Privacy Policy

Last updated: 27 September 2026

Lappiland Oy respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make a booking or participate in an experience offered by Lappiland Oy.

1. Data Controller

The data controller responsible for your personal data is:
Lappiland Oy
Kittilä, Finland
Company number: 3584685-8
Email: lappiland.finland@gmail.com
Telephone: +358 40 366 3904
Website: www.lappiland.com

2. Personal Data We Collect

Depending on how you interact with us, we may collect:
-Full name
-Email address
-Telephone number
-Booking details
-Payment and transaction information
-Experience date and number of participants
-Accommodation or pick-up location
-Special requests and information you voluntarily provide
-Information relevant to accessibility, safety or participation where you choose to provide it
-Communications between you and Lappiland
-Photographs and videos created as part of experiences that include photography
-Technical website information such as cookie, browser and device data where applicable
Payment transactions may be processed by third-party payment providers. LappiLand does not store complete credit or debit card details.

3. How We Use Your Personal Data

We may process your personal data to:
-Manage, process and confirm bookings
-Provide the experiences and services you have purchased
-Arrange pick-up and transportation
-Contact you regarding departure times, pick-up details, weather conditions or changes to your experience
-Process payments, cancellations and refunds
-Provide customer service and respond to enquiries
-Coordinate experiences operated by our trusted local partners
-Deliver photographs or other content included in your experience
-Maintain appropriate business, accounting and transaction records
-Comply with legal, tax and regulatory obligations
-Protect the safety of our guests, guides and partners
-Send marketing communications where we have an appropriate legal basis to do so

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process personal data where there is an appropriate legal basis, including:
-Performance of a contract – where processing is necessary to manage your booking and provide the experience you purchased
-Legal obligation – where we are required to retain or process information for accounting, taxation or other legal purposes
-Legitimate interests – where necessary for the reasonable operation, security and improvement of our business and services, provided that these interests do not override your rights
-Consent – where consent is required, for example for certain marketing communications or uses of identifiable photographs
Where processing is based on consent, you may withdraw your consent at any time.

5. Booking, Payment and Technology Providers

We may use trusted third-party service providers to operate our website, booking system, communications and payment processing.
This may include providers of:
-Website hosting and website services
-Online booking and reservation systems, including Bókun
-Payment processing services
-Email, telephone and communication services
-Accounting and professional services
-IT, security and technical services
These providers may process personal data only where necessary to provide their services or where otherwise permitted or required by law.
We do not sell or rent your personal data.

6. Partner-Operated Experiences

Some experiences offered through Lappiland, including certain husky and reindeer experiences, are operated by independent local partners.
Where necessary to organise and provide an experience you have booked, we may share relevant booking information with the partner operating that experience.
We only share information that is reasonably necessary for the booking, organisation, safety and delivery of the experience.

7. Photography and Video

Some Lappiland experiences include professional photography or video as part of the service.
Where photography is included in the experience you have purchased, photographs may be taken, selected, edited, stored and delivered to you as part of providing that service.
We may separately ask for permission to use identifiable photographs or videos of you for promotional purposes, including our website, social media and other marketing materials.
Where consent is required for such marketing use, we will obtain it before using the material for that purpose. You may withdraw consent for future use by contacting us.
Withdrawing marketing consent does not affect the lawfulness of any processing carried out before the withdrawal and does not prevent us from processing photographs where necessary to provide the photography service you purchased or where another lawful basis applies.

8. Special Categories of Personal Data

You may choose to provide information concerning accessibility, mobility, health or other personal circumstances where this is relevant to safe participation in an experience.
Please provide only information that is necessary for us to organise your experience safely.
Where such information constitutes special-category personal data under applicable law, we will process it only where an appropriate legal basis and condition for processing applies.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing our services and meeting legal, accounting, taxation and dispute-resolution requirements.
Different categories of information may therefore be retained for different periods.
When personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.

10. International Data Transfers

Some of the technology and service providers we use may process or store personal data outside Finland or the European Economic Area.
Where personal data is transferred outside the European Economic Area, we take appropriate steps to ensure that the transfer is protected in accordance with applicable data protection law, including the use of recognised safeguards where required.

11. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, destruction, alteration, unauthorised disclosure or access.
However, no internet-based system can be guaranteed to be completely secure.

12. Your Rights Under GDPR

Subject to applicable law, you may have the right to:
-Request access to your personal data
-Request correction of inaccurate or incomplete personal data
-Request deletion of your personal data
-Request restriction of processing
-Object to certain processing
-Request portability of your personal data
-Withdraw consent where processing is based on consent
-Lodge a complaint with the competent data protection supervisory authority
Some rights are subject to legal limitations. For example, we may be required to retain certain booking or transaction information for accounting or legal purposes even after receiving a deletion request.
To exercise your rights, contact us at lappiland.finland@gmail.com.

13. Cookies and Website Data

Our website may use cookies and similar technologies that are necessary for website functionality and, depending on your choices, for analytics or other purposes.
Where required by applicable law, non-essential cookies will be used only after obtaining the appropriate consent.
Further information about the cookies used on our website and available choices may be provided through our cookie notice or cookie settings.

14. Third-Party Links

Our website may contain links to websites or services operated by third parties.
Lappiland is not responsible for the privacy practices of independent third-party websites. We recommend reviewing their privacy policies before providing personal information directly to them.

15. Complaints

If you have concerns about how we process your personal data, please contact us first so that we can address your concerns.
You also have the right to lodge a complaint with the competent data protection supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our services, systems or legal obligations change.
The current version will be published on our website together with the date of the latest update.

17. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact:
Lappiland Oy
Kittilä, Finland
Company number: 3584685-8
Email: lappiland.finland@gmail.com
Telephone: +358 40 366 3904
Website: www.lappiland.com