Privacy and Data Protection Notice
Effective from: 1 February 2026
This Privacy Notice describes how Kyyjärvi Camping Oy processes personal data in connection with its booking, accommodation and online services, as well as in the Johku web shop. The notice covers all stages of customer data processing in our operations. We may update this notice due to changes in our operations, legislation or systems.
1. Controller
Kyyjärvi Camping Oy (Business ID 3198595‑7)
Kalliorannantie 82, 43700 Kyyjärvi
+358 40 708 9933, www.kyyjarvicamping.fi, kyyjarvicamping@gmail.com
2. Data Protection Contact Person
Roope Valden, tel. +358 40 708 9933, kyyjarvicamping@gmail.com
3. Name of the Register
Customer and booking register of Kyyjärvi Camping Oy (Johku, online services and accommodation operations).
4. Legal Basis and Purpose of Processing
Legal bases: Contract (GDPR 6.1.b), legal obligation (GDPR 6.1.c), legitimate interest (GDPR 6.1.f) and consent (GDPR 6.1.a).
Purposes: fulfilment of bookings and accommodation services; payments and invoicing; mandatory legal obligations (guest registration under Finnish Act 308/2006; provision of foreign guest data to the police only in situations required by law; obligation to provide statistics for Statistics Finland under the Statistics Act 280/2004 when applicable; bookkeeping law); customer service and communication (including social media channels); direct marketing (with right to object); technical operation of the website (necessary cookies and logs); consent‑based Google Ads advertising.
5. Categories of Personal Data Processed
Basic information: name, address, email, phone number, country. Accommodation information: date of birth, nationality, dates of stay, accompanying persons (spouse and minor children where applicable), country of arrival, travel document number (for foreign guests) – as required by Act 308/2006. Booking and purchase data: booking content, additional services, payment transactions, receipt details. Business customers: company name, business ID, invoicing details. Special categories (with consent): dietary requirements. Website technical data: IP address, session data, necessary cookies, Google Ads cookies with consent. Social media (Facebook, Instagram, TikTok): profile name, message content, timestamp.
Data Retention Periods
6. Regular Sources of Data
Data provided by the customer (Johku, email, phone, social media), technical data from the payment provider, website logs.
7. Recipients of Personal Data
Authorities: police (foreign guest data in legally required situations), Statistics Finland (accommodation statistics), tax authorities/accounting.
Processors: Aptual Commerce Oy (Johku), Hostaan Oy (web hosting), Flatpay (payments; may use sub‑processors), Google (email; Ads with consent), Accounting firm Cape Economy.
Independent controllers: Meta (Facebook/Instagram), TikTok, Google Ads (with consent).
Possible transfers outside the EU/EEA are carried out under the EU–US Data Privacy Framework or Standard Contractual Clauses.
8. Principles of Data Security
Access control, encrypted connections (HTTPS), backups, updates, staff guidance and agreements with processors.
9. Rights of the Data Subject
Right of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Requests: kyyjarvicamping@gmail.com.
10. Cookies
The website uses necessary cookies. Google Ads cookies are activated only with consent, which can be withdrawn at any time via cookie settings.
11. Updates
This notice is updated as needed and the latest version is published on the website.
