Updated 13 October 2026
Data controller
FireFoxPolarBear / Napakettu Holiday Village (Business ID 3564685-6) Ylätenontie 233, 99950 Karigasniemi, Finland info@napakettu.com · +358 400 989 337
Contact for data protection matters: Asle Eskola, info@napakettu.com.
What we collect
We only process the information we need to arrange your stay and our services:
- Bookings: name, email address, phone number, dates of stay, number of guests and payment details.
- Enquiries by email or phone: your contact details and what you write to us.
- Activity and airport transfer bookings: contact details, number of people and, for transfers, your flight details.
- Special diets for the breakfast basket, if you tell us about them.
The website itself has no forms. Using it also creates technical log data (IP address, browser type, time of visit) as part of the server’s normal operation, and anonymous visitor statistics (see Cookies and visitor statistics).
Why we use it and on what basis
- Providing your booking and our services — contract (GDPR Article 6(1)(b)).
- Answering your enquiries — steps before a contract and our legitimate interest in replying to messages (Article 6(1)(b) and (f)).
- Accounting and other legal obligations — legal obligation (Article 6(1)(c)).
- Server log data — our legitimate interest in keeping the website running and secure (Article 6(1)(f)).
- Visitor statistics — our legitimate interest in seeing how the website is used and improving it (Article 6(1)(f)).
- Special diets — your explicit consent (Article 9(2)(a)).
Dietary needs can reveal information about health or beliefs, so we use them only to prepare your breakfast. You can withdraw your consent at any time by letting us know.
We do not use your information for marketing without your separate consent.
Who receives it
We do not sell your information or pass it on except as described here. These service providers process it on our behalf:
- Moder Oy (Finland) — booking system.
- Microsoft (Microsoft 365) — email.
- Vercel Inc. (United States) — website hosting and visitor statistics.
In addition:
- Activity providers, such as local wilderness guides and GoSápmi, receive what they need to run a trip: your name, phone number and the number of people.
- If you book through Booking.com, Booking.com processes your booking as an independent controller under its own privacy policy.
- We disclose information to authorities only where the law requires it.
Vercel Inc. is based in the United States. Transfers there rely on the Standard Contractual Clauses approved by the European Commission. For Microsoft 365, any transfers outside the EU and EEA are covered by Microsoft’s data processing terms.
How long we keep it
- Booking and invoicing records are kept for as long as Finnish accounting law requires, normally six years.
- Enquiries that do not lead to a booking are deleted 12 months after our last contact.
- Dietary information is deleted once your stay has ended.
- Server log data is kept for a short time to keep the website running and secure.
- Visitor statistics are aggregated figures. The identifier that counts one day’s visits as one visitor is discarded within 24 hours.
Cookies and visitor statistics
This website uses no cookies, and nothing is stored on your device.
To count visits we use Vercel Web Analytics, which sets no cookies and collects nothing that could identify an individual visitor. A visit records the page address, the page you came from, the time, an approximate location (country, region and town) and the type of device, operating system and browser. Visitors are not followed from one website to another, and the data is not used for advertising.
Your rights
You have the right to access the information we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to have it transferred to another service. Send your request to info@napakettu.com. We reply within one month.
If you believe we process your information unlawfully, you can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).
Security
Your information is protected by appropriate technical and organisational measures. The connection to this website is encrypted, and only the people who need the information for their work can access it.