Skip to main content

PASSENGER REGISTER — PRIVACY NOTICE

Marita ja Hannu Kuusiniemi Oy | Boutique Hotel and Restaurant Chalet Ruka Peak

Information notice under the EU General Data Protection Regulation concerning the processing
of passenger data in the passenger register of Marita ja Hannu Kuusiniemi Oy.

1. Data controller

Marita ja Hannu Kuusiniemi Oy, Business ID: 2363348-4
Juhannuskallionite 27 A, 93830 Rukatunturi, Finland
Telephone: +358 8 8684100
info@rukapeak.fi

2. Contact person for matters concerning the processing of passenger data

Sanna Kuusiniemi
Hotel Manager
+358 40 7750027
sanna@davas_tuki

3. Name of the register

Passenger Register

4. Legal basis for processing passenger data

The processing of passenger data is necessary for compliance with a legal obligation to which the controller is subject (Article 6(1)(c) of the General Data Protection Regulation). The processing of passenger data is governed by the Act on Accommodation and Catering Activities (308/2006). The processing of passenger data and the maintenance of the passenger register are based on the Act on Accommodation and Catering Activities.

5. Purposes of processing passenger data

Under the Act on Accommodation and Catering Activities, an accommodation provider may maintain, electronically or manually, a register of the passenger data specified in Section 6 below (the passenger register). Passenger data and the passenger register are used to maintain public order and safety, prevent and investigate offences, and compile statistics.

An accommodation provider may also use passenger data and the passenger register for customer service and direct marketing. Under Section 29 of the Personal Data Act, customers have the right to prohibit the use of their data for direct marketing or customer service.

6. Passenger data processed

The passenger register contains the passenger data specified by law:

  • The passenger’s name and Finnish personal identity code or, if unavailable, date of birth, and nationality.
  • The names and personal identity codes, or if unavailable dates of birth, of an accompanying spouse* and minor children.
  • The passenger’s address.
  • The date of arrival at the accommodation establishment and the date of departure (if known).
  • The country from which the passenger arrives in Finland (if the passenger does not reside in Finland).
  • The travel document number (not required from Nordic citizens or persons residing in Finland).
  • Optional information on whether the purpose of the stay is leisure, work, a meeting or another reason.

A single passenger registration form may be completed for passengers travelling as a group. * “Spouse” means a married spouse or a person living with the passenger in a marriage-like relationship or registered partnership.

7. Sources of passenger data

Passenger data is obtained from the passenger registration form completed and signed by the passenger or, in the case of a group trip, by the group leader.

8. Recipients or categories of recipients of passenger data

Passenger data is not disclosed to outside parties. Passenger data may be disclosed to public authorities as required by law.

Under the Act on Accommodation and Catering Activities, an accommodation provider must, notwithstanding confidentiality provisions, submit passenger data concerning foreign nationals without delay to the police department in whose jurisdiction the accommodation establishment is located.

The police also have the right to obtain passenger data concerning other passengers where necessary for the performance of police duties.

Under the Act on Accommodation and Catering Activities, passenger data must be provided upon request to the following authorities where needed for the statutory duties specified in the Act:

  • Finnish Border Guard
  • Finnish Customs
  • Rescue authorities
  • Health protection authorities
  • Finnish Defence Forces

9. Transfer of passenger data outside the EU
Passenger data is not transferred outside the European Union.

10. Retention period for passenger data

Passenger data held in the passenger register is retained for one year from the date of entry, after
which it is destroyed.

Under the Act on Accommodation and Catering Activities, the deletion of data used for customer
service and direct marketing is governed by Section 29 of the Personal Data Act. If the passenger
has not prohibited the use of passenger data for these purposes, the accommodation establishment
is entitled to transfer and process the data in its customer register or any direct marketing register
also after the one-year period.

11. Rights of the data subject concerning the processing of personal data
The processing of passenger data and maintenance of the passenger register are based on law. An
accommodation provider may also use passenger data for customer service and direct marketing
unless the passenger has exercised the right to object referred to in Section 30 of the Personal Data
Act.

As a data subject, the passenger has the following rights:

  • Right of access to their personal data.
  • Right to rectification of data.
  • Right to erasure of data.
  • Right to request restriction of processing.

The processing of passenger data is prescribed by law, which determines the purposes for which
the data is used and the authorities to which it is disclosed. Consequently, the right to request
restriction of processing cannot result in non-compliance with statutory provisions governing
passenger data processing.

12. Right to lodge a complaint with a supervisory authority
A data subject has the right to lodge a complaint with the competent supervisory authority if they
consider that the controller has failed to comply with applicable data protection legislation.