Privacy Policy

This is the data protection and privacy policy of Unique Stays Finland, prepared in accordance with the Finnish Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Prepared on January 21, 2025. Last updated on January 21, 2025.

1. Data Controller

Unique Stays Finland

2. Contact Person Responsible for the Register

Tommi Eriksson
info@uniquestaysfinland.com
+358 445145822

3. Name of the Register

Customer Register of Unique Stays Finland.

4. Purpose of Processing Personal Data

The customer register is used for maintaining, developing, and communicating with customers. Data is not used for automated decision-making or profiling.

5. Contents of the Register

The register contains the following information:

• Name
• Phone number
• Email address
  Data is stored as long as deemed necessary for the customer relationship.

6. Regular Data Sources

Data stored in the register is obtained from customers through messages sent via online forms, emails, phone calls, and social media services, as well as contracts, customer meetings, and other situations where customers provide their information. Additionally, data may be collected from publicly available sources within the limits allowed by law.

7. Regular Disclosures of Data and Transfers Outside the EU/EEA

Data is not disclosed outside the EU/EEA. Data may be published to the extent agreed with the customer.

8. Principles of Register Protection

Care is taken in processing the register, and data processed using information systems is appropriately protected. When data is stored on internet servers, the physical and digital security of the hardware is properly ensured. The data controller ensures that stored data, server access rights, and other critical personal data are handled confidentially and only by employees whose job description includes such tasks.

9. Right of Access and Right to Rectify Data

Each individual in the register has the right to check the data stored about them and request the correction of any incorrect or incomplete information. If an individual wishes to check their data or request corrections, they must submit a written request to the data controller. The data controller may request the requester to verify their identity if necessary. The data controller will respond to the customer within the time frame set by the GDPR (usually within one month).

10. Other Rights Related to Personal Data Processing

Individuals in the register have the right to request the deletion of their data (“right to be forgotten”). Registered individuals also have other rights under the GDPR, such as restricting data processing under certain circumstances. Requests must be sent in writing to the data controller. The data controller may request the requester to verify their identity if necessary. The data controller will respond to the customer within the time frame set by the GDPR (usually within one month).

11. Cookies

The website uses cookies, which are small text files stored on the user’s computer to enhance the user experience and collect information about site visitors. Cookies do not reveal the identity of users. Users can disable cookies in their browser settings. The website uses third-party analytics and marketing systems (e.g., Google Analytics). These systems collect information about visitors using cookies. This data is not used to identify individual users but to develop the website and services. Google Analytics transmits and stores the data on its own servers.