15:13:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ski.salla.fi\/wp-content\/uploads\/2026\/09\/ski-salla-in-the-middle-of-snowhere_2-kuvaaja-Luis-Billy-2560px.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/privacy-policy\\\/\",\"url\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/privacy-policy\\\/\",\"name\":\"Privacy Policy | Salla Ski Resort\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/#website\"},\"datePublished\":\"2026-09-30T13:21:28+00:00\",\"dateModified\":\"2026-11-09T15:13:54+00:00\",\"description\":\"Read Salla Ski & Active\u2019s privacy policy to learn how customer data is processed and stored, what your rights are and how to contact us about privacy.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/privacy-policy\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ski.salla.fi\\\/en\\\/privacy-policy\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/privacy-policy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/\",\"name\":\"Salla Ski Resort\",\"description\":\"In the Middle of Snowhere\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ski.salla.fi\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy | Salla Ski Resort","description":"Read Salla Ski & Active\u2019s privacy policy to learn how customer data is processed and stored, what your rights are and how to contact us about privacy.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ski.salla.fi\/en\/privacy-policy\/","og_locale":"en_GB","og_type":"article","og_title":"Privacy Policy | Salla Ski Resort","og_description":"Read Salla Ski & Active\u2019s privacy policy to learn how customer data is processed and stored, what your rights are and how to contact us about privacy.","og_url":"https:\/\/ski.salla.fi\/en\/privacy-policy\/","og_site_name":"Salla Ski Resort","article_modified_time":"2026-11-09T15:13:54+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/ski.salla.fi\/wp-content\/uploads\/2026\/09\/ski-salla-in-the-middle-of-snowhere_2-kuvaaja-Luis-Billy-2560px.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ski.salla.fi\/en\/privacy-policy\/","url":"https:\/\/ski.salla.fi\/en\/privacy-policy\/","name":"Privacy Policy | Salla Ski Resort","isPartOf":{"@id":"https:\/\/ski.salla.fi\/en\/#website"},"datePublished":"2026-09-30T13:21:28+00:00","dateModified":"2026-11-09T15:13:54+00:00","description":"Read Salla Ski & Active\u2019s privacy policy to learn how customer data is processed and stored, what your rights are and how to contact us about privacy.","breadcrumb":{"@id":"https:\/\/ski.salla.fi\/en\/privacy-policy\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ski.salla.fi\/en\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ski.salla.fi\/en\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ski.salla.fi\/en\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/ski.salla.fi\/en\/#website","url":"https:\/\/ski.salla.fi\/en\/","name":"Salla Ski Resort","description":"In the Middle of Snowhere","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ski.salla.fi\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"}]}},"_links":{"self":[{"href":"https:\/\/ski.salla.fi\/en\/wp-json\/wp\/v2\/pages\/8346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ski.salla.fi\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ski.salla.fi\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ski.salla.fi\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ski.salla.fi\/en\/wp-json\/wp\/v2\/comments?post=8346"}],"version-history":[{"count":4,"href":"https:\/\/ski.salla.fi\/en\/wp-json\/wp\/v2\/pages\/8346\/revisions"}],"predecessor-version":[{"id":8589,"href":"https:\/\/ski.salla.fi\/en\/wp-json\/wp\/v2\/pages\/8346\/revisions\/8589"}],"wp:attachment":[{"href":"https:\/\/ski.salla.fi\/en\/wp-json\/wp\/v2\/media?parent=8346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}