Register and Privacy Policy
1. DATA CONTROLLER
Oulu Lines Oy
2. NAME OF THE REGISTER
Customer and website user register of Oulu Lines Oy.
3. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Personal data is processed for the following purposes:
– managing customer relationships, customer service and communications
– processing and fulfilling cruise bookings and reservations
– invoicing and payment management
– enabling and developing the use of online services
– fulfilling statutory obligations
Legal basis for processing (GDPR Article 6):
Performance of contract: delivery of the ordered service to the customer
Legitimate interests of the controller: maintaining the customer relationship and developing the service
Legal obligation: accounting and other statutory requirements
Consent: electronic direct marketing (collected separately when required)
4. CONTENTS OF THE REGISTER
4.1 Customer Data
Name and contact details (address, email address, phone number)
Order and purchase history (booked cruises, reservations, dates)
Invoicing information
Customer service communications
4.2 Website user data (cookies and analytics)
IP address (anonymized)
Browser and device information
Data on pages visited and user behaviour data
Session duration and page load data
Website analytics are implemented using Google Analytics. Google Analytics collects data via cookies. For more information on Google’s privacy policy: https://policies.google.com/privacy
5. REGULAR SOURCES OF INFORMATION
Personal data is collected primarily from the data subject themselves in the following contexts:
Placing an order or making a reservation through the website or by other means
Customer service enquiries (email, telephone)
Use of the website (cookies, analytics)
6. REGULAR DISCLOSURE OF DATA AND TRANSFER TO THIRD PARTIES
Oulu Lines Oy does not sell or disclose personal data to third parties for marketing purposes. Data may be disclosed in the following cases:
To payment service providers for processing orders and payments
To IT system administrators for providing technical services (data processing agreement in place)
To Google LLC (Google Analytics) – data may be transferred outside the EU/EEA. Google has committed to complying with EU data protection requirements under the Standard Contractual Clauses. Data may also be disclosed to authorities where required by law.
7. TRANSFER OF DATA OUTSIDE THE EU AND EEA
In connection with the use of Google Analytics, data may be transferred to the United States. The transfer is based on Standard Contractual Clauses approved by the European Commission (SCC). The controller ensures that appropriate safeguards are in place for the transfer.
8. RETENTION PERIOD OF PERSONAL DATA
9. RIGHTS OF THE DATA SUBJECT
The data subject has the following GDPR rights:
9.1 Right of Access
The data subject has the right to check what data concerning them has been stored in the register.
9.2 Right to Rectification of Data
The data subject has the right to request the correction of inaccurate or incomplete data.
9.3 Right to Erasure of Data
The data subject has the right to request the deletion of their data when there is no longer a basis for processing.
9.4 Right to restriction of processing
The data subject has the right to request the restriction of processing of their personal data in certain situations.
9.5 Right to data portability
The data subject has the right to receive the data they have provided in a machine-readable format.
9.6 Right to Object
The data subject has the right to object to the processing of their data on the basis of legitimate interests.
9.7 Withdrawal of Consent
Where processing is based on consent, the data subject has the right to withdraw their consent at any time.
To exercise your rights, please contact: toimisto@oululines.fi
10. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they consider that their personal data has been processed in violation of data protection legislation.
Tietosuojavaltuutetun toimisto
PL 800, 00531 Helsinki
tietosuoja@om.fi | www.tietosuoja.fi
11. COOKIES
Our website uses cookies to enable the operation, usability and analytics of the service. On your first visit to the site, you will be asked for consent to the use of cookies.
Necessary cookies
Cookies that are necessary for the technical operation of the website. Does not require consent.
Analytics cookies (Google Analytics)
We use Google Analytics to analyse website traffic. The use of analytics cookies requires your consent. You can refuse analytics cookies in the cookie settings.
You can manage your cookie preferences in your browser settings or in our website's cookie management.
12. PRINCIPLES OF REGISTER PROTECTION
Personal data is processed confidentially. The following principles are observed in protecting the register:
Access to data is restricted to those persons whose duties require it
Information systems are protected with usernames and passwords
Tietoliikenne suojataan SSL/TLS-salauksella
Appropriate agreements have been drawn up with personal data processors
Data is not retained for longer than necessary
13. CHANGES TO THE PRIVACY POLICY
Oulu Lines Oy reserves the right to amend this privacy policy as necessary. Changes will be published on our website. We recommend reviewing this policy regularly.
The policy has been created on 13th of April, 2026.
Data controller: Oulu Lines Oy, Business ID 1077549-1.