Privacy Policy: Orava’s Nest

At Orava’s Nest, we care deeply about the privacy of our guests and website visitors. This Privacy Policy explains how we collect, use, store and protect your personal data when you stay with us or visit our website at oravasnest.com. It is written in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for processing your personal data is:

Orava’s Nest
Rovaniementie 915D
99800 Ivalo, Finnish Lapland
Finland
Website: oravasnest.com
Email for privacy enquiries: oravasnest(at)web.de

2. Personal Data We Collect

We collect and process the following types of personal data, depending on how you interact with us:

  • Identification and contact details: your name, email address, phone number, country of residence.
  • Booking information: dates of stay, number of guests, special requests, booking reference, cabin preferences.
  • Payment information: partial payment details as required to process your booking (for example, payment card details processed securely via our payment provider) and information about the payment status. We do not store full card numbers on our own systems.
  • Communication history: emails and messages you send us, including enquiries made through contact forms or booking platforms.
  • Website usage data: IP address, device and browser type, pages viewed, time spent on the site, and interactions with our content, collected via cookies and similar technologies.
  • Consent preferences: your choices regarding marketing communications and non-essential cookies.

3. How We Collect Your Data

  • Directly from you when you make a booking, contact us by email or form, or otherwise communicate with us.
  • Automatically when you visit our website, through cookies and similar technologies placed on your device.
  • From third parties such as online travel agencies or booking platforms when you reserve our cabin via their services.

4. Purposes and Legal Bases for Processing

We process your personal data only when we have a valid legal basis under the GDPR. The main purposes and legal bases are:

  • To manage bookings and your stay
    We use your identification, contact and booking details to confirm and manage your reservation, send booking confirmations, and provide our accommodation services.
    Legal basis: performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
  • To respond to enquiries
    We use your contact details and communication history to answer questions and provide information about Oravas Nest.
    Legal basis: performance of a contract or legitimate interest in providing high-quality customer service (Article 6(1)(b) and 6(1)(f) GDPR).
  • To process payments and prevent fraud
    We share relevant data with our payment service providers to take payment for bookings and to help detect and prevent fraudulent activity.
    Legal basis: performance of a contract and legitimate interest in securing our business and our guests (Article 6(1)(b) and 6(1)(f) GDPR).
  • To improve our website and services
    We analyse website usage data (for example, which pages are most visited) to maintain, secure and enhance the experience on oravasnest.com and to better understand our guests’ preferences.
    Legal basis: legitimate interest in operating and improving our website and services (Article 6(1)(f) GDPR), and where required, your consent for cookies and analytics (Article 6(1)(a) GDPR).
  • To send optional updates and offers
    If you choose to receive them, we may send you news, special offers or updates about Orava’s Nest by email.
    Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time.
  • To comply with legal obligations
    We may need to process and retain certain data for tax, accounting or regulatory purposes.
    Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

5. Cookies and Website Analytics

Our website uses cookies and similar technologies to provide a smooth and secure browsing experience and to understand how visitors use our site. Cookies are small text files stored on your device when you visit a website.

Types of Cookies We Use

  • Strictly necessary and functional cookies
    These cookies are required for the site to function properly and to remember your choices (for example, preferred language or cookie preferences). They cannot be switched off in our systems, and you can only disable them through your browser settings.
  • Analytics and performance cookies
    Subject to your consent, we use analytics tools to collect aggregated information about how visitors use our website (such as page views, time spent and navigation paths). This helps us improve our content and design.

When you first visit oravasnest.com, you will be asked to set your cookie preferences. You can change your preferences at any time through your browser settings or any cookie management tools available on our site.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes described in this policy or as required by law. Typical retention periods are:

  • Booking and guest records: generally kept for up to 6 years after your stay, to comply with accounting and tax obligations and to handle any potential claims.
  • Communication history: typically stored for up to 3 years after our last interaction, unless we need to keep it longer for legal reasons.
  • Payment information: retained as necessary for accounting and tax purposes, usually in line with local legal requirements. We do not store full card details on our systems.
  • Analytics data: stored in an aggregated or pseudonymised form for up to 2 years, or as otherwise specified by our analytics provider.
  • Marketing contacts: kept until you withdraw your consent or object to receiving marketing communications, or we can see that you are no longer engaging with our messages.

After these periods, data is securely deleted or anonymised.

7. Sharing Your Personal Data

We do not sell your personal data. We only share it with carefully selected third parties when necessary for the purposes described above or when required by law:

  • Payment processors: to securely process your payments and prevent fraud.
  • Booking platforms and partners: if you book through an online travel agency or booking website, they will share your booking details with us, and we may share relevant information back to manage your reservation.
  • IT and hosting providers: who help us operate our website, booking tools, email services and data storage in a secure manner.
  • Analytics providers: to collect and analyse website usage data, in line with your cookie preferences.
  • Professional advisers and authorities: such as accountants, legal advisers or public authorities, when necessary to comply with legal or regulatory obligations or to protect our rights.

Whenever we share data with service providers, we ensure appropriate data processing agreements are in place and that your data is protected according to GDPR standards.

8. International Transfers

Some of our service providers or their servers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as the use of the European Commission’s standard contractual clauses or ensuring the country has an adequate level of data protection as recognised by the European Commission.

9. How We Protect Your Data

We take the security of your data seriously and apply appropriate technical and organisational measures to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include restricting access to personal data to those who need it for their work, using secure systems and connections, and regularly reviewing our practices.

10. Your Rights Under GDPR

As an EU data subject, you have the following rights with respect to your personal data, subject to certain conditions and limitations under the law:

  • Right of access: to obtain confirmation of whether we process your personal data and receive a copy of the data we hold about you.
  • Right to rectification: to request correction of inaccurate or incomplete personal data.
  • Right to erasure (“right to be forgotten”): to ask us to delete your personal data in certain circumstances.
  • Right to restriction of processing: to request that we limit the processing of your personal data in specific situations.
  • Right to object: to object at any time to processing based on our legitimate interests, including profiling, and to object to direct marketing.
  • Right to data portability: to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to have that data transmitted to another controller where technically feasible.
  • Right to withdraw consent: when processing is based on your consent, you may withdraw this consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the details in the Contact Us section below. We may need to verify your identity before fulfilling your request.

11. Contact Us for Data Protection Matters

If you have any questions, concerns or requests regarding this Privacy Policy or the way we handle your personal data, you can contact us at:

Orava’s Nest: Privacy
Email: oravasnest@web.de
Website: oravasnest.com

12. Your Right to Lodge a Complaint

If you are not satisfied with how we handle your personal data, you also have the right to lodge a complaint with the competent supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman:

Office of the Data Protection Ombudsman
Website: tietosuoja.fi

We would, however, appreciate the chance to address your concerns before you approach the authority, so please feel free to contact us first.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example if our services or applicable laws change. The latest version will always be available on oravasnest.com. We recommend reviewing this page periodically to stay informed about how we protect your privacy.

This Privacy Policy was last updated on July 24th, 2026.