_edited.png)

Privacy Policy
Last Updated: 28 June 2026
Introduction
Welcome to Unari Lake Reindeer Farm ("we", "our", "us"). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or book our tours and services.
Data Controller
The data controller responsible for your personal data is:
Unari Lake Reindeer Farm
Address: Niesintie 3607, 97370 Unarin-Luusua, Finland
Email: unarilakereindeerfarm@gmail.com
Phone: +358 40 3797567
Personal Data We Collect
Depending on how you interact with us, we may collect:
-
Full name
-
Email address
-
Phone number
-
Billing address
-
Booking details
-
Number of participants
-
Tour preferences
-
Communications with us
-
IP address
-
Browser type and device information
-
Website usage information collected through cookies
-
Name of underage children in company of paying customers
-
Personal information including but not limited to allergies, illnesses, food preferences
We do not store your full payment card information.
How We Collect Your Data
We collect personal information when you:
-
Make a booking through our website
-
Contact us via email or contact forms
-
Browse our website
Legal Basis for Processing
We process your personal data under one or more of the following legal bases:
-
Performance of a contract (to provide booked programmes as stated in the programme description on our website or according to your specific wishes)
-
Compliance with legal obligations
-
Legitimate interests (customer service, fraud prevention, website security)
-
Your consent (marketing communications, non-essential cookies)
How We Use Your Data
We use your personal information to:
-
Process bookings
-
Confirm reservations
-
Provide customer support
-
Send booking confirmations and updates
-
Process payments
-
Comply with legal obligations
-
Improve our services, programmes and website
Third-Party Service Providers
To provide our services, we use trusted third-party providers.
Bookeo
Our online booking system is provided by Bookeo. When you make a reservation, your booking information is securely processed through Bookeo.
Bookeo processes personal data on our behalf as a data processor.
For more information, please see Bookeo's Privacy Policy.
Stripe
Payments are securely processed by Stripe.
We do not collect or store your full payment card details. Payment information is transmitted directly to Stripe using secure encryption.
Stripe acts as an independent data controller for payment processing.
Please review Stripe's Privacy Policy for more information about how they process personal data.
International Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.
Data Retention
We retain personal information only for as long as necessary to:
-
Fulfil your booking
-
Meet legal and accounting obligations
-
Resolve disputes
-
Enforce agreements
When no longer required, personal data is securely deleted or anonymised.
Cookies
Our website uses cookies to:
-
Ensure website functionality
-
Remember your preferences
-
Improve website performance
-
Analyse website traffic
Where required by law, we will request your consent before placing non-essential cookies.
You can control cookies through your browser settings.
Your GDPR Rights
Under GDPR, you have the right to:
-
Access your personal data
-
Correct inaccurate information
-
Request deletion ("Right to be Forgotten")
-
Restrict processing
-
Object to processing
-
Data portability
-
Withdraw consent at any time (where processing is based on consent)
-
Lodge a complaint with your local Data Protection Authority
To exercise your rights, please contact us using the details provided above.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, or disclosure.
However, no method of internet transmission or electronic storage is completely secure.