Privacy statement

REGISTRY AND PRIVACY STATEMENT

This is Polar Star Travel's registration and privacy statement in accordance with the EU General Data Protection Regulation (GDPR). Prepared on 29 November 2023.

REGISTRAR

REQUESTS RELATED TO DATA PROTECTION

Responsible for data protection requests: Louru Oy.

REGISTER NAME

Polar Star Travel online service user register.

PURPOSE OF PERSONAL DATA PROCESSING

The purpose of personal data processing is communication with customers, customer relationship maintenance and marketing. In addition, the collected information can be used to develop the online service. The information is not used for automated decision-making or profiling.

INFORMATION CONTENT OF THE REGISTER

Information to be stored in the register is: Person's name, company name, contact information (phone number, email address, address), website addresses, information about ordered services and their changes, billing information, other information related to the customer relationship and ordered services.

The data will be stored for the time being.

REGULAR INFORMATION SOURCES

The information to be recorded in the register is received from the customer via e-mail, phone, social media services, contracts, customer meetings and other situations where the customer discloses their information.

Contact information for companies and other organizations can also be collected from public sources such as websites, directory services and other companies.

DATA TRANSFER OUTSIDE THE EU OR EEA

Information is not regularly disclosed to other parties. Information can be published to the extent agreed with the customer. Data can also be transferred by the controller outside the EU or EEA.

REGISTRY PROTECTION PRINCIPLES

The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.

RISKS

Risks related to personal data are e.g. data leaks. The personal data stored in the register is protected against unauthorized access to the data and against accidental or illegal data destruction, alteration, transfer, transfer or other illegal processing.

RIGHT OF INSPECTION AND RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA

Every person in the register has the right to check their information stored in the register and to demand the correction of any incorrect information or the completion of incomplete information.

If a person wants to check the information stored about them, demand a correction or request the deletion of their personal data, the request must be sent in writing to the controller. If necessary, the registrar may ask the requester to prove their identity. The controller responds to the customer within the time stipulated in the EU data protection regulation (generally within a month).

COOKIES AND VISITOR TRACKING

Website visitor information and statistics are stored via the Google Analytics web analytics service on Google's servers, which may also be located outside the EEA (Privacy Shield countries).

WHAT ARE COOKIES?

Cookies are small text files that are stored on the user's device when he visits the website. With each visit, these cookies are sent back to the website, which recognizes the cookie. With the help of cookies, e.g. identifies the user's device, saves the choices made by the user on the site and stores login information. Cookies can also be used to track visitors, which is used to improve the user experience and target ads, for example.

COOKIES USED ON THE WEBSITE

This website uses the Google Analytics web analytics service, which uses cookies for visitor tracking. Google Analytics cookies can be used to collect information about, for example, the user

• from the device
• location
• of pages visited (on this site)
• of opened links
• of the visiting time
• from the source of arrival.

This website may contain embedded content from other sources. Downloading or opening embedded content is comparable to the user visiting a third-party website.

TARGETING THE COLLECTED INFORMATION TO THE PERSON

None of the collected data can be assigned to individuals, as the IP addresses and other identifying information of individuals have been removed from the reports. Google Analytics reports provide indicative figures on the number of visitors, information about their devices and behavior on this website.