Privacy notice
Draft — business details and operating policies marked below must be completed before publication.
About this notice
This notice covers enquiries and transport bookings made through mikanorvapalo.fi, by email or by phone. Last updated: 12 October 2026.
1. Who is responsible for your data?
Service brand: Mika Norvapalo.
Legal business name: [TO BE COMPLETED]
Finnish Business ID: [TO BE COMPLETED]
Business address: [TO BE COMPLETED]
For privacy requests, contact info@mikanorvapalo.fi or call +358 50 3503456.
2. Information we use
We use the details you provide: your name, email address, phone number, travel date, pickup time and location, destination, passenger count and, if supplied, flight number, luggage details, stops and other practical requests. Booking correspondence and payment or invoice records may also be needed to provide the service.
Please provide only information needed for your journey. Do not include payment card details, identity documents, medical diagnoses or other sensitive information in the enquiry form. For assistance, describe the practical arrangements you need without medical details.
The hosting service may record technical information such as IP address, request time, requested page, browser information and errors in server and security logs.
3. Why we use information
Enquiries and bookings: we use your contact and journey details to respond, provide a quote, agree arrangements and perform the transport contract. The legal basis is taking steps at your request before a contract and performing a contract (GDPR Article 6(1)(b)). Required form fields help us assess and respond to your enquiry; without the necessary journey and contact details we may be unable to arrange a transfer. You can also contact us by phone or email.
Records required by accounting or other applicable law are processed to meet legal obligations (Article 6(1)(c)). Necessary technical logs and correspondence related to disputes are processed for our legitimate interests in keeping the service secure and establishing, exercising or defending legal claims (Article 6(1)(f)).
The enquiry form does not sign you up to marketing. We do not use automated decision-making or profiling to decide whether to accept a booking.
4. Who receives information?
Enquiries are delivered to info@mikanorvapalo.fi. They are handled by the people responsible for responding to enquiries and arranging your transport. The website uses Contact Form 7 to send the enquiry by email; this site has no separate plugin for storing form submissions in the WordPress database.
Domainhotelli (Planeetta Internet Oy) provides website hosting and email services. These services process information needed to operate the website and deliver and store email. Necessary information may also be disclosed to authorities where required by law.
Additional booking, accounting or transport service providers, if used: [TO BE COMPLETED].
5. Where is information processed?
Domainhotelli states that its hosting servers are in Helsinki, Finland. Email delivery can also involve the email provider used by the person contacting us.
Details of any processing or access outside the EU/EEA, including provider subprocessors and applicable transfer safeguards: [TO BE CONFIRMED WITH THE SERVICE PROVIDERS].
6. How long is information kept?
Enquiry information is kept for the time needed to answer the enquiry and handle any resulting booking and related follow-up. Booking and payment records are kept for applicable statutory record-keeping periods. Information needed for a specific dispute or legal claim is retained for as long as that matter and relevant legal deadlines require.
Operational deletion periods for enquiry emails, technical logs and backups: [TO BE COMPLETED]. Backup retention and deletion must also be checked with the hosting and email provider.
7. Cookies and external services
This website has no configured advertising trackers, visitor analytics, embedded maps, external fonts or third-party CAPTCHA service. The contact form does not require marketing consent. WordPress uses necessary login cookies when authorised administrators sign in.
Any additional cookies or security services used by the production hosting environment: [TO BE CHECKED BEFORE PUBLICATION]. This notice must be updated if analytics, embeds or other services are added.
8. Your rights
Depending on the legal basis and circumstances, you may request access to your personal data, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests. These rights are subject to the conditions in the GDPR; for example, some records must be retained to meet legal obligations.
Send requests to info@mikanorvapalo.fi. We may need information to verify your identity. We normally respond within one month; if a lawful extension is needed, we will explain it within that period.
You may lodge a complaint with the Finnish Office of the Data Protection Ombudsman, or with the supervisory authority in the EU country where you normally live or work or where the alleged infringement occurred.
9. Updates
The date above identifies the latest version. We update this notice when the way we handle personal data changes.