Privacy Policy

1. Data Controller

Stay North Oy

Stay North Oy is the data controller responsible for the processing of personal data described in this Privacy Policy.

‎

2. Personal Data We Process

We process personal data relating to guests, customers, and website users in connection with accommodation bookings and related services.

2.1 Booking and Contact Information

Name
Email address
Telephone number
Booking reference
Property name
Booking dates
Number of guests
Messages or special requests related to the booking

2.2 Identity Information

Identity document details provided by the guest (e.g. ID card or passport information)

Identity information is collected directly by Stay North and may be accessed by authorised Stay North personnel. Identity data is stored in our booking management system and is collected to comply with Finnish legal requirements applicable to accommodation providers. Where required by law, identity information may be disclosed to authorities, including the police.

2.3 Payment Information

Payment amounts
Payment dates
Payment status

Stay North does not store full credit or debit card numbers.

Payments are processed securely by third-party payment service providers such as Stripe. Stay North receives only payment confirmations and references necessary for booking administration.

2.4 Communications

Email correspondence
Messages sent via booking platforms
Customer support communications

2.5 Technical and Usage Data

IP address
Device and browser information
Website usage data
Booking and cancellation timestamps
System and audit logs

2.6 Access to Digital Materials (e.g., Guidebooks)

We collect and process your email address to provide access to digital materials, such as property guidebooks.

The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR), namely to deliver requested content and improve the user experience, or performance of a contract (Article 6(1)(b) GDPR) where applicable.

‎

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes and legal bases:

PurposeLegal BasisManaging accommodation bookings and servicesPerformance of a contract (Art. 6(1)(b) GDPR)Guest identification and accommodation complianceLegal obligation (Art. 6(1)(c) GDPR)Payment processing and refundsPerformance of a contract (Art. 6(1)(b) GDPR)Customer communication and supportLegitimate interest (Art. 6(1)(f) GDPR)Compliance with legal obligations and authority requestsLegal obligation (Art. 6(1)(c) GDPR)Dispute handling, claims, and debt recoveryLegitimate interest (Art. 6(1)(f) GDPR)Website analytics and marketing activitiesConsent (Art. 6(1)(a) GDPR)

‎

4. Data Sharing and Recipients

We may share personal data with the following categories of recipients:

Property owners
, who receive limited booking and guest information necessary to fulfil reservations
Booking and property management systems
(such as Hostaway)
Payment service providers
(such as Stripe)
Debt collection agencies
(such as Ropo), where payment obligations remain unpaid
IT, hosting, and communication service providers
Authorities
, including police or other competent bodies, where required by Finnish law

We do not sell personal data.

‎

5. Cookies, Pixels, and Marketing Technologies

We use cookies and similar technologies (such as pixels and tags) on our website to ensure proper functionality, analyse usage, and support marketing activities.

Types of technologies used

Essential cookies

These cookies are necessary for the operation of the website and cannot be disabled.

Analytics cookies

Analytics tools may be used to understand how visitors interact with the website and to improve our services.

Marketing cookies and pixels

Marketing cookies and pixels (such as Meta Pixel or similar technologies) may be used to:

measure the effectiveness of advertisin
show relevant advertisement
limit the frequency of advertisements

Marketing cookies are used only where you have given your consent via our cookie settings.

You can manage or withdraw your consent at any time through your browser settings or our cookie management tools.

‎

6. International Data Transfers

Some of our service providers may process personal data outside the EU/EEA. Where applicable, such transfers are protected using appropriate safeguards, such as EU adequacy decisions or Standard Contractual Clauses approved by the European Commission.

‎

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy:

Booking and payment data: retained in accordance with accounting and tax legislatio
Identity information: retained only for the period required by applicable Finnish la
Communications: retained for customer service and dispute handling purpose
Technical and usage data: retained for system security, diagnostics, and website optimisation

‎

8. Data Security

Stay North implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. Access to personal data is limited to authorised personnel only.

‎

9. Data Subject Rights

You have the right to:

Access your personal data
Request rectification of inaccurate or incomplete data
Request erasure where legally applicable
Restrict processing
Object to processing
Lodge a complaint with the Finnish Data Protection Ombudsman
Requests can be submitted to hello@staynorth.com.

‎

10. Email Marketing (Privacy Policy Section)

Email Marketing and Communications

If you choose to opt in, we may use your email address to send you marketing communications from Stay North, including news, updates, and exclusive offers.

The legal basis for processing your personal data for marketing purposes is your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by clicking the unsubscribe link in our emails or by contacting us directly through hello@staynorth.com.

We will only send marketing emails if you have actively opted in to receive them. Your contact details will not be used for marketing purposes without your consent.

We use third-party email marketing service providers to manage and send our communications. These providers process your personal data on our behalf and in accordance with applicable data protection laws.

We will retain your email address for marketing purposes until you withdraw your consent or unsubscribe from our communications.

‎

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website.

‎

12. Contact

For privacy-related questions, please contact:

hello@staynorth.com