Privacy Policy

Updated: December 2, 2025

Data Controller: Elkunpaljakko Group Oy
Business ID: 3543273-5
Address: Ounasjoen itäpuolentie 896, 96900 Saarenkylä
Email: info@mysticallapland.com
Phone: +358447997996

Purpose of Processing Personal Data

Elkunpaljakko Group Oy processes personal data for the following purposes:

  • booking, managing, and delivering accommodation, activity, and transportation services
  • processing online store orders
  • customer service and communication
  • invoicing and payment management
  • managing marketing permissions
  • enabling website functionality (e.g., cookies)

Processing is based on contractual necessity, legitimate interest, customer consent, and legal obligations.

Data Collected

Customer register may include the following information:

  • name
  • email address
  • phone number
  • address (if required for invoicing or transportation services)
  • booking and purchase information
  • payment information (note: payment card details are processed only by the payment service provider)
  • customer communication and feedback
  • marketing permissions and preferences
  • technical data collected via cookies and analytics (IP address, browser type, site usage)

Data Sources

Personal data is collected from:

  • the customer directly via our website, online store, or customer service
  • communication between the customer and the company
  • cookies and website analytics (technical usage data only)

Disclosure and Transfers of Data

Data may be disclosed to the following service providers working on behalf of Elkunpaljakko Group Oy:

  • payment service providers
  • booking system and online store providers
  • accounting and financial administration services
  • subcontractors involved in transportation services (only necessary data)

Data will not be disclosed to other third parties unless required by law.

Transfers Outside the EU/EEA

Data is generally not transferred outside the EU/EEA.
If certain technical services use servers located outside the EU/EEA, transfers are carried out according to GDPR requirements

Data Retention

Personal data is retained:

  • for the duration of the customer relationship
  • booking and transaction data is retained for 6 years according to accounting legislation
  • marketing permissions are retained until the customer withdraws consent
  • analytics and cookie data is retained according to service-specific policies

Rights of the Data Subject

Customers have the right to:

  • access their personal data
  • request correction of incorrect data
  • request deletion of data (when legally possible)
  • restrict the processing of their data
  • object to processing, including direct marketing
  • withdraw consent (e.g., for newsletters)
  • lodge a complaint with the Data Protection Authority

Requests can be made by contacting: info@mysticallapland.com

Data Security

Personal data is protected with appropriate technical and organizational measures.
Access to data is restricted to employees and service providers who need it to perform their duties.

Cookies and Analytics

The website uses cookies to:

  • enable website functionality
  • improve the service
  • enhance the user experience

Cookie settings can be managed in the browser.

Analytics tools collect only technical usage and browsing information, not names or contact details.

Contact Information

For privacy questions or requests regarding personal data, please contact: info@mysticallapland.com