Privacy policy

Updated 27.5.2026

This policy explains how Suomen Retkimelonta processes the personal data of its customers in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

Juutiprint Ky, auxiliary business name Suomen Retkimelonta, business ID 0640009-9

Email: info@retkimelonta.fi

Phone: +358 41 314 3469

Data protection matters are handled by Esa Juutilainen.

2. What data we collect

We collect only the data necessary for handling bookings and the customer relationship:

  • Name
  • Email address
  • Phone number
  • Booking and purchase data (kayaks, courses and trips booked, dates, number of participants, amount)
  • Payment status (we do not process or store card details ourselves — payment is handled through a payment intermediary)
  • The status of your marketing consent, if you have given one
  • A record of acceptance of the booking terms

3. What the data is used for and on what basis

We process personal data for the following purposes:

  • Carrying out bookings and customer service. Legal basis: performance of a contract. We need your contact details in order to confirm the booking and to contact you about matters relating to the trip.
  • Safety. Legal basis: legitimate interest and ensuring the safety of participants. Contact details let us know who is out on the water and reach participants when necessary.
  • Statutory obligations, such as accounting. Legal basis: legal obligation.
  • Marketing (upcoming trips and offers). Legal basis: consent. We send marketing only if you have given separate permission for it, and you can withdraw that permission at any time.

4. Data retention period

We retain booking and customer data for as long as is necessary for managing the customer relationship and for meeting statutory obligations (such as the Accounting Act). Accounting-related data is retained for the period required by law. Data processed on the basis of marketing consent is retained until you withdraw your consent. Data that is no longer needed is deleted.

5. Disclosures and processors

We do not sell or disclose your personal data to outside parties for any purpose. To run our operations we use reliable service providers who process data on our behalf:

  • Payment intermediary (payment processing)
  • Technical service provider for the website and database
  • Email service (confirmations and customer messages)

Data may be processed outside the EU or the EEA if the service provider is located there. In that case we ensure that the transfer takes place with the safeguards required by data protection legislation.

6. Your rights

You have the right to:

  • check what data has been stored about you
  • request the rectification of incorrect data
  • request the erasure of your data ("the right to be forgotten"), unless a statutory obligation requires it to be retained
  • withdraw your marketing consent at any time
  • lodge a complaint with the Office of the Data Protection Ombudsman if you consider that your data has been processed unlawfully

To exercise your rights, contact us at info@retkimelonta.fi. We may ask you to verify your identity before acting on the request.

7. Data security

Personal data is processed confidentially. The data is stored in a protected database to which access is limited to those who need the data in their work. Connections between the site and the server are protected by encryption.

8. Changes to this policy

We may update this privacy policy as our operations or legislation change. The up-to-date version is always available on this page.