Privacy Policy | truelapland.com

25 Sep 2025

1. Data Controller
True Lapland
Antti Salpakoski
ID 3440526-8
contact@truelapland.com
Rovaniemi, Finland

2. Data Subjects
Persons who have submitted their information through forms on this website.

3. Legal Basis and Purpose of Processing Personal Data
Legal basis: Consent
Purpose: Maintaining the customer relationship or providing the ordered service

4. Personal Data Stored in the Register (maximum)
Customer name
Email address
Phone number

5. Rights of the Data Subject
The data subject has the following rights. Requests to exercise these rights must be sent to: e-mail contact@truelapland.com.

Right of access
The data subject can check the personal data we have stored.
Right to rectification
The data subject can request corrections to any incorrect or incomplete personal data concerning them.
Right to object
The data subject can object to the processing of personal data if they believe it has been processed unlawfully.
Right to prohibit direct marketing
The data subject has the right to prohibit the use of their data for direct marketing purposes.
Right to erasure
The data subject has the right to request the deletion of their data if the processing is no longer necessary. We will process the deletion request and either remove the data or provide a justified reason why it cannot be deleted.
It should be noted that the data controller may have a statutory or other right not to delete the requested data. The data controller is obliged to retain accounting records in accordance with the Accounting Act (Chapter 2, Section 10) for the statutory period (10 years). Therefore, accounting-related records cannot be deleted before the retention period expires.
Withdrawal of consent
If the processing of personal data concerning the data subject is based solely on consent, and not e.g., on a customer relationship or membership, the data subject can withdraw their consent.
Right to restrict processing
The data subject can request that we restrict the processing of disputed data until the matter is resolved.
Right to lodge a complaint
The data subject has the right to lodge a complaint with the Data Protection Authority if they believe that we are violating applicable data protection legislation.

Contact information of the Data Protection Authority

6. Regular Sources of Information
Customer data is regularly obtained:
a) Directly from the customer via the website form

7. Regular Disclosures of Data
Data is never disclosed to third parties for marketing purposes.
The data controller ensures that all service providers comply with data protection legislation. Regularly used service providers: Squarespace & Google.

8. Duration of Processing
Personal data is processed for 1 year / for the duration of the customer relationship.

9. Data Processors
The data controller processes personal data.

10. Transfer of Data Outside the EU
Data is regularly transferred outside the EU or the European Economic Area (EEA). When data is transferred outside the EU/EEA, we ensure an adequate level of protection by making agreements on the confidentiality and processing of personal data in accordance with legal requirements. This has also been ensured with our partners.

11. Automated Decision-Making and Profiling
Data is not used for automated decision-making or profiling.

12. Cookies
The website uses cookies to function and to analyze visitor traffic.
Personal data is not used for marketing purposes without separate consent.