1. Information We Collect

We collect different types of personal data depending on how you interact with our website and services.

1.1 Personal Information Provided by You

• Name
• Email address
• Phone number
• Billing and shipping address
• Payment details (processed securely via third-party providers)
• Travel preferences and booking details

1.2 Automatically Collected Information

When you visit our website, we may collect the following data automatically:

• IP address
• Browser type and device information
• Cookies and usage data (see Cookies Policy section)
• Website visit behavior (e.g., pages visited, time spent, click interactions)

1.3 Information from Third Parties

We may receive personal data from third-party booking platforms, payment providers, or marketing partners if you book services through them.

2. How We Use Your Data

We use your personal data for the following purposes:

• To provide and manage our services, including hotel recommendations, bookings, and activity arrangements.
• To process payments securely through our payment partners.
• To improve our website and services by analyzing user behavior and preferences.
• To send you updates, promotions, and travel information, if you have given consent for marketing communications.
• To comply with legal and regulatory requirements under Finnish and EU laws.

We do not sell or rent your personal data to third parties.

3. Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds under GDPR (Article 6):

• Performance of a Contract – When you book travel services with us.
• Legitimate Interests – To improve our services and user experience.
• Consent – When you opt-in to receive marketing communications.
• Legal Obligations – Compliance with tax laws, fraud prevention, and regulatory requirements.

4. Data Sharing and Third-Party Services

We may share your personal data with:

• Hotel and activity providers to confirm reservations.
• Payment processors to handle transactions securely.
• Marketing service providers (if you opt-in for promotional emails).
• Legal and regulatory authorities, if required by law.

All third parties handling your data must comply with GDPR and other data protection laws.

5. Data Retention

We store your personal data only as long as necessary:

• Booking and travel data: Retained for up to 5 years for legal and tax purposes.
• Marketing data: Retained until you withdraw your consent.
• Website analytics: Retained for up to 2 years.

Once the retention period expires, we securely delete or anonymize your data.

6. Your Rights Under GDPR

As a resident of Finland and the EU, you have the following data protection rights under GDPR:

• Right to Access – Request a copy of your personal data.
• Right to Rectification – Correct any inaccurate or incomplete data.
• Right to Erasure ("Right to Be Forgotten") – Request deletion of your data.
• Right to Restrict Processing – Limit how we use your data.
• Right to Data Portability – Receive your data in a structured format.
• Right to Object – Opt-out of marketing communications at any time.
• Right to Withdraw Consent – If processing is based on your consent.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days as required by GDPR.

7. Cookies and Tracking Technologies

Our website uses cookies to enhance your experience and analyze traffic.

7.1 Types of Cookies

Cookies are small text files stored on your device when you visit a website. They help us

• Remember user preferences
• Improve website performance
• Analyze visitor behavior

7.2 Managing Cookies

• Essential Cookies – Required for website functionality.
• Analytics Cookies – Track website usage (Google Analytics, etc.).
• Marketing Cookies – Used for targeted advertising (if consented).

You can adjust cookie settings via your browser or consent banner.

7.3 Managing Cookies

You can manage cookie preferences via your browser settings or our cookie consent banner.

8. Data Security Measures

We implement industry-standard security measures to protect your personal data:

• SSL encryption for secure transactions.
• Strict access controls to limit unauthorized access.
• Regular security audits to prevent data breaches.

If a data breach occurs, we will notify affected users and authorities within 72 hours, as required by GDPR.

9. Third-Party Links

Our website may contain links to external sites (e.g., hotels, tour providers). We are not responsible for their privacy policies. Please review their terms before sharing personal data.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal data from minors. If we become aware of such data, we will delete it immediately.

11. International Data Transfers

As a company operating in Finland, your data is stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure compliance with GDPR safeguards, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data Processing Agreements (DPAs) with third parties.

12. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in legal requirements or business practices. Any updates will be posted on this page with a revised date.

13. OOpt-Out Clause for Privacy Policy

Opt-Out of Data Collection and Marketing Communications

You have the right to opt-out of certain data collection and marketing communications.

Opt-Out of Marketing Emails:

• If you have subscribed to our newsletters or promotional emails, you can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of our emails.
• You can also request removal from our marketing list by contacting us at [email protected].

Opt-Out of Cookies and Tracking:

• You can disable cookies via your browser settings or adjust your preferences through our cookie consent banner.
• To opt out of personalized advertising, visit:
  
• Google Ad Settings
• Facebook Ad Preferences

Opt-Out of Data Processing:

• If you wish to restrict or delete the personal data we store, you can request this by emailing [email protected].
• We will process opt-out requests within 30 days, as required under GDPR and Finland’s Data Protection Act.

14. Contact Information

For any questions about our privacy policy or to exercise your data rights, contact us:

Company Name: Promo Mastery Trips LTD

Address: Katajatie 185, 15560 Nastola, Finland

Email:

Website:promo-mastery.com

Phone: +358174644118

If you believe your data protection rights have been violated, you have the right to lodge a complaint with Finland’s Data Protection Ombudsman (www.tietosuoja.fi) or the relevant authority in your country.

By using our website and services, you agree to this Privacy Policy.