Privacy and cookies

Register and privacy statement

rivacy and Data Protection Statement under the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council.

Palas Resort

Register and privacy statement

1. Data controller

PRO PoweriaPäivään Oy
Business ID: 2954931-2

Porraskuja 8, 96900 Saarenkylä

2. Person responsible for register matters

Johanna Niemelä
+358 40 758 5456
johanna.niemela@poweriapaivaan.com

3. Name of the register

PRO PoweriaPäivään Oy Customer register

4. Contents and purpose of the register

Group: Customers
Content: Name, email address, phone number, company name, billing address, as well as contract and order information.
Purpose: Management of customer relationships (e.g., processing orders and invoicing), communication, and marketing of the company’s products and services to customers.

Group: Potential Customers and Website Users
Content: Name, email address, company name, and optionally other information such as phone number.
Purpose: Handling of contact requests and provision of services to potential customers.

5. Data retention period

Customer data is retained for the duration of the customer relationship and thereafter only as long as necessary to fulfill the legitimate obligations or interests of the data controller.

Data stored for marketing purposes is retained as long as consent is valid.

Messages sent via the website’s contact form are stored for a maximum of two years, unless a longer retention period is justified.

6. Regular sources of data

– Information provided through the website’s contact form
– Information given by the person via email or phone
– Social media (e.g., Facebook, Instagram, or LinkedIn) through which the person makes contact
– Public sources such as company websites and trade register data

By providing their information, the person gives consent to the storage and processing of data as described in this statement.

7. Regular disclosures of data

Data is disclosed to third parties only if it is necessary for the provision of services (e.g., payment services or website functionalities).

The processing of data complies with current data protection legislation and data processing agreements.

Data is not transferred outside the EU or EEA unless required for service provision. In such cases, it is ensured that the transfer meets legal requirements.

8. Principles of register protection

Data is stored in information systems accessible only to authorized personnel. The systems are secured in accordance with data protection legislation.

9. Right to access and correct data

The data subject has the right to access their data and request the correction of incorrect information. The request must be made in writing and signed, addressed to the person responsible for register matters as stated in section 2.

10. Right to erasure

The data subject has the right to request the deletion of their data. Deletion requests are processed on a case-by-case basis.

11. Other rights

The data subject has the right to prohibit the processing of their data for direct marketing purposes.

12. Cookies

Our website uses cookies to improve site functionality, analyze user traffic, and target marketing. Cookies are user-specific but do not enable personal identification.

Cookie settings can be managed via the website’s cookie service or by changing browser settings.

Register and privacy statement updated on August 2, 2025.