Privacy policy

Privacy Policy

Tiera Resort Oy

Drawn up: June 22, 2026

Updated: June 22, 2026

This privacy policy explains how Tiera Resort Oy processes the personal data of its customers, website users, and partners in accordance with the European Union General Data Protection Regulation (EU 2016/679, GDPR) and other applicable legislation.

1. Data Controller

• Company: Tiera Resort Oy

• Business ID: 3261047

• Address: Taivalvaarantie 2, 93400 Taivalkoski, Finland

• Email: info@tieraresort.fi

• Website: www.tieraresort.fi

2. Contact Person for Data Protection

For questions related to data protection, you can contact:

• Email: info@tieraresort.fi

3. Name of the Register

Tiera Resort Oy's customer, booking, and marketing register.

4. Purpose of Processing Personal Data

Personal data is processed for the following purposes:

• processing and managing accommodation bookings

• providing accommodation, restaurant, and program/activity services

• customer communication and customer service

• invoicing and payment processing

• maintaining and developing customer relationships

• handling customer feedback

• marketing and sending newsletters

• developing website functionality, usability, and security

• fulfilling statutory legal obligations

5. Legal Basis for Processing Personal Data

The processing of personal data is based on the following legal grounds:

• Performance of a contract

  • processing accommodation and service bookings

  • delivering services requested by the customer

• Legal obligation

  • passenger declaration forms concerning accommodation operations

  • obligations under accounting legislation

  • compliance with official authority orders

• Legitimate interest of the controller

  • maintaining customer relationships

  • developing services

  • monitoring customer satisfaction

  • preventing misuse

• Consent

  • sending newsletters

  • marketing communications

  • use of analytics and marketing cookies

6. Data Content of the Register

The register may contain the following information:

• Basic customer information: name, address, phone number, email address, nationality (if required)

• Booking and accommodation details: arrival and departure dates, booked rooms and services, details related to passenger declaration forms, special requests

• Payment and billing details: billing address, details related to payment transactions, billing details of corporate clients

• Customer feedback and contacts: contact requests, feedback, complaints, other customer communications

• Special dietary requirements and allergies: details voluntarily provided by the customer for service execution

• Website usage data: IP address, browser type and technical details of the device, cookie data, analytics data concerning website usage

7. Regular Data Sources

Data is collected from:

• the customer directly

• contact forms on the Tiera Resort website

• email and telephone bookings

• bookings made through the Booking.com service

• forms completed by the customer on site

• website analytics and cookie systems

• partners based on customer consent or booking

8. Recipients and Transfers of Personal Data

Data may be disclosed to or processed by the following parties:

• partners involved in executing accommodation and activity services

• payment service providers

• accounting service providers

• IT service providers

• website maintainers

• marketing service providers

• authorities when required by legislation

Tiera Resort uses the WordPress publishing system as its website platform. The technical maintenance of the website and potential plugins may process personal data to execute the service.

Tiera Resort uses Booking.com to facilitate accommodation bookings. Booking.com provides the personal data required for booking management to Tiera Resort. Data processing is also subject to Booking.com’s own privacy policy.

Personal data is not sold to third parties.

9. Transfers Outside the EU or EEA

As a rule, personal data is processed within the European Union or the European Economic Area (EEA).

Some technical services used—such as WordPress plugins, cloud services, or analytics tools—may transfer data outside the EU or EEA. If personal data is transferred outside the EU or EEA, transfers are executed in accordance with data protection legislation using safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission

• Adequacy decisions approved by the European Commission

• Other safeguards permitted under the GDPR

10. Data Retention Period

Personal data is retained only for as long as necessary for its processing purpose.

Data may be stored longer if required by legislation or necessary for handling legal claims.

11. Rights of the Data Subject

The data subject has the right to:

• obtain information on the processing of their personal data

• access their personal data

• request rectification of inaccurate data

• request erasure of personal data ("right to be forgotten")

• request restriction of processing

• object to the processing of personal data

• transfer data from one system to another where applicable

• withdraw consent at any time

• lodge a complaint with a supervisory authority

Data requests must be submitted by email to info@tieraresort.fi.

12. Right to Lodge a Complaint with a Supervisory Authority

If you consider that your personal data is being processed in violation of data protection legislation, you can lodge a complaint with the Finnish Data Protection Authority:

Office of the Data Protection Ombudsman

Lintulahdenkuja 4, 00530 Helsinki

Postal address: P.O. Box 800, 00531 Helsinki, Finland

Telephone: +358 29 566 6700

More information: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)

13. Protection of Personal Data

Tiera Resort Oy protects personal data using appropriate technical and organizational measures, which may include:

• user-specific access rights

• strong passwords

• encrypted network connections (SSL/TLS)

• firewalls

• security updates

• data backups

• data protection guidelines for personnel

Personal data is accessed only by personnel whose duties require it.

14. Cookies

Tiera Resort’s website is built on the WordPress publishing system. The site uses cookies to enable functionality, improve user experience, and analyze visitor traffic.

The following cookie types may be used:

• necessary cookies

• functional cookies

• analytics cookies

• marketing cookies

Consent is requested for the use of cookies where required by law. Users can modify cookie preferences at any time via browser settings or the site's cookie banner.

The website may contain links to external services (e.g., Booking.com). The privacy practices of those services are governed by their respective providers.

15. Changes to the Privacy Policy

Tiera Resort Oy reserves the right to update this privacy policy as operations, services, or legislation evolve. The up-to-date policy is always available at www.tieraresort.fi.

Frequently Asked Questions about Data Protection FAQ