Privacy policy
Updated 18.9.2024
Visit Lumo is committed to protecting the privacy of its customers. This privacy statement explains how we collect, use, and protect your personal data.
1. Data Controller
Visit Lumo
Business ID: 3464343-4
info@visitlumo.com
+358 40 412 6655
2. Contact Person Responsible for the Register
Ancela Jaako
info@visitlumo.com
+358 40 412 6655
3. Purpose of Processing Personal Data
Visit Lumo collects and processes personal data for booking management and customer service. The legal basis for processing personal data is the management of the customer relationship and the execution of bookings.
4. Personal Data Stored in the Register
The customer register includes the following information:
Contact information:
- Name
- Address
- Email address
- Phone number
- Payment details
- IP address
5. Data Retention Period
Personal data is retained as long as necessary to manage bookings, maintain the customer relationship, and fulfill legal obligations. Data is securely deleted when no longer needed.
6. Disclosure and Transfer of Data
Visit Lumo may disclose personal data to third parties, such as payment service providers, only to the extent necessary to provide services. Data will not be transferred outside the EU without the explicit consent of the customer.
7. Rights of the Data Subject
The data subject has the following rights, which can be exercised by sending a request to info@visitlumo.com:
Right of Access: The data subject can review the personal data stored about them.
Right to Rectification: The data subject may request correction of incorrect or incomplete information about them.
Right to Erasure: The data subject has the right to request deletion of data if processing is no longer necessary. We will process the deletion request and either delete the data or provide a justified reason why data cannot be deleted.
Right to Object: The data subject can object to the processing of personal data if they believe it has been processed unlawfully.
Direct Marketing Opt-Out: The data subject has the right to prohibit the use of their data for direct marketing.
It should be noted that the data controller may have a legal or other right not to delete the requested data. The data controller is obligated to retain accounting material for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting-related material cannot be deleted before the specified period expires.
Withdrawal of Consent: If the processing of personal data is based solely on consent and not, for example, on a customer relationship or membership, the data subject may withdraw their consent.
Right to File a Complaint with the Data Protection Ombudsman: The data subject has the right to demand restriction of processing of disputed data until the matter is resolved.
Right to Appeal: The data subject has the right to file a complaint with the Data Protection Ombudsman if they believe we have violated data protection laws while processing their personal data.
Data Protection Ombudsman’s contact information:
https://tietosuoja.fi/en/contact-information
8. Cookies
Visit Lumo uses cookies to enhance user experience and analyze website usage. Separate information is provided about the use of cookies, and users can manage their cookie settings in their browser.
9. Duration of Processing
Personal data is generally processed as long as the customer relationship is valid. The data subject can unsubscribe from our marketing list via a link in each marketing email we send.
10. Data Processors
The data controller and its employees process personal data.
11. Data Security
Visit Lumo protects personal data using appropriate technical and organizational security measures, such as encryption and access control.
12. Updating the Privacy Statement
Visit Lumo updates this privacy statement as necessary to comply with changes in legislation or business practices. The latest version of the statement is always available on our website.