Date: 20.8.2025 

1. The controller
Company name: Sointumetsä Oy
Business ID: 3151983-3
Address: Kivalontie 1650 94500 Keminmaa
Email: info@sointumetsa.fi
Telephone: +358 40 175 2082

2. Contact person responsible for the register
Name: Tiina Vakkala
Sähköposti:info@sointumetsa.fi
Telephone: +358 40 175 2082

3. Name of the register
Sointumetsä website user and booking register

4. Purpose of processing personal data

• Ensuring the functionality and usability of the website
  
• Collection of website visitor statistics and analytics (Google Analytics)
  
• Display social media content on the site (Instagram plugin)
  
• Reservations and payment processing (FareHarbor)
  
• Customer relationship management and communication
  

5. Personal data processed

• Information collected through cookies and analytics (e.g. IP address, device and browser data, time of use, website activity).
  
• Information provided via the contact form (name, email, phone number, message)
  
• Information provided via the booking system (name, contact details, content of the booking, number of participants, timetable)
  
• Payment data (transaction data; the actual payment card data is processed by the payment service provider through FareHarbor and its partners).
  

6. Regular sources of information

• Information provided by the user (e.g. on a form or when making a reservation)
  
• Cookies and similar technologies (Google Analytics, Instagram)
  
• Booking service FareHarbor
  

7. Disclosure and transfer of data

• Google (Google Analytics) may process data outside the EU/EEA.
  
• The Instagram plugin may transfer data to Meta Platforms, Inc.
  
• Reservation data is transferred to FareHarbor, which acts as a platform for processing and paying for reservations. FareHarbor may transfer data outside the EU/EEA and will comply with applicable data protection laws.
  

8. Cookies
The website uses cookies and similar technologies to improve the user experience, collect analytics, display social media content and enable the booking system to function. The user has the possibility to accept or refuse cookies in the browser settings.

9. Data retention period

• Analytics data is stored in accordance with the Google Analytics settings.
  
• The data on the contact form will be kept for 1 year.
  
• Reservation data is kept for the time required to manage the customer relationship and to fulfil legal obligations (e.g. accounting).
  

10. Rights of the data subject
The data subject has the right to:

• Get access to your own data
  
• Request the correction or deletion of inaccurate data
  
• Object to or restrict the processing of your data
  
• Withdraw consent (e.g. in relation to cookies)
  
• File a complaint with a supervisory authority (Office of the Data Protection Ombudsman)
  

11. Information security
Personal data is treated confidentially and protected by appropriate technical and organisational measures. Booking and payment transactions are protected by an encrypted connection (SSL/TLS).12. Changes to this Privacy Policy
We reserve the right to update and amend this Privacy Policy.