Hullu Poro Oy
Business ID: FI2458663-2
Rakkavaarantie 5
FI-99130 Levi, Finland
Phone: +358 16 6510 100
Email: hotel@hulluporo.fi
Website: www.hulluporo.fi
For questions concerning data protection and the processing of personal data, you may contact Hullu Poro Oy using the contact details above.
Hullu Poro Oy processes personal data for the provision of its services and the management of its business operations. Personal data may be processed for purposes including:
We may process the following categories of personal data:
We only process personal data that is necessary for the purposes for which it is collected.
Personal data is primarily obtained directly from the data subject, for example through:
CCTV data is generated by surveillance cameras used by Hullu Poro Oy. Where personal data is obtained from a source other than the data subject, the source may be, for example, a booking channel, tour operator or another business partner involved in arranging the service.
Depending on the circumstances, personal data is processed on the basis of:
Legitimate interests may include managing customer relationships, developing services and business operations, providing customer service, maintaining information security and ensuring the safety of persons and property. Consent is used as the legal basis where required by law, including for certain analytics and marketing cookies.
Hullu Poro Oy may use service providers and business partners that process personal data on behalf of Hullu Poro Oy or where necessary to provide our services. These may include:
Service providers may process personal data only to the extent necessary for providing the relevant service. Hullu Poro Oy does not sell personal data to third parties. Personal data may be disclosed to competent authorities where Hullu Poro Oy is legally required or entitled to do so.
Some service providers used by Hullu Poro Oy may process personal data or enable access to personal data from outside the European Union or European Economic Area. Where such transfers occur, Hullu Poro Oy complies with applicable data protection legislation. Transfers are based on appropriate mechanisms under the GDPR, such as a European Commission adequacy decision or Standard Contractual Clauses approved by the European Commission, together with other appropriate safeguards where necessary.
Personal data is retained only for as long as necessary for the purposes for which it is processed or as required by applicable legislation. Retention periods are determined according to the category of data, the customer relationship, contractual obligations, possible legal claims and statutory retention obligations.
Accounting records are retained for the period required by applicable accounting legislation. The retention period for CCTV recordings is described in Section 12. When there is no longer a basis for retaining personal data, the data will be appropriately deleted or anonymised.
HulluPoro.fi uses cookies and similar technologies to ensure the technical functionality of the website and, with the user’s consent, to improve user experience, analyse website traffic and support marketing activities.
The website may use services such as Google Analytics 4 and Meta Pixel. Strictly necessary cookies may be used without separate consent where they are required to provide a service requested by the user or to ensure the technical operation of the website. Non-essential cookies are used in accordance with the choices made by the user.
Users can manage their cookie preferences and withdraw previously given consent through the website’s cookie settings.
HulluPoro.fi uses Crisp Chat for communication between customers and customer service personnel. Crisp Chat is not used as an automated chatbot on HulluPoro.fi.
The service may process the content of chat conversations, contact information voluntarily provided by the customer and technical information necessary for the operation of the service. Customers are requested not to submit unnecessary sensitive or otherwise specially protected personal data through the chat service.
Information processed through the chat service is retained only for as long as necessary for customer service and related purposes.
Accommodation reservations made through HulluPoro.fi are processed using the Vitec Hotellinx Cloud reservation system. In connection with reservations, customer contact details, accommodation and reservation information, billing details, payment-related information and other information necessary for fulfilling the reservation may be processed.
The information is processed for the performance of the reservation and related contract and for managing the customer relationship.
Hullu Poro Oy may use recorded CCTV surveillance in properties under its control, including indoor areas, entrances, yards and parking areas.
The purposes of CCTV surveillance are to ensure the safety and security of customers, employees and other persons on the premises, protect property, and prevent and investigate damage, misuse, criminal activity and other security incidents.
CCTV surveillance may process images and video recordings of persons within monitored areas, together with related time and location information. Appropriate signs are used to inform persons about CCTV surveillance in monitored areas. CCTV processing is based on Hullu Poro Oy’s legitimate interest in ensuring the safety of persons and protecting property.
Access to CCTV recordings is restricted to persons whose duties require access to such recordings. Recordings may be disclosed to competent authorities where necessary, for example for investigating suspected criminal activity, damage or other security incidents.
CCTV recordings are generally retained for a maximum of 30 days, after which they are deleted or automatically overwritten. If a recording is required for investigating a criminal offence, damage or another incident, or for the establishment, exercise or defence of legal claims, the relevant recording may be retained for as long as necessary to handle the matter.
Providing certain personal data is necessary in order to enter into a contract and provide a requested service, such as an accommodation reservation. Such data may include the customer’s name, contact details and information required for the reservation and payment.
If information necessary for providing the service is not provided, Hullu Poro Oy may be unable to enter into the contract, fulfil the reservation or provide the requested service. Providing information based solely on voluntary consent is not a condition for receiving a service unless that information is necessary for providing the service.
Hullu Poro Oy does not make decisions based solely on automated processing of personal data that produce legal effects concerning the data subject or similarly significantly affect the data subject.
With the user’s consent, analytics and marketing technologies may be used on the website to create audiences or target marketing. Hullu Poro Oy does not use such processing for solely automated decisions that have legal or similarly significant effects on the user.
Under applicable data protection legislation, the data subject may have the right to:
The supervisory authority in Finland is the Office of the Data Protection Ombudsman. Requests concerning personal data may be submitted to Hullu Poro Oy using the contact details provided in Section 1. Hullu Poro Oy may request appropriate verification of identity before fulfilling a data subject request.
Hullu Poro Oy protects personal data using appropriate technical and organisational security measures. Access to personal data and CCTV recordings is restricted to persons whose duties require such access.
Information systems and services are protected by appropriate access controls and other security measures designed to prevent unauthorised access, alteration, disclosure or destruction of personal data.
Hullu Poro Oy may update this Privacy Policy when services, systems, processing practices or applicable legislation change. The current version of this Privacy Policy is available on the HulluPoro.fi website.
Last updated: 17 August 2026