PRIVACY POLICY: TIERA RESORT

This Privacy Policy describes how Tiera Resort collects, processes, and protects the personal data of its customers. Ensuring the secure and transparent processing of your data is of utmost importance to us.

1. Data Controller

Tiera Resort Oy

Email: info@tieraresort.fi

Website: www.tieraresort.fi

2. Contact Person for Data Protection

Our customer service handles all inquiries regarding data protection:

Email: info@tieraresort.fi

3. Name of the Register

Tiera Resort Customer and Marketing Register.

4. Purpose and Legal Basis for Processing

We process personal data for the following purposes:

Provision of Services: Managing bookings, accommodation services, organizing activities, and communicating with the customer.
Legal Obligations: For example, filing passenger notifications for authorities and complying with accounting legislation.
Customer Relationship Management: Collecting feedback and improving the service experience.
Marketing: Sending newsletters and targeted advertising (based on consent or legitimate interest).

Legal Bases: Performance of a contract, legal obligation, legitimate interest of the data controller, or explicit consent provided by the customer.

5. Content of the Register

We collect the following information about our customers:

Basic Information: Name, address, phone number, email address.
Booking Details: Arrival and departure dates, booked services (rooms, activities), passenger notification details (e.g., nationality, passport number).
Payment Information: Billing details and completed payment transactions.
Customer Preferences: Special diets, allergies, or other additional information provided by the customer.
Technical Data: IP address and cookie data regarding website usage.

6. Regular Sources of Information

Information is primarily obtained directly from the customer:

Through the website’s booking system.
Via bookings made by email or telephone.
From third-party booking channels (such as Booking.com or Expedia).
From forms filled out on-site at the resort.

7. Disclosure and Transfer of Data

Data may be disclosed to third parties in the following cases:

Service Providers: Subcontractors who implement part of the services (e.g., activity providers or IT partners).
Authorities: To fulfill legal obligations (e.g., the police or tax authorities).
Data Transfers Outside the EU: We primarily use service providers whose servers are located within the EU. If data is transferred outside the EU/EEA, we ensure an adequate level of data protection through Standard Contractual Clauses (SCC).

8. Data Retention Period

We retain data only as long as necessary to fulfill the defined purposes:

Accommodation Records: Statutory period (e.g., passenger notifications for 1 year).
Accounting Records: 6–10 years in accordance with legal requirements.
Marketing Data: Until the customer withdraws their consent or requests the deletion of their data.

9. Rights of the Data Subject

You have the right to:

Access the data concerning you.
Request the rectification of incorrect data.
Request the erasure of your data (“the right to be forgotten”).
Restrict or object to the processing of your data.
Withdraw your consent at any time (e.g., unsubscribing from the newsletter).
Lodge a complaint with the Data Protection Ombudsman if you believe we are violating data protection legislation.

10. Data Security

We employ appropriate technical and organizational security measures (such as encryption and access control) to protect personal data from loss, misuse, or unauthorized access.

11. Cookies

We use cookies on our website to improve the user experience and analyze visitor traffic. You can manage your cookie preferences through your browser settings.

This Privacy Policy was last updated on May 4, 2026. We reserve the right to update this policy as our services evolve or as legislation changes.