pyhä pohjoisrinne

Privacy policy

This page describes how we process the personal data of our customers and partners in our online services, such as the Pyha.fi website, as well as related services, such as the Pyhätunturi lift ticket online shop. Our goal is to ensure secure and transparent data processing in accordance with the EU General Data Protection Regulation (GDPR). This statement explains, among other things, what data we collect, for what purposes it is used, how long the data is retained, and how you can exercise your data protection rights.

Privacy Policy for Pyha.fi Online Services 

This privacy policy will take effect on 1 January 2026

Privacy policies valid until 31 December 2025:

Visit Pyhä-Luosto Association's privacy policy

Pyhätunturi Privacy Policy and Terms of Use

The Pyha.fi online service is linked to two separate customer registers, one owned by Visit Pyhä-Luosto Association and the other by Rukakeskus Ltd (Pyhätunturi Ltd is a subsidiary of Rukakeskus Ltd). This privacy policy covers the responsibilities of both controllers.

The online services of Pyhätunturi Oy are provided by Rukakeskus Oy. These services offer products and services from Rukakeskus Oy and its subsidiaries, Pyhätunturi Oy and Ski-Inn Hotels & Apartments Oy.

DATA IN THE REGISTER REGISTER CONTROLLER: VISIT PYHÄ-LUOSTO ASSOCIATION REGISTER CONTROLLER: RUKAKESKUS LTD
ONLINE STORES
Customers of the ski lift ticket online store x
Customers of the equipment rental online store (Alavuokraamo and Kultakero rental shops) x
Customers of the Ski-Inn accommodation online store (on Pyha.fi website) x
Customers of the Pyhä caravan area online store (on Pyha.fi website) x
User data from Pyhä quizzes and digital gaming platforms x
SITE USER DATA AND STATISTICS
Website visitor data and statistics x x
OTHER SERVICES
User data for Pyhä Account and Ski-Inn Owner Extranet service x
Member data for Pyhä loyalty programme x
Subscribers to the Pyhä Ski Resort newsletter x
Subscribers to the Visit Pyhä-Luosto newsletter x
Camera surveillance recordings x
Event participant data* x
Trail map service purchase and user data x
CUSTOMER FEEDBACK
Data obtained through online customer feedback surveys** x

*When registering for an event, the organising party is specified (Pyhätunturi Ltd, or a third party. Events organised by third parties are not covered by this privacy policy).

**At the beginning of the survey, the party conducting the survey is specified (Pyhätunturi or a third party. Surveys organised by third parties are not covered by this privacy policy).

Visit Pyhä-Luosto Association 

Visit Pyhä-Luosto Association is responsible for joint marketing of the area.

Rukakeskus Ltd (Pyhätunturi Ltd is a subsidiary of Rukakeskus Ltd)

Pyhätunturi Ltd is a company responsible for ski resort operations at Pyhä and Ski-Inn accommodations.

 

2. Who can you contact regarding data protection issues? 

Data Protection Officer for Visit Pyhä-Luosto: 

anu.summanen

info@pyhaluosto.fi 

Luontotie 1, 98530 Pyhätunturi. 

Data Protection Officer for Rukakeskus Ltd (Pyhätunturi Ltd): 

Elina Kopra 

Rukatunturintie 9, 93829 Rukatunturi 

Email: tietosuoja.vastaava@ruka.fi 

Phone: 010 382 5252 (weekdays 12–15)

3. Why are we allowed to process your data? 

We process customer data because we either have a valid reason (legitimate interest; for example, a customer relationship or business need, such as providing booking information) or because you have given your consent (for example, when subscribing to a newsletter or joining a loyalty programme). 

4. For what purpose is the data used? 

The data is used for: 

Visit Pyhä-Luosto Association: 

  • Distribution of Visit Pyhä-Luosto ry’s newsletters for the management and development of customer relationship. The newsletters inform subscribers about news, offers, events and other topical issues.
  • Processing and delivering online store orders
  • Fulfilling statutory obligations (e.g., accounting)

Rukakeskus Ltd (Pyhätunturi Ltd): 

  • Managing customer relationships and providing services
  • Processing and delivering online store orders
  • Handling feedback and developing ski resort services
  • Managing the loyalty programme, providing benefits and customer communication
  • Marketing when the person has given consent (e.g., newsletters, targeted offers)
  • Invoicing and payment tracking
  • Fulfilling statutory obligations (e.g., accounting)
  • Improving the user experience of online services 

5. What information is collected about me? 

We only collect necessary information about you. Such information may include: 

  • Name, date of birth and contact details (address, phone number, email)
  • Nationality and website language preference
  • Details of purchases and bookings made
  • Customer feedback and contact requests (Rukakeskus Ltd only)
  • Usage data from the website (e.g., page views, form submissions, cookies, location)
  • Loyalty programme participation details such as joining date, use of benefits (Rukakeskus Ltd only)
  • Marketing consent status (e.g., newsletter subscription and cancellation) (Rukakeskus Ltd only)
  • Customer photo when purchasing season passes (Rukakeskus Ltd only) 

6.a Companion details (ski lift tickets purchased online) 

Details of all ski lift ticket users (first name, last name, date of birth and possible ski pass card ID number) are stored in the register (Rukakeskus Ltd only) .

6.b Companion details (Ski-Inn accommodation bookings) 

The booker can add companion details to a Ski-Inn accommodation booking. 

If a companion wishes, they can join the register by creating a Pyhä Account and view the booking details. 

If the companion does not confirm the request to join the register and create a Pyhä Account, we will delete the data 3 months after the end of the accommodation booking. 

The data is used for the above-mentioned communication and related services. 

7. Where does the data come from?

From customers themselves during purchase, booking or use of online services. For companions, the booking party provides the companion’s details.

8. Who can see your data?

The data is processed by employees of Rukakeskus Ltd, it's subsidiaries and/or Visit Pyhä-Luosto (see table in section 1).

Data may be disclosed under a separate agreement to subcontractors who assist in providing services. 

9. Is data transferred outside the EU?

Yes, sometimes we use service providers outside the EU or EEA. In such cases, we use secure transfer methods and ensure that your data is processed in accordance with the law. 

10. Is my data disclosed to others?

Your data may be disclosed to our trusted partners, but only when necessary to provide the service. Such partners may include payment intermediaries, accommodation providers, experience service providers and IT service providers. All partners are committed to protecting your data. 

11. How is my data protected and how long is it retained?

Your data is carefully protected using technical and organisational measures. We retain data only as long as necessary. Retention periods may vary depending on the type of data and the purpose for which it was collected. Unnecessary data is regularly deleted.

DATA IN THE REGISTER ORGANISATION STORING THE DATA RETENTION PERIOD
SKI LIFT TICKET DATA
Season pass personal data, usage data and photo Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Other ski lift tickets personal data, usage data and possible photo Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
ONLINE STORES
Customer data and purchase details for ski lift and experience online stores Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Equipment rental online store customers (Alavuokraamo and Kultakero rental shops): customer data, purchase details Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Ski-Inn accommodation online store customer data, booking details Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Pyhä caravan area online store customer data, purchase details Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
SITE USER STATISTICS
Website user data and statistics Rukakeskus Ltd ja Visit-Pyhä Luosto Association Anonymised statistical data is retained for 10 years. Non-anonymised data: If the customer has transactions in the register: When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
OTHER SERVICES
Pyhä Account and Ski-Inn Owner Extranet service data Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Pyhä loyalty programme member data Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Pyhä Ski Resort newsletter subscriber data Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Visit Pyhä-Luosto Association's newsletter subscriber data Visit Pyhä-Luosto Association The data is stored in the service until the newsletter is discontinued or until the subscriber themselves cancels the subscription via the unsubscribe link at the end of the newsletter, requests Visit Pyhä-Luosto ry in writing to delete the data, or a defunct e-mail address is automatically deleted.
Ski-Inn accommodation booking fellow passengers' data Rukakeskus Ltd If the person listed as a fellow passenger does not register as a Pyhä Account user and has no transactions in the register, the data will be deleted 3 months after the end of the accommodation booking
Ruka quiz and digital gaming platform user data Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Event participant data Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
Trail map service purchase and user data Visit Pyhä-Luosto Association When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)
CUSTOMER FEEDBACK
Data collected through customer feedback surveys Rukakeskus Ltd When 5 years have passed since the customer’s last interaction, the data will be deleted at the end of the current or following winter season (May)

12. What rights do you have? 

You have the right to: 

  • View your own data
  • Request correction of incorrect data
  • Request deletion of data if it is no longer needed
  • Object to the processing of your data, for example for marketing purposes
  • Request restriction of processing if the accuracy of the data is unclear
  • Transfer the data to another system, if technically possible
  • Withdraw consent, e.g., for email marketing

Requests related to exercising your rights: 

For questions related to the processing of personal data and exercising your rights, you can contact the person mentioned in section 2, depending on which part of the service the request concerns and which organisation owns the register. A request for access or any other request to exercise your rights must be made in writing, either by email or by post. You can also make the request in person at the controller’s office. The controller may ask you to specify sufficiently which data or processing activities your request concerns. 

13. Other registers 

Rukakeskus Ltd’s (Pyhätunturi Ltd's) surveillance camera register

 

14. Cookie policy 

Cookie policy for the Pyha.fi website, Ski-Inn online store, Pyhätunturi Ltd equipment rental online store and Pyhätunturi Ltd ski lift ticket online store