PRIVACY STATEMENT – THE TERWA – NORDIC HIDEAWAY
This privacy statement describes how we process the personal data of individuals who have visited The Terwa – Nordic Hideaway and those who have subscribed to our newsletter.
1 DATA CONTROLLER
Data Controller: The Terwa – Nordic Hideaway
Finesco Hospitality Oy, 2765399-2
Contact Person: Kari Järvenpää, info@theterwa.com
2 LEGAL BASIS AND PURPOSE OF PROCESSING
We process your personal data to provide and implement accommodation and restaurant services. Processing is necessary for the execution of the contract and compliance with statutory obligations. Processing situations may include:
making reservations
communication regarding reservations and changes
billing
online store purchases
maintenance of the traveler information system
In addition, we process data on the basis of legitimate interest to improve services and for marketing purposes, such as customer surveys. Newsletters and electronic direct marketing are sent only with your consent.
Your information is not used for automated decision-making.
3 PROCESSED PERSONAL DATA
travel declaration information (e.g. name, social security number, passport number)
contact information (email, phone number)
newsletter and marketing consents
special diets and allergies
payment information
age groups for discounts
CCTV data (public areas)
4 RETENTION PERIODS OF PERSONAL DATA
Service execution + 3 years
Direct marketing consents: until you cancel
CCTV: 3 months
Travel declarations: 1 year
Accounting material: 6 or 10 years
5 HOW DATA IS COLLECTED
Data is obtained:
during booking, purchase or newsletter subscription
through events with customer consent
6 DATA DISCLOSURES AND TRANSFERS
Data may be processed by external service providers (e.g. payment services, marketing partners). In statutory situations, data may be disclosed to authorities, such as the police.
7 TRANSFER OF DATA OUTSIDE THE EU/EEA AREA
Data is generally not transferred outside the EU/EEA area.
8 PRINCIPLES OF REGISTER PROTECTION
Access only for employees who need it
Physical material is stored securely
Electronic systems are protected with usernames and passwords
9 RIGHTS OF THE REGISTERED
You have the following rights in accordance with the EU Data Protection Regulation:
Right to access information
Right to rectify information
Right to demand the removal of data
Right to restrict processing
Right to object to processing
Right to transfer data from one system to another
Right to withdraw consent
Right to file a complaint with the supervisory authority
