Data Controller
Chalet Dreams Oy (3529553-1)
Referred to in this notice as the Company.
Data Protection Contact Person
Tuomas Kankaala
050 3363880
[email protected]
Name of the Personal Data Register
Chalet Dreams Oy customer and marketing register.
This Privacy Notice applies to our website, marketing activities, customer relationship management, and the processing of personal data related to the products and services we provide.
Collected Personal Data and Sources of Data
| Data Category | Examples of Data Content |
| Identification and Contact Details | Customer’s and/or representative’s name and contact details. |
| Information relating to products and services, orders and customer communication | Order information, delivery times, agreements, invoicing, customer communication and complaints. |
| Marketing (including direct marketing), events, and consents | Contact details for marketing purposes, event-related data, consents and prohibitions for direct marketing. |
| Use of website and electronic services | IP address, electronic communication identifiers, search and browsing data, browser and operating system data, and registration details. |
Personal data is collected from the data subject and from publicly available official registers and other external sources such as the Trade Register. We also collect information submitted via contact forms, which is used for the purposes described above.
Purpose and Legal Basis for Processing Personal Data
Personal data is processed within the limits permitted by law for the following purposes:
– Provision of products and services and the conclusion of customer agreements (contract or preparation thereof)
– Customer relationship management (legitimate interest)
– Providing information and guidance about services (legitimate interest)
– Testing of online services (legitimate interest)
– Development of products and services (legitimate interest)
– Collection and analysis of user statistics (consent, legitimate interest)
– Improvement of the user experience on our website and other services (consent, legitimate interest)
– Invoicing, credit decisions and debt collection (legitimate interest)
– Marketing communications (legitimate interest)
– Direct marketing, including electronic and telephone marketing, planning and measuring marketing effectiveness, and data consolidation for direct marketing purposes (legitimate interest, consent)
– Management of stakeholder relationships and cooperation with subcontractors and service providers (legitimate interest, contract or preparation thereof)
– Internal reporting and administrative measures (compliance with legal obligations)
– Warranty and defect liability matters, complaints handling, legal proceedings and regulatory matters (legitimate interest)
– Prevention and investigation of misuse and ensuring data, personnel and property security (legitimate interest)
– Compliance with statutory obligations (e.g., accounting and taxation).
Where processing is based on consent, the data subject may withdraw consent at any time by contacting the person listed above.
Processors of Personal Data
Access to personal data is restricted to persons responsible for customer relationship management and marketing.
Recipients of Personal Data
We may use external service providers such as technical solution providers, server hosting companies, and accounting and financial administration service providers. Appropriate data protection agreements are maintained.
Personal data may also be disclosed to third parties when required by law, to investigate misuse, ensure safety, or in the context of legal proceedings or similar procedures.
In mergers, acquisitions or corporate reorganisations, personal data may be transferred to the involved parties.
Transfer of Personal Data Outside the European Economic Area
Personal data is not transferred outside the EU or EEA unless necessary for technical implementation. In such cases, the required level of protection and safeguards will be ensured.
Cookies
We use cookies and similar technologies on our website. Cookies are small text files stored on the user’s device. They contain an anonymous identifier that helps us analyse and develop our services and target advertising. Users may manage cookie consent via our website’s cookie tool.
Protection of Personal Data
Personal data is protected using appropriate technical and organisational measures. Data is stored in secure databases protected by firewalls, passwords and other security measures. Access is restricted to designated persons.
Retention and Deletion of Personal Data
Personal data is retained as long as necessary for the purpose for which it was collected, for the performance of a contract, or as required by law. After this period, the data is securely destroyed.
Rights of the Data Subject
– Right of access – to know whether personal data is processed and to obtain a copy.
– Right to rectification – to correct inaccurate or incomplete data.
– Right to erasure – when no lawful basis for processing exists.
– Right to restriction of processing – e.g., if accuracy is contested.
– Right to object – particularly to direct marketing.
– Right to data portability – applies to data provided by the data subject, processed under consent or contract, and by automated means.
– Right to withdraw consent – does not affect processing carried out before withdrawal.
Requests regarding rights should be submitted in writing or by email to:
Chalet Dreams Oy
Data Access / Personal Data Request
[email protected]
Identity may be verified before processing requests. The Company responds within one month unless an extension is required.
Data subjects have the right to lodge a complaint with the supervisory authority if they consider that their personal data has been processed unlawfully.
English 
German 
French 
Finnish