Privacy Policy

Privacy Policy

Privacy and data protection

We at the visitnaantali.com web service of Naantalin Matkailu take care of your privacy and protect the personal data we have about you. This Privacy Policy explains what data the web service of Naantalin Matkailu collects and how this data is used.

In processing personal data, we comply with the General Data Protection Regulation (GDRP) and other applicable national privacy legislation regarding the identity of users.

What is personal data?

“Personal data” is any information that can be used to identify or single out an individual. Such information includes but is not limited to name, address, personal identity code or technical information, such as location data or the IP address of a computer. We store only the necessary personal data of our users. In addition to personal data, we collect non-personal data for statistical and development purposes.

The use of the website of Naantalin Matkailu requires the acceptance of this Privacy Policy.

Controller

Naantalin Matkailu Oy (hereinafter referred to as “Naantalin Matkailu” or “we”) processes and stores the necessary personal data of users in order to provide the visitnaantali.com website, Inside of Naantali newsletter and other associated services.

We are committed to comply with the General Data Protection Regulation and with other applicable legislation and to protecting your identity. The collection of personal data is based on a customer relationship or other equivalent connection. All data is handled in accordance with this Privacy Policy.

Name of the register

Marketing register of Naantalin Matkailu

Purpose of the register

The register’s data is used to advertise Naantalin Matkailu and its services, to send newsletters, customer bulletins and invitations, to create tailored content, such as interest-based advertising, and to track advertising efficiency. The register’s data may also be used to collect customer feedback through different channels, such as forms or websites (e.g. Tripadvisor).

We do not disclose data to third parties.

Data collected in the register

The register contains information on customers and newsletter subscribers who have provided their contact information on our website, social media channels or by other means. The register mainly contains e-mail addresses.

We also automatically collect data about your actions on our website, such as the IP address of your computer, time of browsing as well as the entry and exit pages. We may also register the links and advertisement clicked, the duration of the visit, the browser or the type of device and other equivalent data. Furthermore, our website includes various content from external websites, such as Tripadvisor, Facebook and Bokun, and data related to using them is collected.

At any time, you have the right to inspect, update and request erasure of the information stored about you in the register and see how it has been used. We will provide the requested information to you within 6 months.

Handling of the data in the register

We use the data collected in the register mainly for the predefined purposes you have agreed to, such as marketing our products and services and developing marketing and sales.

We may also use the collected data for statistical purposes on a general level and to prevent and investigate misuse.

In addition, we may use the data to provide more accurate targeting and personalization of our products and services with the permission of the customer.

Furthermore, we may send service messages, such as fault notifications.

Disclosure of the data in the register

All data is handled in accordance with this Privacy Policy. We do not sell or otherwise disclose it to third parties.

However, we may disclose our customer data based on currently applicable law or a mandatory stipulation from the authorities.

We may also disclose our customer data to a prospective buyer in connection with mergers and acquisitions.

In general, we do not transfer customer data outside the EU or the EEA.

Protection of the registers

The register’s data is stored on secure servers that cannot be accessed by unauthorized third parties, and the data is protected by means of firewalls, passwords and other necessary technical and IT measures.

Access to the databases is restricted to individuals who are required to handle the data in question.

Our website can also include links to external web services with different privacy policies. We recommend our customers to familiarise themselves with these policies separately. We are not responsible for third party services or their data security.

Right to inspect, correct and prohibit

At any time, you have the right to inspect, update and request erasure of the information stored about you in the register and see how it has been used. We will provide the requested information to you within 6 months.

We strive to keep the information up-to-date and remove unnecessary information from our registers, and you have the right to request correction or erasure of your information.

Customers also have the right to prohibit the use of their information for direct and other marketing purposes and to request erasure of their information.

Requests for inspection and correction should be sent in writing to the following address:

Naantalin Matkailu Oy
Rekisteriseloste
Nunnakatu 2
21100 Naantali

Updates to the Privacy Policy and register description

We update this Privacy Policy when necessary. The current version is published on our website and we urge users to regularly check it for updates.

Contact us

If you have questions about our Privacy Policy or the use of personal data, please contact us:

Email: info@visitnaantali.com
Tel: +358 (0)2 435 9800

Person responsible for the registers:
Unna Äkäslompolo
unna.akaslompolo@visitnaantali.com

25.5.2018
Version 1.2

Use of cookies

We use cookies or equivalent technologies on our website. Cookies are short text files, which the browser saves while visiting different web services. Cookies are used to identify your computer.

The data collected by cookies is used e.g. to personalise the user experience, target advertising, develop the web service, improve the service and to track and analyse visitor data.

Cookie data will not be combined with the register data we have collected, and it will only be used on a general level.

If you want, you can remove the cookies stored on your browser, but it might prevent or hinder the use of our website.

Our website also uses a Facebook pixel, and the collected data is used to target our advertising on Facebook. Learn more in the “Control the ads you see” section in Facebook’s Help Centre.

Website cookies

_gid, _gat, _gaWe use these cookies to track your use of the site in Google Analytics. Google does not store personal information.

Essential cookies

These cookies are necessary for the website to function and cannot be switched off. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work.

Functional cookies

These cookies enable the website to provide enhanced functionality and personalisation like videos and chat. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, some or all of these services may not function properly.

Performance cookies

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is anonymous. If you do not allow these cookies, we will not know when you have visited our site.

Social media and advertising cookies

These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. These cookies uniquely identify your browser and device. If you do not allow these cookies, you will not experience targeted advertising across different websites.

Website cookies

These cookies are used to monitor how visitors use the website in Google Analytics. Google does not store personal data.

Personal data register

Registry statement in accordance with the General Data Protection Regulation (GDPR)

Controller:
Naantalin Matkailu Oy
Business ID: 0706694-2
Nunnakatu 2
21100 Naantali

Person responsible for the register:

Unna Äkäslompolo
unna.akaslompolo@visitnaantali.com

Name of the register

Customer register of Naantalin Matkailu

Purpose of collecting personal data

Personal data collected from customers can be used for marketing the products and services of Naantalin Matkailu, for customer relationship management, such as billing, and for customer relationship development, such as customer and marketing research.

Data collected in the register

The register may contain all or some of the following personal data:

Registration or newsletter subscription information

If you do business in our online booking service (Winres) or online store for activities (Bokun), we also handle customer-related data, such as registration and login information, payment and delivery information of products and services as well as other information related to the interaction between the customer and Naantalin Matkailu.

Data sources of the register

The information in the register is primarily collected from the customers on their consent.

Disclosure and transfer of data

We do not disclose data to third parties.

However, we may disclose data based on currently applicable law or a mandatory stipulation from the authorities.

In general, we do not transfer customer data outside the EU or the EEA.

Data protection of the register

Personal data is stored on secure servers that cannot be accessed by unauthorized third parties, and the data is protected by means of firewalls, passwords and other necessary technical and IT measures.

Access to the databases is restricted to individuals who are required to handle the data in question.

Right to inspect, correct and prohibit

In accordance with the General Data Protection Regulation, you have the right at any time to inspect, update and request erasure of the information stored about you in the register and see how it has been used. We will provide the requested information to you within 6 months.

We strive to keep the information up-to-date and remove unnecessary information from our registers, and you have the right to request correction or erasure of your information at any time.

Customers also have the right to prohibit the use of their information for direct and other marketing purposes and to request erasure of their information.

Requests for inspection and correction should be sent in writing to the following address:

Naantalin Matkailu Oy
Rekisteriseloste
Nunnakatu 2
21100 Naantali