Privacy Policy – Northern Lights Rent Oy

Effective as of December 9th, 2025

This Privacy Policy describes how Northern Lights Rent Oy (Business ID 3550472-7) processes personal data in connection with its services. We handle personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.

Data Controller
Northern Lights Rent Oy
Ainonkatu 7
50130 Mikkeli
Finland
www.nolire.fi

1. Personal Data We Collect

We collect the following categories of personal data:

Data Provided by the Customer

Name
Contact details (email, phone number, address)
Booking and reservation details
Payment information (via payment service providers)
Customer feedback and communication

Automatically Collected Data

IP address
Device and browser information
Session data (pages viewed, clicks, time spent)
Cookies and similar tracking technologies
Analytics data about service usage

2. Cookies and Analytics

We use cookies and similar technologies to improve website functionality, enhance user experience and analyse service usage.

Types of Cookies

Necessary cookies – essential for the website to function
Functional cookies – improve usability
Statistical and analytics cookies – help us understand how the website is used
Marketing cookies – allow personalized content and advertising

Analytics Services

We use website analytics to develop and improve our service. Analytics data is always processed in a pseudonymised form and is not used to identify individual users.

Users may manage cookie preferences through the website’s cookie consent tools.

3. Purposes of Processing Personal Data

We process personal data for the following purposes:

Handling and managing reservations
Customer service and communication
Billing and payment processing
Service development and usage analysis
Ensuring website and service security
Marketing, based on user consent
Compliance with legal obligations

4. Legal Bases for Processing

We process personal data based on:

Contract (e.g., when making a reservation)
Legal obligations (accounting, electronic communications regulations)
Legitimate interest (service development, security)
Consent (cookies, marketing)

5. Data Retention

Personal data is retained only as long as necessary for the purposes for which it was collected or as required by law.

Examples:

Reservation and customer data: 24 months after last interaction
Accounting records: 6 years, according to Finnish accounting law
Cookie data: 1–24 months depending on cookie type

6. Disclosure of Personal Data

Personal data may be shared with:

Payment service providers
Technical subcontractors (e.g., analytics and hosting)
Authorities when required by law

We do not sell personal data to third parties.

7. Transfers Outside the EU/EEA

Data may be transferred outside the EU/EEA through certain service providers.
We ensure such transfers are protected through:

EU Standard Contractual Clauses
Additional safeguards when necessary

8. Your Rights as a Data Subject

You have the right to:

access your personal data
request correction or deletion
restrict processing
object to processing in certain cases
withdraw consent (e.g., cookies, marketing)
lodge a complaint with the Finnish Data Protection Ombudsman

Office of the Data Protection Ombudsman: www.tietosuoja.fi

9. Data Security

We protect personal data using technical and organizational measures such as:

encryption
access control
monitoring and logging
staff training

10. Contact Information

For all privacy-related questions and requests, please contact:

Northern Lights Rent Oy
Ainonkatu 7, 50130 Mikkeli
Email: info@nolire.fi