Privacy Policy

01Who We Are

Northern Lights Taiga Oy is a Finnish travel company offering premium nature experiences in Northern Finland.

Data Controller: Northern Lights Taiga Oy
Country: Finland
Website: www.northernlightstaiga.fi
Email: contact@northernlightstaiga.fi
Phone: +358 40 910 1675

02Information We Collect

Depending on how you interact with us, we may collect:

• Name and contact information, including email address and phone number.
• Booking information, including selected experiences, dates, and number of participants.
• Information you voluntarily provide about your travel preferences or service requirements.
• Newsletter subscription information and consent records.
• Communications you send to us through email or contact forms.
• Technical information, such as IP address, browser information, and website usage data where collected.

We only request personal information that is relevant to the services we provide.

03How We Use Your Information

We process personal data for the following purposes and on the applicable legal grounds:

• Bookings and services: To manage reservations, communicate with guests, and deliver purchased experiences. Legal basis: performance of a contract or steps requested before entering into a contract.
• Customer enquiries: To respond to questions and provide customer support. Legal basis: legitimate interests in managing customer communications, or contractual necessity.
• Newsletters and promotional offers: To send marketing communications where you have provided consent. Legal basis: consent.
• Accounting and legal compliance: To maintain records required by applicable laws. Legal basis: legal obligation.
• Website security: To protect our website and prevent misuse. Legal basis: legitimate interests in maintaining secure services.
• Optional website analytics: To understand website usage where analytics technologies are enabled. Legal basis: consent where required.

Where we rely on legitimate interests, we consider the interests and rights of the individuals concerned.

04Bookings and Third-Party Services

Our website uses third-party services to support our booking and customer communication processes.

FareHarbor: We use FareHarbor to facilitate online bookings for our experiences. When making a reservation, your booking information may be processed through FareHarbor in accordance with its applicable privacy documentation.

Brevo: We use Brevo to manage newsletter subscriptions, subscription confirmation, and marketing emails. Subscriber information and relevant consent records may be processed through this service.

We may also use hosting, email, payment, and technical service providers where necessary for our business operations.

We share personal data with service providers only to the extent necessary for the relevant purpose or where otherwise legally permitted.

05Newsletter and Marketing

If you subscribe to our newsletter, we use your email address to send updates about Northern Lights Taiga, seasonal experiences, exclusive offers, and other relevant news.

We use a double opt-in confirmation process for newsletter subscriptions. You may receive a confirmation email asking you to verify your subscription.

Newsletter subscribers may also receive promotional benefits, such as a discount code, according to the terms of the relevant offer.

You can unsubscribe at any time by clicking the unsubscribe link in our marketing emails or by contacting us directly. Withdrawing consent does not affect processing carried out lawfully before withdrawal.

Subscribing to our newsletter is voluntary and is not required to book our experiences.

06Cookies and Website Technologies

Our website may use cookies and similar technologies to support essential website functionality, security, and embedded third-party services.

Where non-essential cookies or tracking technologies are used, we obtain consent where required by applicable law.

You can manage cookies through your browser settings and, where available, our website’s cookie preference controls.

Disabling certain cookies may affect website functionality.

07Photographs and Experiences

Some of our experiences include photography and access to a private online photo gallery.

Photographs that identify individuals are personal data. We process such photographs for delivering the agreed photography service and, where necessary, on other appropriate legal grounds.

We will not use identifiable guest photographs for public promotional purposes without an appropriate legal basis, such as the guest’s consent.

Guests may contact us regarding the use or removal of their personal photographs.

08Data Storage and Retention

We retain personal information only for as long as necessary for the purpose for which it was collected, or as required by applicable law.

• Booking and financial records are retained for applicable accounting, tax, and legal periods.
• Customer enquiries are retained as necessary to handle the request and any related follow-up.
• Newsletter subscription information is generally retained while the subscription remains active, subject to necessary consent and compliance records.
• Photographs and galleries are retained according to the arrangements for the relevant experience and applicable retention requirements.

When personal data is no longer required, it is deleted or anonymised as appropriate.

09International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where such transfers take place, we ensure that an appropriate legal transfer mechanism is used, such as an adequacy decision or applicable contractual safeguards.

You may contact us for further information about international transfers and the safeguards applicable to your personal data.

10Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, and misuse.

Access to personal information is limited to those who need it for legitimate business purposes.

11Your Privacy Rights

Under the General Data Protection Regulation (GDPR), you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate information.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to certain processing activities.
• Request data portability where applicable.
• Withdraw consent at any time.

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, contact us at contact@northernlightstaiga.fi .

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman: tietosuoja.fi .

12Providing Personal Information

Providing personal data is generally voluntary. However, certain information is necessary to process bookings, communicate with guests, and deliver our services.

If the required information is not provided, we may be unable to complete a reservation or deliver the requested service.

We do not use personal data for automated decisions producing legal or similarly significant effects on individuals.

13Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, data processing practices, or applicable legal requirements.

The latest version will be available on this page together with the date of the most recent update.

14Contact Us

If you have any questions about this Privacy Policy or how we process your personal information, please contact us.