Privacy

This is the Data Protection Statement in accordance with the GDPR regarding the processing of personal data for the Experience Pyhä customer and marketing register.

1. Controller
Experience Pyhä Ltd.
Huhanniemi 1
98530 Pelkosenniemi
Finland2. Contact

Jari Loippo
jari@experiencepyha.fi

3. Name of register
Customer and Marketing Register4. Justification and purpose for processing of personal data

The processing of personal data is required to maintain Experience Pyhä’s relationship with consumer and corporate customers, to fulfil contractual obligations, or based on the data subject’s express consent or other reasonable cause. Personal data is gathered during:

Room, program, or table bookings
Billing processes

Legal Basis for Processing:

Fulfilment of contractual obligations
Legitimate interests (e.g., marketing communications, business development)
Data subject’s consent (when required)

Purpose of Processing:

Fulfilling bookings and contractual obligations
Communicating with data subjects
Marketing communications
Business and product development
Improving customer service and website experience
Payment processing and billing
Maintaining customer relationships
Promoting Experience Pyhä’s services

Special Categories of Data:

Dietary information: Used solely for preparing and serving meals.
Health-related data (e.g., allergies, physical impairments): Used only to provide requested services.

5. Content of register

The register may include:

Personal Information: Name, date of birth, nationality
Contact Information: Phone number, address, email address, business ID
Booking Information: Booking details, payment method, billing information, overdue payments
Service Usage Data: Special requests, feedback, complaints
Marketing Preferences: Opt-in/opt-out status for marketing communications
Profiling Data: Comments on services, interest data

6. Source of data

Data is collected from:

The data subject: In person, by phone or via email
Third-party booking services or sites
Travel agencies or tour operators
Employers or organizations booking services on behalf of the data subject
Public data sources and contact information providers

7. Sharing of data

General Rule: Data is not shared with third parties.
Exceptions:
- When booking third-party services (e.g., program activities, transportation).
- When using third-party booking channels via the experiencepyha.fi website.
- When submitting contact requests via the website.
Legal Requests: Data may be shared with authorities upon valid legal requests.

8. Sharing of data outside the EU or EEA
No data is transmitted outside the EU or EEA.9. Data Protection and Retention

Physical Data is stored securely and disposed of when no longer needed. Electronic Data is protected on servers and accessible only by authorized personnel. Retention Period: Customer and Marketing Register data is stored indefinitely. Other personal data is retained only as long as necessary, unless legal obligations (e.g., accounting laws) require longer retention.

10. Data Subject Rights
You have the right to inspect your data and request corrections to inaccurate information. To make a request, submit a signed request either in writing or electronically to the contact provided above.
11. Cookies and Tracking Technologies

We use cookies to improve the functionality of our website, track user behavior, and provide a better user experience. The following cookies may be set:

Provider / Domain	Expiration	Description
Google LLC / .experiencepyha.fi	1 year 1 month	Tracks visitor numbers and user activity on the site (e.g., Google Analytics).
Meta Platforms Inc. / .experiencepyha.fi	3 months	Used for ad targeting and measuring ad effectiveness.
experiencepyha.fi	1 year 1 month	Improves website performance and remembers user preferences (e.g., language settings).

12. Updates to This Statement

Experience Pyhä reserves the right to update this Data Protection Statement based on changes in legislation or services. Last Updated: 18 December 2024