Data Controller
Finnoy Travel is the controller of your personal data.
Contact: please reach us via our contact form.
Jurisdiction: Finland (EU/EEA).
What We Collect and Why
Statistics and Server Logs
When you visit our site, we automatically process technical data such as IP address, time of visit, browser/OS details, locale, and requested pages. We keep this confidential and do not disclose it to third parties unless required by competent authorities. The data is also used to generate aggregated, non-identifiable usage statistics and to investigate technical incidents.
Legal basis: legitimate interests (GDPR Art. 6(1)(f)) in ensuring security, reliability, and service analytics.
Google Analytics
We use Google Analytics to understand how our website is used and to improve content. IP addresses are anonymised (truncated) before storage, so Google does not retain the full identifying IP. Google provides safeguards such as data minimisation, access controls, and Standard Contractual Clauses (SCCs) for international transfers.
Legal basis: legitimate interests.
Advertising (Google AdSense)
We serve personalised or non-personalised ads via Google AdSense. On your first visit, we ask for your ad preferences and Consent. Google applies measures including consent management, limited ad personalisation where applicable, fraud prevention, and SCCs for international transfers.
Legal basis: legitimate interests and your consent via our cookie banner (GDPR Art. 6(1)(a)).
Comments and Contact Form
Comments: You may submit a nickname, email address, comment text, and an optional website. Nickname, website, and comment are public; your email is used only for notifications about moderation and replies.
Contact form: Your message generates an email to us. We use the contact details you provided to respond.
Legal basis: for publishing and moderating comments—legitimate interests and your action to publish (Art. 6(1)(f)); for the contact form—legitimate interests in handling enquiries (Art. 6(1)(f)).
Cookies
We use cookies that are necessary for the site/CMS to function, as well as cookies for analytics and advertising, as described above. You can set your preferences on your first visit and update them anytime in the Privacy Centre.
Affiliate Marketing
Some links are affiliate links. When clicked, our affiliate partners or networks may set a cookie to attribute a purchase and calculate commission. We work with both affiliate networks and direct partner programs.
Legal basis: legitimate interests in monetising and measuring referrals (Art. 6(1)(f))
Email List (Newsletter)
You may subscribe to our newsletter using your email address. Newsletters may include ads. We record opens and link clicks to compile statistics and improve content.
Legal basis: your consent (Art. 6(1)(a))
Sharing and International Transfers
We do not sell your personal data. We may share data with service providers acting on our behalf (e.g., Google Analytics and Google AdSense). Some processing may occur outside the EU/EEA. Where this happens, we rely on safeguards such as the EU Standard Contractual Clauses and provider security measures (including access controls and data minimisation).
Data Retention
- Server logs: 2 years.
- Comments: retained as long as the related article remains published.
- Contact form messages: 2 years.
- Newsletter membership: 2 years after last activity (or earlier upon withdrawal of Consent).
- Analytics/advertising cookies: per your consent choices and provider-specific lifetimes.
Your Rights
You have the right to request access, rectification, erasure, or restriction of your personal data; to object to processing based on legitimate interests; to withdraw Consent at any time (without affecting the lawfulness of processing before withdrawal); and to data portability where applicable.
To exercise your rights—or to request deletion of specific items such as past comments—contact us via the contact form. We may need to verify your identity.
You have the right to lodge a complaint with the Finnish Data Protection Ombudsman.
Managing and Revoking Consent
You can update or revoke your cookie and advertising choices at any time through the Privacy Centre (bottom-left of the site). You can unsubscribe from the newsletter using the link in any email.
Children’s Privacy
Our website is not directed to children under 16. If you believe we have collected personal data from a child, please get in touch with us and we will take appropriate steps.
Governing Law and Changes
This notice is governed by Finnish law and the EU General Data Protection Regulation (GDPR). We may update this notice from time to time. Material changes will be communicated on this page.