Privacy Statement - The Terwa - Nordic Hideaway
This Privacy Statement describes how we process the personal information of people who visited The Terwa - Nordic Hideaways and those who order our newsletter.
1 controller
Registrar: The Terwa-Nordic Hideaway
Finto Hospitality Oy, 2765399-2
Contact: Kari Järvenpää, info@theterwa.com
2 The legal basis and the purpose of the processing
We process your personal information for providing and implementing accommodation and restaurant services. The processing is necessary to implement the agreement and to comply with the statutory obligations. Handling situations may be:
making reservations
Communication on reservations and changes
billing
e -commerce shopping
maintenance of the passenger information system
In addition, we process information on the right to improve services and marketing, such as customer surveys. Newsletters and electronic direct marketing are only sent with your consent.
Your information is not used for automatic decision -making.
3 Personal Information to be processed
passenger report information (eg. Name, Social Security Number, Passport Number)
Contact information (email, phone number)
Newsletter and Marketing Recommendations
Special diets and allergies
payment information
Age groups for discounts
Camera Surveillance Information (General Facilities)
4 Personal data retention times
To complete the service + 3 years
Direct Marketing Recommendations: until you cancel
Camera surveillance: 3 months
Passenger reports: 1 year
Accounting material: 6 or 10 years
5 How to collect information
Information is obtained:
In connection with reservation, purchase or newsletter order
through events with the customer's consent
6 Disclosures and transfers
The information may be processed by outsourced service providers (eg payment services, marketing partners). In statutory situations, information may be disclosed to the authorities, such as police.
7 Transfer of data outside the EU/EEA area
Information is not generally transferred outside the EU/EEA area.
8 Principles of Registry Protection
Access only for employees who need it
Physical material is kept unlocked
Electronic systems protected with username and passwords
9 The rights of the registered person
You have the following rights in accordance with the EU Data Protection Regulation:
The right to get access to information
The right to correct the information
The right to claim the deletion of information
The right to restrict processing
The right to oppose processing
The right to transfer data from one system to another
The right to cancel consent
The right to complain to the supervisory authority
