{"id":1756,"date":"2026-01-11T22:55:14","date_gmt":"2026-01-11T20:55:14","guid":{"rendered":"https:\/\/www.oululines.fi\/?page_id=1756"},"modified":"2026-04-24T13:11:10","modified_gmt":"2026-04-24T10:11:10","slug":"tietosuojaseloste","status":"publish","type":"page","link":"https:\/\/www.oululines.fi\/en\/tietosuojaseloste\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"1756\" class=\"elementor elementor-1756\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5ea6fe00 e-flex e-con-boxed e-con e-parent\" data-id=\"5ea6fe00\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3e1f18f elementor-widget elementor-widget-heading\" data-id=\"3e1f18f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Register and Privacy Policy<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e105fe6 elementor-widget elementor-widget-text-editor\" data-id=\"e105fe6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><strong>1. DATA CONTROLLER<\/strong><\/p>\n<p>Oulu Lines Oy<\/p>\n<p><strong>2. NAME OF THE REGISTER<\/strong><\/p>\n<p>Customer and website user register of Oulu Lines Oy.<\/p>\n<p><strong>3. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA<\/strong><\/p>\n<p>Personal data is processed for the following purposes:<\/p>\n<p>\u2013 managing customer relationships, customer service and communications<br \/>\u2013 processing and fulfilling cruise bookings and reservations<br \/>\u2013 invoicing and payment management<br \/>\u2013 enabling and developing the use of online services<br \/>\u2013 fulfilling statutory obligations<\/p>\n<p>Legal basis for processing (GDPR Article 6):<br \/>Performance of contract: delivery of the ordered service to the customer<br \/>Legitimate interests of the controller: maintaining the customer relationship and developing the service<br \/>Legal obligation: accounting and other statutory requirements<br \/>Consent: electronic direct marketing (collected separately when required)<\/p>\n<p><strong>4. CONTENTS OF THE REGISTER<\/strong><\/p>\n<p><strong>4.1 Customer Data<\/strong><br \/>Name and contact details (address, email address, phone number)<br \/>Order and purchase history (booked cruises, reservations, dates)<br \/>Invoicing information<br \/>Customer service communications<\/p>\n<p><strong>4.2 Website user data (cookies and analytics)<\/strong><br \/>IP address (anonymized)<br \/>Browser and device information<br \/>Data on pages visited and user behaviour data<br \/>Session duration and page load data<br \/>Website analytics are implemented using Google Analytics. Google Analytics collects data via cookies. For more information on Google\u2019s privacy policy: <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy<\/a><\/p>\n<p><strong>5. REGULAR SOURCES OF INFORMATION<\/strong><\/p>\n<p>Personal data is collected primarily from the data subject themselves in the following contexts:<br \/>Placing an order or making a reservation through the website or by other means<br \/>Customer service enquiries (email, telephone)<br \/>Use of the website (cookies, analytics)<\/p>\n<p><strong>6. REGULAR DISCLOSURE OF DATA AND TRANSFER TO THIRD PARTIES<\/strong><\/p>\n<p>Oulu Lines Oy does not sell or disclose personal data to third parties for marketing purposes. Data may be disclosed in the following cases:<br \/>To payment service providers for processing orders and payments<br \/>To IT system administrators for providing technical services (data processing agreement in place)<br \/>To Google LLC (Google Analytics) \u2013 data may be transferred outside the EU\/EEA. Google has committed to complying with EU data protection requirements under the Standard Contractual Clauses. Data may also be disclosed to authorities where required by law.<\/p>\n<p><strong>7. TRANSFER OF DATA OUTSIDE THE EU AND EEA<\/strong><\/p>\n<p>In connection with the use of Google Analytics, data may be transferred to the United States. The transfer is based on Standard Contractual Clauses approved by the European Commission (SCC). The controller ensures that appropriate safeguards are in place for the transfer.<\/p>\n<p><strong>8. RETENTION PERIOD OF PERSONAL DATA<\/strong><\/p>\n<p>\u00a0<\/p>\n<p><strong>9. RIGHTS OF THE DATA SUBJECT<\/strong><\/p>\n<p>The data subject has the following GDPR rights:<\/p>\n<p><strong>9.1 Right of Access<\/strong><br \/>The data subject has the right to check what data concerning them has been stored in the register.<\/p>\n<p><strong>9.2 Right to Rectification of Data<\/strong><br \/>The data subject has the right to request the correction of inaccurate or incomplete data.<\/p>\n<p><strong>9.3 Right to Erasure of Data<\/strong><br \/>The data subject has the right to request the deletion of their data when there is no longer a basis for processing.<\/p>\n<p><strong>9.4 Right to restriction of processing<\/strong><br \/>The data subject has the right to request the restriction of processing of their personal data in certain situations.<\/p>\n<p><strong>9.5 Right to data portability<\/strong><br \/>The data subject has the right to receive the data they have provided in a machine-readable format.<\/p>\n<p><strong>9.6 Right to Object<\/strong><br \/>The data subject has the right to object to the processing of their data on the basis of legitimate interests.<\/p>\n<p><strong>9.7 Withdrawal of Consent<\/strong><br \/>Where processing is based on consent, the data subject has the right to withdraw their consent at any time.<br \/>To exercise your rights, please contact: <a href=\"mailto:toimisto@oululines.fi\">toimisto@oululines.fi<\/a><br \/><br \/><\/p>\n<p><strong>10. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY<\/strong><\/p>\n<p>The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they consider that their personal data has been processed in violation of data protection legislation.<br \/>Tietosuojavaltuutetun toimisto<br \/>PL 800, 00531 Helsinki<br \/><a href=\"mailto:tietosuoja@om.fi\">tietosuoja@om.fi<\/a> | <a href=\"https:\/\/www.tietosuoja.fi\" target=\"_blank\" rel=\"noopener\">www.tietosuoja.fi<\/a><br \/><br \/><\/p>\n<p><strong>11. COOKIES<\/strong><\/p>\n<p>Our website uses cookies to enable the operation, usability and analytics of the service. On your first visit to the site, you will be asked for consent to the use of cookies.<br \/>Necessary cookies<br \/>Cookies that are necessary for the technical operation of the website. Does not require consent.<br \/>Analytics cookies (Google Analytics)<br \/>We use Google Analytics to analyse website traffic. The use of analytics cookies requires your consent. You can refuse analytics cookies in the cookie settings.<br \/>You can manage your cookie preferences in your browser settings or in our website's cookie management.<br \/><br \/><\/p>\n<p><strong>12. PRINCIPLES OF REGISTER PROTECTION<\/strong><\/p>\n<p>Personal data is processed confidentially. The following principles are observed in protecting the register:<br \/>Access to data is restricted to those persons whose duties require it<br \/>Information systems are protected with usernames and passwords<br \/>Tietoliikenne suojataan SSL\/TLS-salauksella<br \/>Appropriate agreements have been drawn up with personal data processors<br \/>Data is not retained for longer than necessary<br \/><br \/><\/p>\n<p><strong>13. CHANGES TO THE PRIVACY POLICY<\/strong><\/p>\n<p>Oulu Lines Oy reserves the right to amend this privacy policy as necessary. Changes will be published on our website. We recommend reviewing this policy regularly.<\/p>\n<p>The policy has been created on 13th of April, 2026.<\/p>\n<p>Data controller: Oulu Lines Oy, Business ID 1077549-1.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Rekisteri- ja tietosuojaseloste 1. REKISTERINPIT\u00c4J\u00c4 Oulu Lines Oy 2. REKISTERIN NIMI Oulu Lines Oy:n asiakasrekisteri ja verkkopalveluiden k\u00e4ytt\u00e4j\u00e4rekisteri. 3. HENKIL\u00d6TIETOJEN K\u00c4SITTELYN TARKOITUS JA OIKEUSPERUSTE Henkil\u00f6tietoja k\u00e4sitell\u00e4\u00e4n seuraaviin tarkoituksiin: \u2013 asiakassuhteiden hoitaminen, asiakaspalvelu ja viestint\u00e4\u2013 risteilytilausten ja varausten k\u00e4sittely ja toimittaminen\u2013 laskutus ja maksujen hallinta\u2013 verkkopalveluiden k\u00e4ytt\u00e4misen mahdollistaminen ja kehitt\u00e4minen\u2013 lakis\u00e4\u00e4teisten velvoitteiden t\u00e4ytt\u00e4minen K\u00e4sittelyn oikeusperuste (GDPR [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-1756","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.oululines.fi\/en\/wp-json\/wp\/v2\/pages\/1756","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.oululines.fi\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.oululines.fi\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.oululines.fi\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.oululines.fi\/en\/wp-json\/wp\/v2\/comments?post=1756"}],"version-history":[{"count":0,"href":"https:\/\/www.oululines.fi\/en\/wp-json\/wp\/v2\/pages\/1756\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.oululines.fi\/en\/wp-json\/wp\/v2\/media?parent=1756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}