PRIVACY NOTICE
Hyvän Olon Keskus Elontuli Oy
Business ID: 2242133-2

Updated: 18.11.2025

1. Data Controller

Hyvän Olon Keskus Elontuli Oy
Email: elontuli@elontuli.fi
Address: Merkniementie 94, 09120 Karjalohja (Lohja), Finland

2. Name of the Register

Register for retreat and course registrations and electronic communications.

3. Purpose of Processing Personal Data

Personal data is processed for the following purposes:

  • receiving and managing registrations for retreats and courses

  • sending email notifications, instructions, and information related to retreats and courses

  • sending newsletters and marketing communications

  • targeting marketing through tracking codes used on the company’s website

The legal bases for processing are contract performance, consent, and the legitimate interests of the controller.

4. Data Content of the Register

The following information may be processed in the register:

  • name

  • email address

  • phone number

  • registration information (selected course or retreat)

  • optionally, partner’s name (for retreats and courses designed for couples)

  • special diet and dietary restrictions (for full-board retreats)

  • marketing consents and prohibitions

  • website behaviour and tracking data (cookies and tracking pixels)

5. Regular Sources of Data

Data is obtained directly from the individual when they register or fill out a form, as well as via cookies and tracking technologies on the website.

6. Disclosure and Transfer of Personal Data

Personal data is stored and processed in the ActiveCampaign system, which may be located outside the EU/EEA. Any transfers of data are carried out with appropriate safeguards required by data protection legislation (e.g., EU Standard Contractual Clauses).

Personal data is not disclosed to third parties unless required by law.

7. Tracking Technologies and Cookies

The company’s website uses tracking codes from Facebook, Instagram, and Google for the purpose of targeted marketing. These service providers may store cookies and process data in accordance with their own privacy policies.

Users may manage or block cookies through their browser settings.

8. Retention Period of Data

Personal data is retained as long as necessary for the purposes described above or until the individual withdraws consent or requests deletion, unless a longer retention period is required by law.

9. Rights of the Data Subject

The data subject has the right to:

  • access their personal data

  • request rectification, deletion, or restriction of processing

  • object to the processing of personal data

  • withdraw consent for marketing

  • transfer their data to another system when technically feasible

  • lodge a complaint with the data protection authority

Requests must be submitted to the data controller in writing.

10. Data Security

Personal data is processed confidentially and protected with appropriate technical and organisational measures to prevent unauthorised access, loss, or misuse.