Customer register of Santa Claus Reindeer Oy
1. Controller
Santa Claus Reindeer Oy (2558983-5)
Joulumaantie 13
Napapiiri
96930 Rovaniemi
info@santaclausreindeer.fi
2. Contact for register issues
In matters related to the register and the exercise of data subject rights, please contact:
Janne Körkkö
+358 40 833 9818
janne.korkko@santaclausreindeer.fi
3. Register name
Customer register of Santa Claus Reindeer Oy
4. Legal basis of personal data processing
The processing of the personal data in the register is based on the customer relationship between private and corporate customers and Santa Claus Reindeer Oy. Due to the customer relationship, data processing is based on a legitimate interest.
The controller also processes customer data on the basis of an agreement between the controller and the data subject. This applies to the personal data which is collected from the customers in connection of an activity reservation or reservation any other service Santa Claus Reindeer provides, or for the purposes of charging such services.
5. Purposes of personal data processing
Customer data in the customer register are used for:
– Processing and managing reservations
– Sales and implementation of services
– Payment, invoicing and monitoring thereof as well as possible debt collection measures
– Customer relationship management and development
– Customer relationship communication
– Marketing the services of Santa Claus Reindeer
– Developing the controller’s business and customer service
Information regarding customers’ special diets is only used for preparing and serving food. If the customer asks the controller to take into account the customer’s health when providing services, the information submitted by the customer to the controller is used in the provision of the service. Such information may concern, for example, a physical disability or an allergy, or any other information provided by the customer to the controller on their own initiative.
6. Processed personal data
The controller processes the following personal data of the customers:
– First and last name, date of birth, telephone number, address, email address
– Nationality
– Reservation data
– Payment method, invoicing data, data on possible delays of payment
– Information on whether the customer has prohibited the use of the data for direct marketing
– Information on whether the customer has given consent to electronic direct marketing
– Data on the use or purchase of services
– Possible special diets
– Possible customer feedback
Regarding corporate customers, the controller processes the following personal data:
– Name, email address and telephone number of the corporate customer’s contact person
– Data concerning the prohibitions relating to direct marketing, distance selling and other marketing that have been reported by the contact person and are required under the effective legislation
– Possible customer feedback.
Comments to the blog:
When users leave comments on the site, we collect the information on the comment form, as well as the user’s IP address and browser version information to help identify spam.
When visitors leave a comment on this site, we collect the information displayed in the comment fields, the IP address, and browser version information.
7. Sources of personal information
The controller receives the personal data directly from the data subject:
– At the location
– Over the phone
– By email
Upon reservation of services at www.www.santaclausreindeer.fi, the data subject discloses their personal data to a third-party booking service, through which the controller receives aforementioned data.
From third parties when:
– Data subject books controller’s services through a booking service site
– Data subject books controller’s services through a booking service company (such as a travel agent or tour operator)
– Data subject’s employer or association books controller’s services for the data subject
– Data subject in some other way contacts or books controller’s services via a third party.
8. Recipients or recipient categories of personal data
Customer register data is not disclosed to third parties unless the customer specifically asks the controller to book third-party services requested by the customer.
This notwithstanding:
Upon reservation of services at www.www.santaclausreindeer.fi, the data subject discloses the personal data necessary to complete the booking via a third-party booking service.
When submitting feedback or a contact request at www.www.santaclausreindeer.fi, the website sends personal information, such as name and email address, to the controller’s email.
Information may be disclosed to authorities on the basis of requests based on the law.
Data is retained in the controller’s systems, which can only be accessed by personnel handling personal data. The systems have been encrypted and protected by their suppliers.
9. Transfer of data outside the EU
Data is transferred outside the EU to the US through analytics services provided by Google. The EU/US data protection framework allows data to be transferred securely.
10. Personal data retention period
The personal data in the customer register are processed for the duration of the customer relationship. The data may be stored and processed after the end of the customer relationship if it is required for processing complaint-related issues. The retention periods also comply with the retention periods laid down by the Accounting Act and other relevant laws. The data required by the Accounting Act are stored for as long as is required by the law.
Only data that are required for the defined purposes of use are processed during the customer relationship.
When the customer relationship ends, the customer’s data may be transferred to the company’s direct marketing register if the customer has not prohibited the use of their data for direct marketing purposes.
11. Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
12. Data subject’s rights
The personal data in the customer register is processed based on the controller’s legitimate interest. The processing of personal data is also based on the agreement between the controller and the data subject.
The data subject has the following rights:
Right to access their data
Data subjects have the right to request access to their personal information in order to determine the processing thereof.
The data subject has the right to know what information the customer register contains on them. The controller may request the data subject to sufficiently clarify which information or processing the request relates to.
The data subject’s right of access may be restricted or refused on the basis of the General Data Protection Regulation if the disclosure would adversely affect the rights and freedoms of others. Such rights include, for example, the controller’s business secrets and third-party personal data. National legislation (the Data Protection Act etc.) may also impose restrictions on the data subject’s right.
Right to data rectification
Data subjects have the right to request that the controller rectify any inaccurate or incorrect personal information without undue delay.
Right to data erasure
At the request of the data subject, the controller must erase the personal information relating to the data subject without undue delay, if any of the following conditions is met:
– Personal information is no longer needed for the purposes for which they were originally collected
– Data subject objects to the processing and there is no reasonable cause to process the data
– Data subject objects to the processing for direct marketing purposes (in this case, however, processing for other purposes is permitted)
– Personal data has been unlawfully processed.
The data do not have to be erased if the processing is required in order for the controller to be able to, for example, comply with a statutory obligation based on national or EU legislation that is applicable to the controller and requires the processing, or if the processing is required in order to establish, exercise or defend a legal claim.
Direct marketing ban
The data subject has the right to object to the use of their data for direct marketing.
Right to object to data processing
The data subject may object to personal data processing on grounds relating to the data subject’s particular situation if the data are processed on the grounds of a legitimate interest.
If the processing is based on an agreement, the data subject does not have the right to object to the processing.
If the data subject has objected to personal data processing on grounds relating to the data subject’s particular situation, the data subject must specify the situation on the grounds of which the data subject objects to the processing based on a legitimate interest. The controller may continue data processing despite the data subject’s objection if there is a particularly important and justifiable reason, which overrides the interests, rights and freedoms of the data subject, or if it is necessary for the establishment, exercise or defense of a legal claim.
The data subject has the right at any time to object to the processing of their personal data for direct marketing purposes. If the data subject objects to the use of their personal information for direct marketing, they may no longer be processed for this purpose.
Right to request restriction of processing
The data subject has the right to request that the controller restrict the active processing of their personal data in the following situations:
– Data subject contests the accuracy of the personal data, in which case the processing must be restricted until the controller has verified the accuracy of the data
– Processing is contrary to law and the data subject requests restrictions on the processing instead of the erasure of the personal data
– The controller no longer needs the personal data for the purposes of the processing, but the data are required by the data subject for the establishment, exercise or defense of a legal claim
– Data subject has objected to the processing of personal data (see above) and the assessment of whether the legitimate interests of the controller override those of the data subject, is pending.
During restricted processing, the data may principally be stored but not processed. Additionally, the data may be processed for the establishment, exercise or defense of a legal claim or for the protection of the rights of another natural or legal person or for reasons of important public interest. Before the restriction is lifted, the data subject must be informed about the matter.
Right to transfer data from one system to another
To the extent that the information in the customer register has been submitted by the data subject themselves, and the data is processed through the means of automatic data processing and on the basis of an agreement between the controller and the data subject, the data subject is entitled to receive their data mainly in machine-readable format and transfer the data directly from one controller to another if it is technically possible.
Right to lodge a complaint with a regulatory authority
Data subject has the right to lodge a complaint with a competent regulatory authority if the data subject feels that the controller has not complied with the applicable data protection regulations.
13. Requests relating to the exercise of data subject rights
In matters related to personal information processing or exercising the data subject’s rights, please contact the data controller representative mentioned in paragraph 2 above.
Requests pertaining to the right of access or the realization of other data subject rights must be submitted to the controller in writing by email or by post. The request may also be presented in person at the office of the controller.
The controller may request the data subject to sufficiently clarify which information or processing the request relates to.
In order to ensure that personal information is not disclosed to persons other than the data subject, the controller may request that the data subject sign the request. The controller may also ask the issuer of the request to verify their identity with an official identification card or other reliable means.
Cookie policy
What are cookies?
A cookie is a small text file that a website stores on your computer or mobile device when you visit the website.
The purpose of cookies is to make websites more convenient to use and to provide their owners with information about how visitors interact with the website.
How can you manage cookies?
You can delete all cookies already on your device by clearing your browser’s browsing history. This will delete all cookies from all websites you have visited. Most browsers can be set to prevent cookies from being stored on your device. Please note that if you disable cookies, this may affect the functionality of websites.
For more control over site-specific cookies, check your browser’s privacy and cookie settings.
What cookies do we use on our site?
Our website www.www.santaclausreindeer.fi uses cookies to improve the user experience, analyse user behaviour and enable site functionality.
When you come to our site, you can accept, reject or opt-out of cookies via the cookie banner.
Cookies allow our site to remember the choices you made through the cookie banner on the homepage and your language preference so that you do not have to choose it again on each page.
Analytics cookies (our site uses Google Analytics) collect information about how visitors interact with the site. The information collected does not identify individual visitors. We may share statistical information with our advertising agency and other communication partners and it will only be used to improve our site and marketing.
You can opt-out of analytics cookies by using the cookie banner on the first page.
The following third-party services operating on our website set their own cookies on our website: