Tietosuojakäyntännöt

Tahko Mountain
Osoite: Tahkolaaksontie 1, 73310 Tahkovuori, Suomi
y-tunnus: 0629797-6
Sähköposti: lipunmyynti@tahkomountain.fi
Puhelin: +358 29 170 7030

Huippupaikat Oy – asiakas- ja markkinointirekisterit
EU:n yleisen tietosuoja-asetuksen (GDPR) mukainen informointiasiakirja Huippupaikat Oy:n henkilötietojen käsittelystä.

1. Rekisterinpitäjä

Huippupaikat Oy
Ilkantie 8, 88610 Vuokatti
y-tunnus: 0629797-6

2. Yhteyshenkilö rekisteriä koskevissa asioissa
Lauri Suutarinen
Puhelin: 050 597 5397
Sähköposti: lauri@skione.fi

3. Rekisterien nimet
Huippupaikat Oy:n asiakasrekisteri
Huippupaikat Oy:n markkinointirekisteri

4.Henkilötietojen käsittelyn oikeusperuste

Asiakasrekisterissä olevien henkilötietojen käsittely perustuu kuluttaja- ja yritysasiakkaiden asiakassuhteeseen Huippupaikat Oy:n kanssa. Tietoja käsitellään myös rekisterinpitäjän ja rekisteröidyn välisen sopimuksen perusteella, erityisesti välinevuokraukseen, hiihtokoulun varauksiin, caravanalueen majoitukseen ja avainpalveluun liittyen. Markkinointirekisterin henkilötietoja käsitellään rekisteröidyn antaman suostumuksen perusteella. Asiakkaan ei ole pakko antaa yritykselle henkilötietoja, mutta tämä voi mahdollisesti vaikuttaa tiettyjen palvelujen saatavuuteen.

5. Henkilötietojen käsittelyn tarkoitus

Asiakasrekisteriin kerättyjä tietoja käytetään seuraaviin tarkoituksiin:

Rinnelippujen käytön valvonta

Välinevuokraukseen ja välineiden säätöön liittyvä sopimushallinta

Hiihtokoulutuntien ja -kurssien varaukset

Caravanaluuen majoitusvaraukset ja avainpalvelun hallinta (matkustajailmoitukset)

Asiakasviestintä

Markkinointirekisterin tietoja käytetään Huippupaikat Oy:n palveluiden ja tuotteiden

markkinointiin, analysointiin ja kehittämiseen.

6. Käsiteltävät henkilötiedot

Asiakasrekisterissä käsitellään muun muassa seuraavia tietoja:

Etu- ja sukunimi

Osoite ja puhelinnumero

sähköpostiosoite

Henkilötunnus

Ikä tai ikäryhmä

Valokuva

Välinevuokraukseen liittyvät tiedot (paino, taitotaso)

Kansalaisuus

Asiakaspalaute- ja reklamointitiedot

7. Henkilötietojen lähteet

Henkilötiedot saadaan rekisteröidyltä itseltään asioinnin yhteydessä.

8. Tietojen vastaanottajat

Huippupaikat Oy käyttää palveluntarjoajia, jotka käsittelevät henkilötietoja yrityksen puolesta. Näiden toimijoiden kanssa on tehty tietosuoja-asetuksen mukaiset henkilötietojen käsittelysopimukset. Käsittelijät eivät saa käyttää tietoja omiin tarkoituksiinsa. Tietoja voidaan luovuttaa viranomaisille lain sallimissa rajoissa.

9. Tietojen siirto EU/ETA-alueen ulkopuolelle

Tietoja voidaan siirtää EU/ETA-alueen ulkopuolelle Privacy Shield -järjestelyjen tai muiden lainmukaisten suojatoimien mukaisesti.

10. Tietojen säilytysaika

Asiakastietoja säilytetään asiakassuhteen ajan ja poistetaan pääsääntöisesti kuuden (6) kuukauden kuluessa asiakkuuden päättymisestä, ellei lainsäädäntö edellytä pidempää

säilytystä.

11. Rekisterin suojaus

Sähköiset tiedot on suojattu joko vahvalla sähköisellä tunnistautumisella tai käyttäjätunnuksin ja salasanoin. Manuaalinen aineisto säilytetään lukitussa tilassa.

12. Automaattinen päätöksenteko

Tietoja ei käytetä automaattiseen päätöksentekoon.

13. Rekisteröidyn oikeudet

Rekisteröidyllä on oikeus tarkastaa, oikaista, poistaa ja rajoittaa tietojensa käsittelyä sekä vastustaa suoramarkkinointia GDPR:n mukaisesti.

14. Valitusoikeus

Rekisteröidyllä on oikeus tehdä valitus tietosuojavaltuutetulle.

15. Oikeuksien käyttämiseen liittyvät pyynnöt

Pyynnöt tulee osoittaa Huippupaikat Oy:lle osoitteeseen Ilkantie 8, 88610 Vuokatti.

Päivitetty viimeksi: 25.5.2026

Saatamme myös käyttää tietojasi lähettääksemme sinulle hyödyllistä sähköpostia liittyen hissilippujen tai kausikorttien uusimiseen. Halutessasi voit kieltäytyä viesteistä muuttamalla asetuksia omilla SIVUILLESI.

Maksutietoja käsitellään tarkoituksiin direktiivin 2015/2366 (EU) ja maksupalvelujen myöhemmien muutosten vuoksi Euroopan sisämarkkinoilla (ns. PSD2).

Tahko Mountain
Osoite: Tahkolaaksontie 1, 73310 Tahkovuori, Suomi
y-tunnus: 0629797-6
Sähköposti: lipunmyynti@tahkomountain.fi
Puhelin: +358 29 170 7030

PRIVACY POLICY-Extended version

Updated and Effective as of June 2018

We have prepared this privacy policy ("Privacy Policy" or "Policy") to explain to you how we collect, use, and share information and Personal Data (as defined under EU`s privacy regulations, the General Data Protection Regulation GDPR) we obtain through your use of the e-commerce platform (Services), that are provided by us. By using the Services, you consent to such collection, use and sharing of your information and Personal Data and agree to the terms of this Privacy Policy in the name of the data controller and its subsidiaries.

Information You Choose To Submit-To be able to do an online purchase

We collect your personal data because of the following reasons:
The ski pass or a ticket is mostly personal and we have to be able to check if it is the correct person using the ski pass or ticket. Seasonal ski passes and daily passes is different for different age groups. And In case of refunds or issue of new RFID cards, we will have to be able to identify the correct ski pass holder.

To be able todo a purchase You are required to provide certain Personal Data (for example, your name and e-mail address,), and you must also provide a user name and password.

Examples of personal data we collect:

• Name, email adress, address, zip, country, gender, birthdate, cell phone and picture ( this is product depended), ID number where this could be product mandatory. This information is often mandatory upon control of your personal skipass/ticket purchase.
  
• Your purchase information, what products you ordered. The validity period of the product
  
• Your team and their personal data, a set of information is collected from your team if you choose to e.g buy a product to friends or family. You confirm that you have made that person aware of how we collect, use and share their Personal data.
  
  

We use your Personal Data to fulfil your requests for products and services, to improve our Services, to contact you from time to time, with your consent, about us and our products and services, and as otherwise described in this Privacy Policy.

This information can be later managed by you under MY ACCOUNT

Information We Automatically Collect

We and our third-party service providers automatically collect certain information from your device or web browser when you interact with the Services to help us understand how our users use the Services . For example, each time you visit the Services we and our third-party service providers automatically collect your IP address, mobile device identifier, browser and computer type, access time, the Web page you came from, the URL you go to next, the Web page(s) that you access during your visit and your interaction with our Services.

We and our third-party service providers use such Usage Data for a variety of purposes including to diagnose problems with our servers and software, to administer the Services, to gather demographic information. The Usage Data we collect is generally non-identifying. We mainly use Google analytics to obtain this information.

Information Use

We use the information we collect, including Personal Data and Usage Data:

• to enable you to use our Services, to create an account or profile, to process information you provide via our Services (including verifying that your email address is active and valid) and to process your transactions;
• to provide related customer service and care, including responding to your questions, complaints, or comments and sending surveys (with your consent) and processing survey responses;
• to provide you with information, products, or services that you have purchased;
• with your consent, to provide you with information, products, or services that we otherwise believe will interest you, including special opportunities from us and our third-party partners;
• for internal business purposes, such as to improve our Services
• to administer offers;
• to contact you with administrative communications and, in our discretion, changes to our Privacy Policy, Terms of Use, or any of our other policies;
• to comply with regulatory and legal obligations

Social Network and Platform Integration

The Services contain integration with social networks and other platforms in which information is shared between us and such platforms. For example, if you create or log into your account through a third-party social media site, we will have access to certain information from that site, such as your name, email address, age, photo. If you don't want a social network to collect the information about you as described above, or you don't want a social network to share it with us, please review the privacy policy, privacy settings and instructions of the social network before you log into our e-commerce platform.

Our Information Sharing Practice

• Generally. We share Non-Personal Data, including Usage Data, de-identified Personal Data and aggregated user statistics, with third parties controlled by us. We share User Information, including Personal Data, as otherwise described in this Policy, and under the following circumstances:
• Service Providers. We use third parties who provide services to us (for example, analytics companies, data management and storage, payment partners In those circumstances, we disclose User Information so that such service providers can perform those services.They are also required to follow and to comply with appropriate security measures to protect your Personal Data.
• Third-Party. We will not sell or transfer any information to a Third-party without your consent.
• You will have a choice (opt-in or opt-out) before we share your information with third parties controlled by the Data controller (E.g ski schools and ski rentals) for marketing purposes. Provided that you have chosen to receive marketing messages, we share your information (including Personal Data) with these third parties. We also match your email address with these third parties with whom you have also consented to share your email address and use such match to deliver custom offers or emails to you.
• We reserve the right to share User Information: in response to court orders, or legal processes.

Anonymous Data

When we use the term "anonymous data," we are referring to data and information that does not permit you to be identified or identifiable, either alone or when combined with any other information available to a third-party. We may create anonymous data from the Personal Data we receive about you and other individuals whose Personal Data we collect. Anonymous data will include analytics information and information collected by us using cookies. We make Personal Data into anonymous data by excluding information (such as your name, photo and birthdate). Anonymous data are used to analyze usage and make improvements to our e-commerce platform

Your rights
we want you as a customer to have full control with your personal data.
As an online customer you may go to MY ACCOUNT and manage your personal data:

• You may update your personal information, both your customer account and members of your team.
• You may download a copy of your information
• You may delete your customer profile and members of your team.
• You may change your opinion about getting offers.

Choice of /Opt-IN/Opt OUT for further Communication

We offer you the opportunity to manage your communications from us. Even after subscribing to one or more newsletters and/or opting in to one or more offers to receive marketing and/or promotional communications from us or our third-party partners, users may elect to modify their preferences by going to the MY ACCOUNT anytime or by following the "Communications settings " and/or "Unsubscribe" link provided in any email received. You may also be able to change your preferences by updating your profile or account, depending on which of our Services you are using. Even if you do opt-out of marketing emails, we reserve the right to send you transactional and administrative emails including those related to the Services, service announcements, and to contact you regarding any goods or services you have ordered.

Choice of Updating, downloading and Deleting Your Personal Data

You may access the information we hold about you any time through MY ACCOUNT . Here you would may update, correct, modify or delete from our database any Personal Data. If you delete certain information you may not be able to order services in the future without re-submitting such information. Please note that we will maintain Personal Data in our database whenever we are required to do so by law.
Please note that we need to retain certain information and/or to complete any transactions that you began prior to requesting such change or deletion (for example, when you did a purchase of a lift ticket, you may not be able to change or delete the Personal Data provided until after the completion of such a purchase, e.g a yearly subscription ticket could have a validity of up to one year).
We will retain your Personal Data for the period necessary to fulfil the purposes outlined in this Policy unless a longer retention period is required or permitted by law.

Payment Details

Payment data will be processed for purposes pursuant to directive 2015/2366 (EU) and subsequent changes to payment services in the European internal market (so-called PSD2).


Contact us:
We are happy to answer any questions, you will find our contact details on top of the document If you are not satisfied on how we treat your personal data according to this privacy policy you have the right to contact the destinations local country data protection agency.