Privacy Policy
Last updated 25 September 2026
Data controller
What data we collect
- Booking details: name, email, phone number, dates, number of guests and any special requests.
- Guest register data required by Finnish accommodation law (pre-arrival check-in): name, date of birth, nationality, country of residence, address, identity document details and the names of others in your party.
- Health information you choose to share (e.g. allergies or limitations), used only to run programmes and meals safely — basis: your explicit consent.
- Payment data: amount and status. Card details are handled by Stripe and never stored on our servers.
- Invoicing and accounting data.
- Newsletter and aurora alert subscriptions: name and email.
- Enquiries, messages and reviews you send us.
- Analytics data only with your consent (see Cookies).
Why we process your data
- Fulfilling your booking and serving you — basis: contract.
- Legal obligations: accounting and the guest register — basis: legal obligation.
- Newsletter and marketing — basis: your consent, withdrawable at any time.
- Improving our service and keeping it secure — basis: legitimate interest.
How long we keep your data
Accounting records are kept for six years as required by Finnish accounting law. Guest register data, identity document details and pre-arrival health notes are kept for one year from departure and then deleted automatically. Newsletter subscriptions are kept for as long as the subscription is active. Other booking data is deleted once no longer needed.
Sharing and processors
We never sell your data. We use trusted providers who process data on our behalf:
- Stripe — payment processing
- Base44 — website, database and email delivery platform, and the site chat assistant (AI)
- Meta (WhatsApp) — if you contact us via WhatsApp
- Esri — displaying maps on the site (processes your IP address)
- Google — calendar and analytics (analytics only with consent)
- Our accountant and booking platforms (e.g. Airbnb, Booking.com) when a booking comes through them.
Cookies
This site uses necessary cookies that enable login, language choice and the booking flow. Analytics cookies (Google Analytics) are enabled only if you consent in the banner shown on the site. You can change your choice at any time by clearing this site’s data in your browser.
Your rights
You have the right to access your data, correct inaccurate data, request deletion, restrict or object to processing, and receive your data in a portable form. You may also withdraw any consent at any time.
Requests: info@arcticalma.fi. If you believe we have not handled your data lawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Data security
Data is protected with encrypted connections and access controls. Only people who need the data for their work can access it.