Last updated: May 2025
This Privacy Policy explains how Finnra Network Oy ("Finnra", "we", "us", "our") collects, uses, and protects your personal data when you use our website at www.finnranetwork.com. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).
1. Who We Are
Finnra Network Oy is a tourism and transfer service company operating in Finnish Lapland.
- Company: Finnra Network Oy
- Address: Kalevalantie 10 B 17, 90570 Oulu, Finland
- Email: [email protected]
- Phone: +358 40 058 4482
2. What Data We Collect
We only collect personal data that you provide to us directly through our website forms. We do not collect data passively or through tracking tools.
Booking Requests
When you submit a booking request we collect:
- First and last name
- Email address
- Phone number
- Selected service, date, time and duration
- Number of passengers
- Pickup location
- Any special requests you provide
Contact Form
When you send us a message via the contact form we collect:
- Your name and email address
- The subject and content of your message
Career Applications
When you submit a job application we collect:
- First and last name
- Email address and phone number
- Country of residence
- Role applied for and languages spoken
- Cover letter / personal message
- CV or resume file (if uploaded)
3. How We Use Your Data
We use your personal data solely for the following purposes:
- To process and respond to your booking requests
- To send booking confirmation and status update emails
- To respond to your enquiries via the contact form
- To review and respond to job applications
- To comply with legal obligations
We do not use your data for marketing, profiling, or any automated decision-making.
4. Legal Basis for Processing
Under the GDPR, we process your personal data on the following legal bases:
- Contract performance — processing your booking request is necessary to provide our services to you.
- Legitimate interests — responding to contact enquiries and reviewing job applications.
- Legal obligation — where we are required by law to retain certain records.
5. Third-Party Services
To operate our website we use the following third-party services. We do not sell or share your data with any other third parties.
- Supabase — cloud database service used to store booking requests. Data is stored on servers within the EU. See Supabase Privacy Policy.
- EmailJS — used to send booking confirmation and alert emails. See EmailJS Privacy Policy.
- Formspree — used to process career application form submissions. See Formspree Privacy Policy.
- Google Maps Platform — used for pickup location autocomplete in the booking form. Google may process location-related data. See Google Privacy Policy.
6. Cookies
Our website uses only essential cookies necessary for the website to function. We do not use advertising, tracking, or analytics cookies.
The only cookies present on our site are those set automatically by Google Maps when you use the pickup location field. These are functional cookies required for the map service to operate and cannot be disabled without disabling the feature itself.
You can control cookies through your browser settings at any time.
7. Data Retention
We retain your personal data only for as long as necessary:
- Booking and contact data — retained for 3 months from the date of submission, then permanently deleted.
- Career applications — retained for 3 months from the date of submission. If we wish to keep your application on file longer we will ask for your explicit consent.
8. Your Rights Under GDPR
As a resident of the European Economic Area you have the following rights regarding your personal data:
- Right of access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can ask us to correct any inaccurate data.
- Right to erasure — you can ask us to delete your personal data at any time.
- Right to restriction — you can ask us to restrict how we use your data.
- Right to data portability — you can request your data in a machine-readable format.
- Right to object — you can object to our processing of your data.
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) if you believe your data has been handled unlawfully.
9. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data transmitted through our website is encrypted using HTTPS. Access to stored booking data in Supabase is restricted to authorised personnel only via password-protected admin access.
10. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
12. Contact Us
For any questions or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: [email protected]
- Phone: +358 40 058 4482
- Address: Finnra Network Oy, Kalevalantie 10 B 17, 90570 Oulu, Finland
