Privacy policy

1. Controller

Luonto- ja eräopaspalvelut Eränewa · Business ID 3652812-2
Lielahdentie 152, 21610 Parainen, Finland
info@eraneva.fi

2. Purposes and lawful bases

We process data to answer enquiries and prepare quotes; manage orders, courses, trips, payments and customer service; meet legal obligations; send Luontoposti with consent; and maintain website and service security.

Health, allergy and functional ability data is processed only where necessary for a safe trip and with explicit consent.

3. Data and sources

Data mainly comes from you or a child participant’s guardian: contact details, order, payment and customer information, course account and access, communications, Luontoposti consent, necessary technical logs and, after confirmation, safety-critical trip information. Eränewa does not process full payment card numbers.

4. Recipients and service providers

Only necessary personnel and contracted partners process data. Services include Campwire, Sender, Google Workspace, the payment service identified at checkout, and essential accounting, hosting and maintenance providers. Data is not sold.

Transfers outside the EEA rely on an adequacy decision, standard contractual clauses or another lawful safeguard.

5. Retention

Unsuccessful enquiries are kept up to 12 months; customer and service communications generally three years after the relationship; accounting records as required by law, usually at least six years; course data for the access and necessary support period; Luontoposti data until consent is withdrawn; technical logs generally up to 12 months; and trip safety data generally up to 30 days after the trip.

6. Security

Access is limited to those who need it. We use appropriate passwords, permissions and technical and organisational safeguards.

7. Your rights

Depending on the situation, you may have rights to information, access, correction, deletion, restriction, objection, data portability and withdrawal of consent. Send requests to info@eraneva.fi. You may also complain to the Office of the Data Protection Ombudsman.

Eränewa does not use automated decision-making or profiling with legal or similarly significant effects.

8. Cookies and external content

The site currently uses only technical solutions necessary for operation. Consent will be requested before non-essential analytics, advertising or embeds are introduced.

9. Children’s data

Purchases, contacts and consent for children’s courses are generally handled through a guardian. Only data necessary for service delivery and safety is requested.

10. Changes

This policy is updated when services or processing change. The current version is always available on this page.