DATA PRIVACY POLICY STATEMENT FOR CUSTOMERS

This is the privacy policy description of Snowpark Parra (Vapaa-ajankeskus Parra Oy, business ID 0761616-6), which explains how customers’ personal data is processed.

The description also explains what rights and freedoms the customer has in relation to the processing of personal data.

The description is available on Snowpark Parra’s website and is also given to the customer at the cash desk upon request. Emails to customers contain a link to the description. The description is reviewed annually and updated as necessary.

The description has been updated on 25 October 2023.

The privacy policy description with the same content can be read both on the Snowpark Parra website and on the Snowpark Parra online store’s website.


1. WHY IS PERSONAL DATA COLLECTED?

Personal data is collected in order to implement an agreement with the customer regarding an online store order, season pass, equipment rental, skiing lessons or other similar purchase or reservation.

In each situation, only the necessary personal data is collected. The service cannot be implemented (produced) without the customer providing the requested information. If any of the requested information is voluntary, this will be indicated separately.

The information is used for contacts required by customer service. If the personal data is to be used for marketing communications, such as sending a newsletter to the customer’s e-mail, the customer’s express consent will be asked for this separately.

If it is possible to order products from merchants other than Snowpark Parra via the online store, Snowpark Parra does not in any way save the orders made or related information in its customer register.

The information is not used for automated decision-making. The data can be used for profiling.


2. WHAT KIND OF DATA IS COLLECTED?

Different personal data are collected for different purposes. Each of these services forms its own register. Below is a description of each register (the name used for the register in parentheses).


2.1. CUSTOMERS WHO MAKE A PURCHASE IN THE ONLINE STORE OR GIVE THEIR PERSONAL INFORMATION AT CHECKOUT (SNOWPARK PARRA JOHKU WEB STORE CUSTOMER REGISTER)

  • First and last name

  • Address

  • Postal district

  • Country

  • Telephone number

  • Email address

  • Personal identification number (private invoicing customer only)

  • Order source page


In the case of companies, the following are also registered

  • Name of the company

  • Business ID

  • Online billing address

  • Intermediator ID

  • Reference

  • Comment


In addition, the following information is registered about customers making a reservation for ski school lesson

  • the first names of those participating in the lesson and, in the case of children, also their age

  • a telephone number from which the subscriber or another adult taking care of the children can be reached during lesson


The customer has the option to freely provide other information he deems appropriate in the Additional information field of the online store’s purchase view. As far as skiing instruction is concerned, this information can be information about the skill level of those participating in the lessons, or, for example, about the need for special support affecting the learning situation.


2.2. CUSTOMERS WHO BUY A SEASON PASS (SEASON PASS HOLDER LIST, DIGITAL SEASON PASSES)

  • First and last name

  • facial image

  • Year of birth (no social security number)

  • telephone number (for children under 15, guardian’s telephone number)


2.3. CUSTOMERS WHO RENT EQUIPMENT (PAPER RENTAL FORMS, GROUP RENTAL LISTS)

  • First and last name

  • shoe number, height and weight

  • signature of the person making the agreement (can be, for example, a guardian)

  • Social security numbers are not collected, but the customer has the obligation to prove their identity when asked, for example by showing an identity card.

When groups (e.g. schools) rent equipment, the first name is sufficient for the name, if it can be unmistakably connected to a person within the group (e.g. using the class ID). Signatures are not requested for group bookings. In connection with group bookings, the customer is not asked to prove their identity.


2.4. CUSTOMERS WHO MAKE A RESERVATION FOR E.G. A GROUP (GROUP RESERVATION CALENDAR)

  • first and last name of the subscriber

  • e-mail address of the subscriber

  • subscriber’s phone number


2.5. CUSTOMERS TO WHOM AN INVOICE IS SENT (INVOICING SYSTEM)

  • first and last name of the subscriber

  • subscriber’s home address (or the address of the ordering entity)

  • e-mail address of the subscriber

  • subscriber’s phone number

If the purchase is made with a payment commitment, the payment commitment paper may also contain other information entered on it by the person giving the payment commitment (such as personal identification number).


2.6. CUSTOMERS WHO INQUIRE VIA MEANS OF COMMUNICATION (SUCH AS E-MAIL BOXES, TELEPHONE)

  • e-mail or phonenumber

  • name and other possible information that the customer provides in the message

This information is stored in the history of telephone and e-mail services, even if it is not specifically processed otherwise.


2.7. NEWSLETTER SUBSCRIBERS (NEWSLETTER ADDRESS BOOK)

  • email address


3. HOW IS DATA COLLECTED?

Information is collected almost exclusively from the customer personally, or in the case of children, from the guardian or other adult who takes care of the child (such as a teacher). The exception is phone numbers that may be searched for example on Fonecta, if it is necessary to reach the customer in a special situation.


4. WHO HAS ACCESS TO THE DATA?

The data is processed only by those employees whose job duties it is directly related to. For example, the booking calendar for skiing lessons is used by people responsible for sales, cashiers and ski instructors. If necessary, the technical maintenance staff of the Johku online store (Aptual Commerce Oy) can also access the data.

Information is not disclosed to outsiders, and outsiders do not have access to the information. The exception to this are documents included in accounting, such as invoices, which are also available to the accounting office and the auditor.

In cases required by law, information can also be disclosed to the authorities based on requests for information based on the law, if the authority so requires.


5. HOW AND WHERE IS THE DATA STORED?

The information is stored almost exclusively in digital form. The employee, whose job the information is related to, can access the information via the link they received personally, or alternatively via the company’s device. Digital systems are protected with passwords. The company’s devices are protected with a password, F-Secure services and other usual security measures.

The information contained in the accounting material is stored only in digital form.

Since Snowpark Parra uses Google services for data processing, data is also stored on servers located outside the EU and EEA. We use data transfer mechanisms approved by the European Commission, such as model contract clauses.

The Johku online store register is located in the Johku service and the data processor is Aptual Commerce Oy. More about the data protection principles of the Johku service: johku.fi/fi/tietosuoja

Equipment rental agreements are mainly made on paper, and they are kept at the rental shop in the possession of the staff. At the end of the ski season, the paper documents are transferred to Snowpark Parra’s office for storage and subsequent disposal.


6. HOW LONG IS THE DATA STORED

Information is stored as long as the user and Snowpark Parra have a valid mutual agreement and/or consent.

Information in the customer register of the Snowpark Parra Johku online store will not be deleted separately without the customer’s express request. Other personal data in electronic form will be destroyed in the fall of the fourth calendar year following the end of the skiing season (storage period 4.5-5 years).

Paper documents containing personal data are destroyed (by shredding or in another similar way) in the fall of the calendar year following the end of the skiing season (storage period 1.5-2 years).

If some legislation, such as the Accounting Act, requires the storage of some information longer than stated above, it will be stored in accordance with its requirements.

For statistical purposes, data can be anonymized, i.e. names and other information that could identify a person can be removed from them. Anonymized data is no longer personal data and can be stored longer.

The contact information from e-mail or phone contacts will remain in the service history and will not be deleted at all, unless the customer specifically requests it.

The e-mail address of newsletter subscribers is kept until the recipient requests to remove their address from the register.


7. WHAT ARE YOUR RIGHTS AS A CUSTOMER?

Every person in the register has the right to check their information stored in the register and to correct any incorrect or incomplete information.

The customer also has the right to demand the deletion of their data (”the right to be forgotten”) if they are no longer needed for the purposes for which they were originally collected. However, the data does not need to be deleted if its processing is necessary, for example, to comply with a legal obligation concerning the company or to prepare, present or defend a legal claim.

The customer has the right to deny or allow the processing of his data for marketing purposes. As stated above, Snowpark Parra asks for express permission for direct marketing, which can also be revoked at any time by notifying the company’s email address info@parra.fi.

The customer has the right to transfer the information they has provided to another system.

Since Snowpark Parra has to make sure that the customer is the person whose own or dependent’s personal data is in question, the request related to the rights mentioned above must be made in writing and signed.

The request can be sent on paper to Snowpark Parra, Luovantie 700, 64700 Teuva, or by taking a photo of the signed request and sending it to info@parra.fi. In addition, the customer must prepare to prove his identity in a separately agreed upon way, for example with a picture of his identity card.

Regarding the customer register of Snowpark Parra’s Johku store (online store and checkout), the customer can check and correct their information themselves through the free Oma Johku service. Merchant’s confirmation messages contain a link to the Oma Johku service, but you can also log in at johku.com/customer.

The Oma Johku service also includes the option to terminate the Oma Johku contract and delete data from Oma Johku. If the contract is terminated, data corrections and deletions must then be done in the manner described above, i.e. with a written, signed request.


8. WHAT ARE YOUR RIGHTS IF SNOWPARK PARRA DOES NOT COMPLY WITH DATA PROTECTION REGULATIONS?

A customer whose personal data or that of a dependent has been collected has the right to file a complaint with the competent supervisory authority if they considers that Snowpark Parra has not complied with applicable data protection regulations in its operations.


9. ARE COOKIES USED IN SNOWPARK PARRA’S ELECTRONIC SERVICES? WHAT ARE COOKIES?

Are cookies used in Snowpark Parra’s electronic services? What are cookies?

The website sends a small file to the browser, which is saved on the computer’s hard drive. Both (temporary) session ID cookies are used, which close when you close the Internet browser, and permanent cookies, which are stored on the computer’s hard drive.

The purpose of the cookie is to improve the user experience on the site. Cookies can be used to monitor and view the user’s interests and thereby influence the usability of the service.

Internet browsers generally accept cookies automatically. If necessary, the use of cookies can be turned off in the browser settings, in which case some functionalities will be removed.

Advertising cookies can be used to help optimize the advertising experience for the user of the service. Some third-party vendors, including Google, may also use cookies or web beacons (1-pixel image files) to improve the advertising experience.


10. DO COOKIES CONTAIN PERSONAL DATA?

The data collected with the help of cookies and web trackers do not contain the user’s personal data. Activities carried out online cannot be linked to a specific person.


11. CONTACT INFORMATION
SNOWPARK PARRA
(VAPAA-AJANKESKUS PARRA OY)

Email address: info@parra.fi
Phone: 040 843 4247
Postal address: Luovantie 700, 64700 Teuva
Business ID: 0761616-6