Privacy policy
In accordance with the EU General Data Protection Regulation (EU 2016/679)
Created: 1.10.2018 Last updated: 22.10.2025
1. Data Controller
Northern Lights Riders Ltd
Piiskuntie 7, 99800 Ivalo, Finland
Phone: +358 45 888 7399
Email: [email protected]
2. Contact Person for Register Matters
Janne Tervaniemi
Phone: +358 45 888 7399
Email: [email protected]
3. Name of the Register
Northern Lights Riders Ltd – Customer Register
4. Purpose of Processing Personal Data
The purpose of this register is to manage customer relationships and bookings, provide travel and activity services, maintain contact with clients, and handle possible customer service matters.
Personal data may also be used for communication, feedback, billing, and the development of Northern Lights Riders’ services.
5. Data Content of the Register
The register may contain the following data:
- Customer’s name and contact details (address, phone number, email)
- Booking and participation information (e.g., tour type, date, number of participants)
- Payment details (only necessary transaction information; no credit card data stored)
- Possible customer feedback or communication history
6. Regular Sources of Data
Information is primarily obtained directly from customers through bookings, email correspondence, or other direct contact.
7. Regular Disclosure and Data Transfers
Personal data will not be transferred or disclosed to third parties except when required for providing the booked service (e.g., accommodation or transport partners) or when required by law.
Data will not be transferred outside the EU/EEA without appropriate safeguards.
8. Principles of Data Protection
All personal data is processed confidentially. Access to the register is restricted to Northern Lights Riders Ltd employees who need the information to perform their duties.
Data is stored in secure systems protected by technical and organizational measures against unauthorized access, alteration, or destruction.
9. Data Retention Period
Customer information is retained only as long as necessary for the purposes defined in this policy and to comply with legal obligations (e.g., accounting laws).
10. Rights of the Data Subject
Each individual has the right to:
- Access their personal data
- Request correction or deletion of data
- Restrict or object to processing
- Withdraw consent where applicable
- Lodge a complaint with the supervisory authority (Data Protection Ombudsman in Finland)
Requests regarding personal data should be sent in writing to the contact person listed above.
Northern Lights Riders Ltd
Piiskuntie 7, 99800 Ivalo