loader

Privacy Policy

Privacy Policy Statement

Privacy Policy Statement

This Privacy Policy explains how personal data is collected, processed, and protected.

Data Controller

Bookings & Payments

You can complete tour bookings via our website. Payments are processed securely through Paytrail (Finland). Credit card and bank payments are handled by Paytrail.

  • Paytrail Plc
  • Address: Innova 2, Lutakonaukio 7, 40100 Jyväskylä, Finland
  • Business ID: 2122839-7

Opening Hours
Mon–Fri: 09:00 – 17:00 (EET)
Weekends: By appointment

Data Protection Contact

Lapin Taivas Arctic Expeditions

Email: lapintaivasrovaniemi@gmail.com
Tel: +358 44 248 0343

Name of Register

Customer-, partnership and marketing register.

Purpose of Processing Personal Data

The grounds for processing personal data are based on a contractual customer or business partner relationship or the customer's explicit consent. The primary purpose of registration is to manage personal data necessary for cooperation between RG Revontuli Oy and its customers and business partners, and to ensure the smooth delivery of customer service and purchased services and goods.

Personal data is processed for the following purposes:

  1. Implementation and verification of tour program service purchases
  2. Business planning and product development
  3. Marketing communications, newsletters, targeted advertising, and other advertisements
  4. Improving the website user experience
  5. Market research and other research and analysis

RG Revontuli Oy, as the data controller, takes care to carefully consider the interests and rights of the data subject. Personal data is collected in accordance with its privacy policy and is not processed, modified, or transferred in any way other than that specified in this privacy policy.

Record Content

The record may contain the following information:

  1. Contact information, including name, phone number, email address, accommodation name, and destination address
  2. Nationality
  3. Ages of children
  4. Possible allergies and special diets that significantly affect the performance of the service
  5. Medical information that significantly affects the performance of the service
  6. Credit card information when staying at Safartica Ltd. accommodations
  7. Information about services and products purchased by the customer, their delivery, and billing
  8. Questions, comments, or other reactions of the data subject on the network
  9. Materials sent by the data subject (e.g., a photo)
  10. Customer feedback, consents, agreements, and prohibitions
  11. Business ID, contact person's position in the company, and billing information (corporate customer)

RG Revontuli Oy requests that adults provide the ages of their minor children to ensure safe and smooth customer service. Additionally, customers are requested to inform RG Revontuli Oy of any possible allergies, special diets, or medical information that could significantly affect the security and smooth operation of the ordered service.

Technically collected information regarding network usage may include IP address and location, country or city, network usage and timing, device usage, operating system type and software version, browser type and language settings, customer service interactions across various service channels, and external sites accessed by the user from and transferred within the RG Revontuli Oy network. RG Revontuli Oy may collect information about service usage through cookies.

Normal Purposes of Disclosed Data

Personal data is disclosed to RG Revontuli Oy's suppliers and business partners only if the data subject participates in a purchased or offered service partially or fully organized by RG Revontuli Oy's suppliers or business partners. In certain exceptional cases, RG Revontuli Oy discloses customer or stakeholder data to the other party if the person concerned requests RG Revontuli Oy to do so or if the competent authority requests RG Revontuli Oy to disclose separately identified information from RG Revontuli Oy's register in accordance with applicable legislation.

Transfer of Personal Data to Third Countries or International Organizations

Data is not transferred to third countries or international organizations. RG Revontuli Oy discloses data to third parties or international organizations in exceptional cases, if a customer or stakeholder consents to this purpose and if RG Revontuli Oy has completed a risk and quality system assessment regarding the actual security level of the third country in conjunction with the Data Protection Officer and the Finnish Data Protection Authority.

Record Security Principles

RG Revontuli Oy diligently protects personal data throughout its lifecycle using appropriate privacy policies and data security methods. The data controller collects and processes personal data to the extent necessary for its operations.

Access to digital materials is restricted by personal usernames and passwords and by limits determined according to each employee's job description and requirements. Documents are stored in locked rooms, access to personal data is restricted, and personnel are subject to confidentiality obligations. System providers process personal data in data-secure server facilities. Data is destroyed in accordance with data security guidelines.

Right of Access

Data subjects have the right to know what personal data is stored in the registry. Furthermore, after submitting a sufficient request for review, the data subject has the right to access information about themselves and any potential records. The request for review must be submitted in writing and signed to the Data Protection Officer.

Right to Correction and Erase

RG Revontuli Oy, as the data controller, has the right to correct any inaccurate data specified by the data subject in the registry. The data controller is obligated to voluntarily verify the current and up-to-date nature of the data. The data subject may request the deletion of all data concerning him/her from the registry. The Data Protection Officer oversees the processing process.

Other Rights Regarding the Processing of Personal Data

The data subject has the right to request the restriction of the processing of his/her personal data. The data subject also has the right to receive the personal data he/she has submitted to RG Revontuli Oy in an organized, commonly used, and machine-readable format and to transmit this data to another data controller. Furthermore, the data subject has the right to object to data processing, automated decision-making, and profiling.

Data Deletion and Storage Period

Personal data is stored in records for at least one year following the termination of contractual obligations, unless otherwise agreed upon or required by law. RG Revontuli Oy also deletes customer personal data upon request, unless otherwise stipulated by law, unless a competent authority initiates proceedings requiring RG Revontuli Oy to retain data, or unless a third party requests a security protection order for the data from a Finnish court.

Changes to Privacy Policy

RG Revontuli Oy may make changes to this privacy policy. The updated privacy policy is available on our website to ensure users are informed about how their personal data is processed.

Last updated: October 6, 2025

shape
shape

Chase the Northern Lights with Lapintaivas Tours

Experience the magic of the Aurora Borealis beneath Lapland’s starry skies. Our expert-guided tours depart exclusively from Rovaniemi, offering intimate group or private Northern Lights experiences tailored just for you.

tripex image