Privacy Policy
Privacy Policy – Lucy in Lapland Oy
Company Information
Lucy in Lapland Oy
Y-tunnus: 3559514-7
Registered in Finland
Email: info@lucyinlapland.com
Phone: +358 403 610 863
Introduction
This Privacy Policy explains how Lucy in Lapland Oy (“we,” “our,” “us”) collects, uses, stores, and
protects your personal data in compliance with the General Data Protection Regulation (GDPR) and
Finnish Data Protection Act (Tietosuojalaki 1050/2018). By booking our tours or using our services,
you agree to this Privacy Policy.
1. Data Controller
Lucy in Lapland Oy
Y-tunnus: 3559514-7
Registered in Finland
Email: info@lucyinlapland.com
2. Personal Data We Collect
We may collect:
- Contact information: name, phone number, email address.
- Booking information: date, details of your tour, number of participants, payment status.
- Payment data: processed securely by third-party providers; we do not store credit card details.
- Photographs: taken during tours for delivery to customers and for marketing use if consented.
- Communication data: emails, messages, or inquiries you send to us.
- Website data: IP address, cookies, analytics data (if applicable).
3. Purpose and Legal Basis
We process personal data for:
- Performance of a contract: managing bookings, delivering tours, sending important updates.
- Legal obligations: tax and accounting compliance.
- Legitimate interests: improving services, handling customer inquiries.
- Consent: using photos for marketing purposes, sending promotional offers (if opted-in).
You can withdraw consent anytime by contacting us at info@lucyinlapland.com.
4. Data Retention
- Booking/payment records: kept for 6 years as required by Finnish Accounting Act.
- Photos used for marketing: kept indefinitely unless consent is withdrawn.
- Communication data: deleted within 12 months unless legally required.
- Data no longer needed will be securely deleted or anonymized.
5. Data Sharing and Transfers
We share personal data only when necessary:
- Payment service providers for secure payments.
- Booking platforms (e.g., GetYourGuide) for reservations.
- IT providers for hosting and email services.
If data leaves the EU/EEA, we use EU-approved safeguards such as Standard Contractual
Clauses.
6. Data Security
We use technical and organizational measures to protect your data, including:
- Secure servers and encryption.
- Limited access for authorized staff only.
- Data breach notifications as required by law.
7. Cookies and Website Analytics (if applicable)
Our website may use cookies:
- Necessary cookies for site functionality.
- Analytics cookies only with user consent.
- Cookie settings can be managed via your browser preferences.
8. Marketing and Photos
Photos taken during tours may be used for marketing with your consent on social media, website, or promotional materials. Consent can be withdrawn anytime by contacting us.
9. Changes to this Privacy Policy
We may update this Privacy Policy as needed. The latest version will always be available on our website.
10. Governing Law and Contact Information
This Privacy Policy is governed by Finnish law. For questions or to exercise your rights under
GDPR and Finnish law, contact us at - info@lucyinlapland.com