Privacy Notice

1. Controller and contact

The controller is Tuomas Vainionpää, trading as Talvia Private Journeys, Business ID 3652519-1, Helsinki, Finland.

Questions and data-protection requests can be sent to tuomas@talviaprivatejourneys.com.

2. Information we collect

We may collect your name, email address, country, travel dates or season, party size, budget range, destination and accommodation preferences, interests, preferred pace, transport wishes, special-occasion information and the other details you choose to include in an enquiry.

We also receive limited technical and security information needed to operate and protect the website, such as request time, browser or device information and anti-spam signals.

3. Why and on what basis we use it

We use enquiry information to respond, recommend a suitable planning service, prepare a proposal and, if you order, deliver the agreed planning service. The legal basis is taking steps at your request before a contract and performing the contract.

We may also process limited information to protect the service, prevent misuse, keep appropriate business records and comply with legal obligations. The legal bases are legitimate interests and legal obligations, as applicable.

4. Sensitive details

The first enquiry form is not intended for medical information or other sensitive personal data. If accessibility, dietary or safety-related information becomes necessary later, we will ask only for what is relevant and explain how it will be handled before you share it.

5. Retention

We keep information only for as long as it is needed for the enquiry, service, customer relationship, dispute prevention and mandatory accounting or legal duties.

Enquiries that do not lead to an assignment are normally reviewed for deletion within 12 months. Planning notes are reviewed after the service is completed and removed or reduced when they are no longer needed. Statutory records may be retained for the legally required period.

6. Service providers and transfers

We use carefully selected providers for website hosting and database services, business email, invoicing and other essential operations. They may process information only to provide those services and under appropriate contractual and security safeguards.

If information is processed outside the European Economic Area, we use an applicable lawful transfer mechanism and supplementary safeguards where required.

7. Sharing

We do not sell personal information. We do not share an enquiry with accommodation, activity or transport providers unless this is necessary for an agreed service and you have been informed, or the law requires it.

8. Your rights

Depending on the situation, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, or withdraw consent where processing relies on consent. Withdrawing consent does not affect earlier lawful processing.

You may also complain to the Office of the Data Protection Ombudsman in Finland. We may need to verify your identity before completing a request.

9. Changes to this notice

We update this notice when the service or processing practices materially change. The current version and effective date appear on this page.