Privacy Policy

This Privacy Policy constitutes a description of the personal data register in accordance with Section 10 of the Finnish Personal Data Act (523/1999) and the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

Data Controller

Star Land Oy
Koutamaa 10
99130 SIRKKA
Finland
Tel. +358 400 394182

Business ID: 3213064-3

Person Responsible for the Register

Esko Takkunen
Koutamaa 10
99130 SIRKKA
Finland
Tel. +358 400 394182
info@immelkartano.fi

Name of the Register

Immelkartano Customer Register

Personal Data Processors

Immelkartano’s sales and marketing personnel and financial administration.

Purpose of Processing Personal Data

Personal data is processed for managing customer relationships, providing services, and developing customer service, business operations, and marketing.

If you have given your consent to receive direct marketing communications and newsletters, we may send you marketing messages and newsletters.

Data subjects have the right to prohibit the use of their personal data for newsletters and direct marketing by contacting us using the contact details provided above or by using the unsubscribe option included in marketing communications and newsletters.

Categories of Personal Data Collected

  • Contact information: name, address, telephone number, and email address.

  • For representatives of corporate customers: organisation, position, and other information related to the customer relationship.

  • Consents and objections related to direct marketing.

  • Accommodation booking details, such as accommodation property, arrival date, departure date, and total booking price.

  • Customer relationship information, such as invoicing and payment details.

  • Any other information collected with the customer’s consent.

Regular Sources of Personal Data

Personal data is collected directly from customers through contracts, customer service interactions, registrations, telephone conversations, the internet, email, or other similar means.

Regular Disclosure of Personal Data and Transfers Outside the EU or European Economic Area

Immelkartano does not disclose personal data to third parties, except in the following circumstances:

Personal data may be disclosed to public authorities to the extent permitted or required by applicable legislation.

Personal data may be transferred outside the European Union (EU) or the European Economic Area (EEA) if such a transfer is necessary for the technical implementation of a service requested by the user or if it is necessary under Section 23, subsections 2–5, of the Finnish Personal Data Act.

Cooperation partners located outside the EU are required to comply with EU data protection standards.

Data Retention Period

Personal data will not be retained for longer than is necessary for the purposes for which it was collected or as required by contractual obligations or applicable legislation.

Retention periods may vary depending on the purpose of processing and the circumstances.

Principles of Data Protection

The register is not maintained in a manual paper format.

Electronically Processed Data

Personal data contained in the register is stored confidentially.

Access to the register is restricted to personnel whose duties require the processing of such data. Each authorised user has a personal username and password.

All users are bound by confidentiality obligations. Access rights are granted and monitored by the person responsible for managing the register.

The network and equipment on which the register is stored are protected by firewalls and other appropriate technical security measures.

Rights of Data Subjects

Right to Object

Data subjects have the right to object, on grounds relating to their particular situation, to profiling carried out by Immelkartano using their personal data.

When submitting an objection, the data subject must specify the grounds for objecting to the processing.

Immelkartano may refuse to comply with an objection where permitted by applicable legislation.

Right of Access to Personal Data

Data subjects have the right to access the personal data stored about them in the register in accordance with applicable data protection legislation.

Requests for access must be submitted in writing, either by email or post, to the person responsible for the register, using the contact details provided in this Privacy Policy.

Right to Rectification, Erasure, Restriction of Processing and Data Portability

Data subjects have the right to request that Immelkartano correct any inaccurate, incomplete, outdated, or unnecessary personal data held about them.

Data subjects may request that Immelkartano erase their personal data. Immelkartano will comply with such requests unless there are lawful grounds for retaining the data.

Data subjects also have the right to request the restriction of processing, including where they contest the accuracy of their personal data.

Data subjects have the right to receive their personal data from Immelkartano in a structured, commonly used format and to transfer that data independently to another service provider or third party.

Exercising Data Subject Rights

If a data subject wishes to exercise any of the rights described above, we ask them to submit a request to Immelkartano by post or email, providing the following information:

  • Name

  • Address

  • Telephone number

  • Details of the information to be corrected or the action requested

Immelkartano reserves the right to refuse requests that are excessively repetitive, excessive in nature, or manifestly unfounded, in accordance with applicable legislation.

Every data subject has the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of their habitual residence, place of work, or the location of the alleged infringement, if they consider that the processing of their personal data violates the General Data Protection Regulation (GDPR).

This right is without prejudice to any other administrative or judicial remedies available to the data subject.