Privacy policy

Privacy Policy

Privacy policy according to Personal Data Act (523/99) 10 § and 24 §.

1. Contact Information

Lust Inn, which operates with the help of Putaan Invest Oy.

Contact information

Revontie 12 LH 2
90830 Haukipudas
+358 400 330 470
info@lustinn.fi

Responsible for register

Jonna Kurvinen
+358 400 330 470
info@lustinn.fi

 

2. Name of the register

Lust Inn’s customer register.

3. Collection and protection of data

The purpose of processing personal data is to share information, offer and deliver products and services, organize research and campaigns and contests, as well as advertising and marketing to users contacted through the website maintained by the controller, online store and telephone and email sales. Processing of personal data related to payment, invoicing and monitoring and collection of payments. The customer’s payment method information, if necessary payment card information, invoicing information, possible payment delay information.

In other words, the personal data of the register is used:

  • Establishing a customer relationship and continuously managing and developing reservations.
  • Providing registrar services to customers.
  • Communication with the customer. For example, the language of the invoice form and the bank transfer form, the booking confirmation by e-mail and the customer’s possible additional questions by the desired means of communication.
  • Appropriate identification of the person participating in the competition or other campaign.
  • The customer’s payment method information, if necessary payment card information, invoicing information, possible payment delay information.
  • Possible customer feedback and complaint information.
  • Direct advertising, remote sales and other direct marketing as well as opinion and market surveys in the manner and scope permitted by law, if the data subject has separately given permission for it.
  • Payment of reservations, monitoring and collection of payments.
  • Development of the data controller’s business and related service development.
  • Monitoring, analyzing, and related service development.
  • Taking into account the wishes of the customers and developing the service and targeting the offer.

The controller does not hand over customers’ personal data to external parties for marketing purposes or for opinion and market research. The controller can send direct marketing to customers electronically (e.g. via e-mail and text messages, e.g. confirmation of the start of the reservation, feedback survey, etc.).

4. Basis for personal data processing

Based on the law and regulation

  • Citizenship (regulation EU 692/2011), purchase data or their parts for accounting purposes (law 1336/1997) To protect the data subject
  • Payment card information and related purchase and payment transactions in accordance with the instructions of the card issuer

On a contractual basis

  • Customer information related to reservations, such as name, date of birth and contact information
  • language codes, information about fellow passengers (date of birth)
  • billing or other payment or payment method information
  • pricing basis, such as information about business customers or other information about factors affecting the price.
  • the level of the reserved service such as room type and other information about the desired services.

Data collected based on a legitimate interest

  • Gender, information about past and future bookings
  • Possible call recordings, e-mail correspondence

With the consent of the registered person, other information can also be collected to implement the service. Such information can be, for example, information about diet or accessibility.

5. Data content of the register

The user-specific data content contained in the register varies depending on the type of use by the user. This paragraph details the information to be recorded in the register from the point of view of the purchasing customer.

In connection with the purchase of the service (making a reservation), the following information is stored from all users of the service:

  • First and last name
  • Date of birth
  • Address
  • Telephone number
  • E-mail
  • Country
  • Spoken language
  • Customer number

In some cases, cooperation may require saving the company name and Y-ID.

In addition, additional profiling information about the customer may be stored, which can be used to target direct marketing and improve customer service.

Information is collected from users themselves when registering for the service, using it or participating in another way in an activity carried out on the website. Information is also collected from the user himself by phone, e-mail or at the counter in a sales situation. In addition to this, information can be collected from the customer feedback form.

Information about users’ visits to the website and online store is automatically collected. This information that identifies the user includes IP address, device type, web browser, operating system, language settings, time (date + time), pages displayed and information about clicks. The data collected by the analytics program is used to develop online services and customer service. The website uses cookies to improve the user experience.

6. Regular disclosures of information

Upon request, passenger reports with their information will be handed over to the authorities prescribed by law. The data in the register will not be transferred outside the EU or EEA.

7. Principles to be followed in the protection of the register

The use of the register is instructed, the information contained in the register can only be accessed by pre-defined persons in connection with their work tasks, the information is collected in electronic databases, the containing servers are protected with firewalls, passwords and other up-to-date technical means, the servers containing the information are located in premises that are locked and where appropriate access control is arranged . Written agreements have been made with potential external service providers, which require confidential processing of data and protection that meets the requirements defined in this section above.

The controller is not responsible for the information collected and stored by third-party operators, for example online booking sites. The controller is only responsible for the information provided to Putaan Invest Oy / Lust Inn.

8. The right to inspection, rectification of information and ”to be forgotten”.

The registered person has the right to check the information stored about him in the register and to demand the correction of incorrect information and/or the completion of incomplete information. The registrant also has the right to request the deletion of personal data concerning him ”the right to be forgotten”. As an exception, Putaan Invest Oy / Lust Inn is bound by obligations, for example the accounting law and the storage of passenger reports. Requests regarding the exercise of the above-mentioned rights must be submitted in writing to the controller.

Act on accommodation and catering operations (2006/308) § 6 passenger notification and passenger information: https://www.finlex.fi/fi/laki/ajantasa/2006/20060308#a308-2006

9. Advice, supervision and additional information on data protection issues

As a data protection authority in accordance with the Personal Data Act, the Data Protection Commissioner provides guidance and advice regarding the processing and monitoring of personal data and supervises the processing of personal data. The data protection commissioner also resolves some matters regarding the implementation of the right to inspect personal data and the correction of data specified in more detail in the law. More information about data protection authorities can be found, for example, at https://tietosuoja.fi/

10. The customer’s right to file a complaint with the supervisory authority

The customer has the right to file a complaint with the competent supervisory authority if, in the customer’s opinion, the data controller has not acted in accordance with the EU data protection regulation and Finland’s national data protection legislation.

1. Contact Information

Lust Inn, which operates with the help of Putaan Invest Oy.

Contact information

Revontie 12 LH 2
90830 Haukipudas
+358 400 330 470
info@lustinn.fi

Responsible for register

Jonna Kurvinen
+358 400 330 470
info@lustinn.fi

 

2. Name of the register

Lust Inn’s customer register.

3. Collection and protection of data

The purpose of processing personal data is to share information, offer and deliver products and services, organize research and campaigns and contests, as well as advertising and marketing to users contacted through the website maintained by the controller, online store and telephone and email sales. Processing of personal data related to payment, invoicing and monitoring and collection of payments. The customer’s payment method information, if necessary payment card information, invoicing information, possible payment delay information.

In other words, the personal data of the register is used:

  • Establishing a customer relationship and continuously managing and developing reservations.
  • Providing registrar services to customers.
  • Communication with the customer. For example, the language of the invoice form and the bank transfer form, the booking confirmation by e-mail and the customer’s possible additional questions by the desired means of communication.
  • Appropriate identification of the person participating in the competition or other campaign.
  • The customer’s payment method information, if necessary payment card information, invoicing information, possible payment delay information.
  • Possible customer feedback and complaint information.
  • Direct advertising, remote sales and other direct marketing as well as opinion and market surveys in the manner and scope permitted by law, if the data subject has separately given permission for it.
  • Payment of reservations, monitoring and collection of payments.
  • Development of the data controller’s business and related service development.
  • Monitoring, analyzing, and related service development.
  • Taking into account the wishes of the customers and developing the service and targeting the offer.

The controller does not hand over customers’ personal data to external parties for marketing purposes or for opinion and market research. The controller can send direct marketing to customers electronically (e.g. via e-mail and text messages, e.g. confirmation of the start of the reservation, feedback survey, etc.).

4. Basis for personal data processing

Based on the law and regulation

  • Citizenship (regulation EU 692/2011), purchase data or their parts for accounting purposes (law 1336/1997) To protect the data subject
  • Payment card information and related purchase and payment transactions in accordance with the instructions of the card issuer

On a contractual basis

  • Customer information related to reservations, such as name, date of birth and contact information
  • language codes, information about fellow passengers (date of birth)
  • billing or other payment or payment method information
  • pricing basis, such as information about business customers or other information about factors affecting the price.
  • the level of the reserved service such as room type and other information about the desired services.

Data collected based on a legitimate interest

  • Gender, information about past and future bookings
  • Possible call recordings, e-mail correspondence

With the consent of the registered person, other information can also be collected to implement the service. Such information can be, for example, information about diet or accessibility.

5. Data content of the register

The user-specific data content contained in the register varies depending on the type of use by the user. This paragraph details the information to be recorded in the register from the point of view of the purchasing customer.

In connection with the purchase of the service (making a reservation), the following information is stored from all users of the service:

  • First and last name
  • Date of birth
  • Address
  • Telephone number
  • E-mail
  • Country
  • Spoken language
  • Customer number

In some cases, cooperation may require saving the company name and Y-ID.

In addition, additional profiling information about the customer may be stored, which can be used to target direct marketing and improve customer service.

Information is collected from users themselves when registering for the service, using it or participating in another way in an activity carried out on the website. Information is also collected from the user himself by phone, e-mail or at the counter in a sales situation. In addition to this, information can be collected from the customer feedback form.

Information about users’ visits to the website and online store is automatically collected. This information that identifies the user includes IP address, device type, web browser, operating system, language settings, time (date + time), pages displayed and information about clicks. The data collected by the analytics program is used to develop online services and customer service. The website uses cookies to improve the user experience.

6. Regular disclosures of information

Upon request, passenger reports with their information will be handed over to the authorities prescribed by law. The data in the register will not be transferred outside the EU or EEA.

7. Principles to be followed in the protection of the register

The use of the register is instructed, the information contained in the register can only be accessed by pre-defined persons in connection with their work tasks, the information is collected in electronic databases, the containing servers are protected with firewalls, passwords and other up-to-date technical means, the servers containing the information are located in premises that are locked and where appropriate access control is arranged . Written agreements have been made with potential external service providers, which require confidential processing of data and protection that meets the requirements defined in this section above.

The controller is not responsible for the information collected and stored by third-party operators, for example online booking sites. The controller is only responsible for the information provided to Putaan Invest Oy / Lust Inn.

8. The right to inspection, rectification of information and ”to be forgotten”.

The registered person has the right to check the information stored about him in the register and to demand the correction of incorrect information and/or the completion of incomplete information. The registrant also has the right to request the deletion of personal data concerning him ”the right to be forgotten”. As an exception, Putaan Invest Oy / Lust Inn is bound by obligations, for example the accounting law and the storage of passenger reports. Requests regarding the exercise of the above-mentioned rights must be submitted in writing to the controller.

Act on accommodation and catering operations (2006/308) § 6 passenger notification and passenger information: https://www.finlex.fi/fi/laki/ajantasa/2006/20060308#a308-2006

9. Advice, supervision and additional information on data protection issues

As a data protection authority in accordance with the Personal Data Act, the Data Protection Commissioner provides guidance and advice regarding the processing and monitoring of personal data and supervises the processing of personal data. The data protection commissioner also resolves some matters regarding the implementation of the right to inspect personal data and the correction of data specified in more detail in the law. More information about data protection authorities can be found, for example, at https://tietosuoja.fi/

10. The customer’s right to file a complaint with the supervisory authority

The customer has the right to file a complaint with the competent supervisory authority if, in the customer’s opinion, the data controller has not acted in accordance with the EU data protection regulation and Finland’s national data protection legislation.