Privacy & cookies
Updated 29.10.2026. This notice covers the Lapland Adventure Travels website rebuild.
Who is responsible?
Lapland Adventure Travels OY, Business ID 3506818-7, VAT FI35068187, is responsible for this website. Our published contact address is Juurakkotie Lapinrinne, 96190 Rovaniemi, Finland. For privacy requests, email info@laplandadventuretravels.com or call +358 413 108 993.
Enquiries and information you provide
The current rebuild is a test service. Use invented test details only: its forms save requests on the staging server and do not send email, make reservations or take payments. A test record contains the name, email, phone and message fields shown by your selected form, and, for travel enquiries, your selected service, dates, passenger counts and pickup or drop-off details. Tour test orders also save the calculated estimate and your form acknowledgements; they require an invented email ending in .invalid. Required fields are marked in the form; without them a test request cannot be saved. Do not enter passport, payment-card, health or other sensitive information, or another person's personal details.
If you contact our team directly by email or phone, your contact details and the information you provide are used to respond to your enquiry. Steps you request towards a booking rely on the pre-contractual basis under GDPR Article 6(1)(b); general correspondence relies on our legitimate interest in answering questions under Article 6(1)(f). A form acknowledgement is not permission for marketing. We do not add you to marketing lists through these forms.
Website delivery and security
Your browser sends technical information, such as IP address, requested URL, browser information and request time, to the server delivering the page and its resources. The rebuild serves its site images, styles and fonts from its own host; interactive maps and translation use the external services described below. These connections are needed to deliver the requested content. Security and troubleshooting processing relies on our legitimate interest in keeping the service available and preventing abuse.
Optional analytics and advertising
Optional tracking is off until you actively accept its category. Rejecting it does not prevent browsing or using the test forms. Tracking is disabled in local and preview environments and on booking and payment-result routes.
- Analytics: Google Analytics 4 measures page visits and device/browser information. Microsoft Clarity analyses clicks, scrolling and session replays to help identify usability problems. The rebuild masks its enquiry forms from Clarity. These services can process identifiers, IP/network information and interaction data.
- Marketing: Meta Pixel measures page visits for advertising attribution and may link browser identifiers with information Meta holds about you. This can support advertising measurement and personalisation.
These optional purposes rely on your consent under GDPR Article 6(1)(a). The rebuild does not intentionally send form contents to these services. Google receives page URLs without query strings or fragments; Clarity and Meta are kept off URLs containing either. This does not make tracking anonymous.
Storage and retention
| Storage / provider | Purpose and duration |
|---|---|
| lat-cookie-consent-v1 (local storage) | Remembers the categories you accept or reject and the choice time. The choice is valid for 180 days, then the site asks again. The browser entry remains until replaced or cleared. |
| Google Analytics: _ga, _ga_* | Distinguishes browsers and visits after analytics consent. Google's documented default expiry is 2 years; browser limits and account settings can shorten this. Google's cookie details. |
| Microsoft Clarity: _clck, _clsk and Microsoft-domain cookies | Links interactions and sessions after analytics consent. Lifetimes and third-party storage depend on Microsoft's settings and your browser. See Microsoft's cookie information and privacy statement. |
| Meta: _fbp, _fbc and Meta-domain cookies | Advertising attribution after marketing consent. Storage depends on the events, your browser and Meta's configuration. See Meta's cookie policy. |
Cookie lifetime is different from how long a provider keeps collected data. LAT's provider-account retention settings have not yet been verified for this rebuild. Test records currently remain on the staging server until manually deleted; there is no automatic deletion schedule. This is why real customer data must not be submitted. For direct correspondence, retention depends on resolving your enquiry and any necessary legal recordkeeping or dispute handling; ask us about your particular record.
Your choices and withdrawal
Use Cookie settings, available on every page, to change categories or reject optional tracking. A withdrawal stops the selected services and reloads the page, clearing known accessible first-party tracking cookies. It does not undo earlier lawful processing or erase data already held by a provider. We cannot remove cookies on another provider's domain; you can clear those through your browser. Clearing site storage causes the site to ask for your choice again.
Maps, address search and location
When you search for an address, the staging server sends the search text to Photon (photon.komoot.io). Selecting a map pin sends its coordinates to Nominatim (nominatim.openstreetmap.org) to find an address. Route estimates send the selected pickup and drop-off coordinates to OSRM (router.project-osrm.org). These services receive the server request information. Map tiles load directly from tile.openstreetmap.org, which receives your IP address, browser information and the map area requested. Address and route responses are cached on the server for up to 24 hours. Device location is requested only when you choose Use my location and grant browser permission; the resulting coordinates are used for the selected location lookup. You can type an address instead. These services support the map or estimate you request; optional analytics consent is separate. Do not enter sensitive information into address search.
Optional automatic translation
The site automatically selects a supported language from your browser preferences on your first visit, unless you have already chosen a language. When a non-English language is selected automatically or through the language menu, the site loads GTranslate from cdn.gtranslate.net and sends the page text being translated to Google at translate-pa.googleapis.com; these providers also receive your IP address and browser request information. Your chosen language is remembered in browser storage and restored as you browse. English is the original version. Form inputs and marked booking/contact summaries are excluded from translation. Read GTranslate’s privacy policy and Google’s privacy policy. Return to English in the language menu to stop translating pages.
Recipients and international processing
When enabled with your permission, the named providers receive tracking data: Google, Microsoft and Meta. Their services may process data outside the European Economic Area, including in the United States. Read Google's privacy policy, Microsoft's statement above and Meta's privacy policy for their processing and transfer information. LAT's account-specific processing agreements, transfer safeguards and retention settings still require verification before tracking is enabled for a public launch. No payment provider or live booking backend is connected to this rebuild.
Your rights and complaints
Depending on the processing and applicable exceptions, you can request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. Email the contact above; include enough information to locate the record, but do not send identity documents unless we explain why verification is necessary. Requests are normally answered within one month; a lawful extension will be explained. This rebuild does not make automated decisions with legal or similarly significant effects.
You can complain to Finland's Office of the Data Protection Ombudsman or your local data protection supervisory authority. You do not have to contact us first.
See also our terms and booking conditions.