Privacy notice and cookie policy

This is the Privacy notice and Cookie policy of Aurora Incoming Levi’s Personal Data Act (sections 10 and 24) and the EU’s General Data Protection Regulation (GDPR). Created on 17th December 2019.

1. Registrar
Aurora Incoming Levi Ltd., Torikuja 10 A, 99130 Sirkka, Finland

2. The contact person responsible for the register
Heidi Jokela. heidi.jokela@polarstartravel.fi, +358 10 325 40 44

3. The name of the registry
Customer Register

4. Legal basis and the purpose of processing personal data

A legal basis for the processing of personal data in accordance with the EU’s general data protection regulation. Personal information is processed for the provision of Aurora Incoming Levi services by the customer and implemented for the implementation of these services The Privacy Policy applies to the processing of personal data of natural persons, purchases services from a registrar, or belongs to a registrar’s stakeholder group.

The controller processes personal information for the following purposes:

managing and developing customer relationships, communicating with the company providing information to the registrar
contacting the data subject’s stakeholders
managing invoicing tasks

The processing of personal data is based on section 8, subsection 1. 1, 2, 5, 6 and 8 of the Personal Data Act.

An up-to-date list of all services offered by Aurora Incoming Levi is always available at www.polarstartravel.fi. The purpose of the register is to maintain Aurora Incoming Levi Oy’s customer register and archive and process customer orders as well as customer relationship management. This information can be used for business development, statistical purposes, and more personalized targeted content on our online services. Personal data will be processed within the limits permitted and required by the Personal Data Act. The information in the register can be used in Aurora Incoming Levi’s own registers to target advertising without giving personal information to third parties. Aurora Incoming Levi Oy may use partners to maintain customer and service relations. Part of the registration information may be transferred to partner servers for technical reasons. The information is only processed to maintain Aurora Incoming Levi’s customer relationship through technical interfaces.

Aurora Incoming Levi Oy has the right to publish the information contained in the customer register as an electronic or written list, unless specifically denied by the customer. The customer has the right to deny the publication of the information by notifying it to Aurora Incoming Levi Oy’s customer service, email to sales@polarstartravel.com or to the Registry Officer. Information is not used for automated decision making or profiling.

5. Information content of the register

The person register may contain the following information:

First and last name of the person
Email address
Postal address
Phone number
Details of orders processed

Information about customer relationship and other relevant contexts, such as:

customer number
the information required at any time in the cooperation agreements between the controller and other undertakings
transaction and usage information, for example information on transactions within customer relationship and service usage order information, such as subscriber and recipient information, product information, bidding information, price information, billing information, delivery information, payment information, cancellation information, refund information, supply bans and complaint data
consent for direct mail marketing via email, text messaging and other automated systems, direct marketing prohibitions and information on the address

Details of the details specified above. The information is stored as long as the work or customer relationship lasts.

6. Regular sources of information
Personal data is added to the register by users themselves, for example, when starting Aurora Incoming Levi Services. The information stored in the register is obtained from the customer, among others. via email, phone, social media, contracts, customer meetings and other situations where the customer delivers their information. In addition, they can be collected from Aurora Incoming Levi Oy companion information systems when a registered person registers for services or uses services, as well as social media related to the registrar’s activities.

7. Cookies
Our website www.polastartravel.fi uses cookies. The site sends a cookie to the browser – a small text file which will be stored in the hard drive of the computer. There are both temporary session identifier-cookies which will be closed when you close the Internet-browser and permanent cookies that are stored in the hard drive of the computer.

You can disable cookies in your browser. Please note, that if you disable cookies, some of the features of our site can’t work properly.

Aurora Incoming Levi uses a third-party analytics service on our website (Google Analytics). We gather information on the visitors in the following areas:

the date and time of access to this website
the referring Internet address
your browser
what pages you access

With cookies we can recognize and use the information that we acquire for example to count the browsers that visit on our website and analyze the usage of our website, such as statistical tracking.

Aurora Incoming Levi uses the information for internal purposes, such as measuring various statistics in order to improve its quality and make it more useful to visitors. All information acquired is anonymous and actions performed on the Internet can’t be connected to a certain person based on that information.

8. Ordinary transfers of data and transfer of data outside the EU or EEA
The information contained in the Customer Register is only available to Aurora Incoming Levi, except when Aurora Incoming Levi uses an external service provider who needs specific information about the service. However, the information is not ordinarily disclosed to Aurora Incoming Levi Ltd or to its own use by its partners, except in the case of the obligation to do so or when required by law. The information may also be published in so far as this has been agreed with the customer.

Personal data will not be transferred outside the European Union unless it is necessary to ensure the technical implementation of Aurora Incoming Levi Oy or its partner.

Data may be transferred outside the EU or the European Economic Area, as permitted by the Personal Data Act.

Registered personal data will be disposed of at the request of the user unless legislation, open invoices or recovery operations prevent the deletion of data.

Personal information will be disclosed only to companies that have cooperated with Aurora Incoming Levi Oy. The information is provided through technical use, as a technical record or as a paper printout.

The controller may disclose information, within the limits permitted and mandated by the applicable legislation, to, amongst other things, the registrar’s selections to partners for marketing purposes unless the data subject has denied such disclosure.

9. Principles of registry protection
The data controller and files of the controller are protected by the technical protection methods normally used in the business. The register will not be handed over to third parties. Access to the register requires a personal username and password that are only granted to a registrar’s staff whose status and duties are associated with the access.

A. Manual material
The information is stored in the registrar’s premises that are locked.

B. Information deposited with ICT

The electronic register is located on user-protected secure servers. The registry only has access to those who are in the service of the registrar and other people who are in need of information in their duties. They have usernames and passwords. The information is technically protected by a firewall. Recordings will be kept for the duration of the personal use.

10. The right of inspection and the right to demand correction
A person entered in the register can check what information has been entered in the register or that the register does not have information about him. The request for verification of the information must be submitted in writing to Aurora Incoming Levi Oy. The controller may, if necessary, request the applicant to prove his identity. The controller is responsible for the customer within the time limit set in the EU Data Protection Regulation (usually within one month).

If there is an error in the registered data, the registrar may submit Aurora Incoming Levi Oy a request for correction of the error.

11. Right of Refusal
The advertiser has the right to deny access to his / her data for direct mail, distance selling or other direct marketing, opinion and market research and the right to claim for correction of incorrect information by contacting the person responsible for the register or by informing the registrar’s customer service.

12. Other rights related to the processing of personal data
A person in the register has the right to request the deletion of his / her personal data from the register (“the right to be forgotten”). Also, those who are registered have other rights under the EU’s general data protection regulation such as restricting the processing of personal data in certain situations. Requests should be sent in writing to the registrar. The controller may, if necessary, request the applicant to prove his identity. The controller is responsible for the customer within the time limit set in the EU Data Protection Regulation (usually within one month).

If a registrar wants more information on his / her personal data processing at Aurora Incoming Levi Oy, he may send a letter to the above address or call 010 325 40 40.