Privacy Statement

We respect your privacy. We mostly gather anonymous data about our customers to develop our website and improve our customer service experience, among other things. You can opt out of data gathering if you wish.

Cookies and privacy at

Our website uses cookies and gathers anonymous statistical data about site use. Social media plugins may also gather user data according to the privacy statement of each service provider.

1. Cookies
The website uses cookies. The site sends a small file to your browser that is stored on your computer. These include (temporary) session ID cookies that expire when you close your browser as well as permanent cookies that are stored on your computer.

Cookies are used to improve your user experience on the site. They allow us to track and examine your interests and use this information to improve usability. Advertising cookies can be used to optimise the advertisement experience for the end user.

Web browsers typically accept these cookies automatically. Users may opt out of accepting cookies with their browser settings. Most browsers allow setting cookie use off altogether. However, not accepting any cookies may affect site functionality.

2. Third Party Plugins
The website may include links or connections to third party websites or social media plugins (such as Youtube, Vimeo, AddThis, Twitter, Facebook, Instagram, LinkedIn). Using social media plugins may send identifiable information to the social media service provider in question.

Opening a plugin may allow third party cookies to be stored on your computer, allowing the service provider to track your use of the page if you are signed in to the social media service in question. These third party services or third party applications are governed by the end user agreements of the third party in question. The site admin has no authority over these third party websites and accepts no responsibility for any material published on these sites or the use of any such material.

3. Website Traffic Tracking
Our website uses Facebook Pixel tracking.

Facebook Pixel cookies track use data between the site and Facebook services. They also enable targeted marketing. You can learn more about Facebook cookies at

Customer and Partner Contact Information Register

We maintain a contact information register that contains information provided by our partners and customers. This information is not shared with third parties. You have the right to have your information expunged at any time.

1. Data Controller

Municipality of Enontekiö
Ounastie 165
040 481 9484

Register Admin
Heidi Risto

2. Data Subjects
Potential customers
Local businesses

3. Use of Personal Data
The purpose of the register is to enable customer service and maintain customer relations, communicating about current affairs and advertising, promoting and direct marketing about travel services, products and events. The data subject has the right to opt out of direct marketing.

4. Personal Data Stored in the Register
The customer register contains the following information:

Customer information
Information on marketing permits or prohibitions
Additionally for companies: Company name, billing address and Business ID.

5. The Rights of the Data Subject
Requests regarding the rights of the data subject should be made to the register admin at

For more information on the rights of the data subject, see

Right of Inspection
Data subjects have the right to request an inspection of any data related to them. Such requests should be made in writing to the controller. Address requests to the registry contact person.

Right to Rectification
Data subjects have the right to request rectification of information in the register. Such requests should be made in writing and with sufficient detail. Address requests to the registry contact person.

Right of Objection
Data subjects may object to the processing of personal data if they feel that it has been done unlawfully. Address requests to the registry contact person.

Direct Marketing Ban
You have the right to prohibit the use of your data for direct marketing, distance marketing and other direct advertising. The ban can be added or removed at any time with written notification to the Data Protection Officer

Each of our newsletters has a link that allows you to leave the mailing list. If a person refuses marketing, we will keep information about the ban and the related contact details so that we can ensure compliance with the ban.

Right of Removal
Data subjects have the right to request the removal of their data if its processing is not necessary. We will process removal requests and then either delete the information or provide a justifiable reason why the data cannot be deleted.

It should be noted that the controller may have a statutory or other right not to delete the requested information. The controller is obliged to keep accounting records for the period defined in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, any material related to accounting cannot be deleted before the time limit has expired.

Withdrawal of Consent
Where personal data is processed based on the data subject's consent, the data subject shall have the right to withdraw their consent by informing the register contact person.

Right of Appeal
Data subjects have the right to lodge a complaint with the appropriate authorities if the controller has not complied with applicable data protection regulations. Contact information for the Data Protection Ombudsman

6. Regular Data Sources
Information provided by the customer. This information may be collected in connection with various marketing activities (e.g. trade fairs, sales events), as well as in our newsletter subscription form or otherwise directly from the customer.

7. Regular Release of Data
Municipality of Enontekiö uses the personal data only for its internal business purposes and does not transfer the data to any external parties.

The contact information of the companies involved in the travel marketinfg network, such as name of the company, name of the contact person, email adress and phone number, is shared to other companies of the travel marketing group for internal network communication.

The information may be selectively disclosed for a marketing campaign conducted by a third party commissioned by the municipality of Enontekiö or the travel marketing network. However, the third party does not have the right to use the data for any other purpose.

We have ensured that all our service providers comply with all relevant data protection legislation. As a rule, we use the following service providers: Google Inc., Facebook/Instagram, YouTube.

8. Duration of Processing
All processing of personal data is based on respecting the rights of the data subject at all stages of processing. The legal basis for processing personal data is ensured at all times. The controller will only collect and process personal data that is necessary for operation.

The information will be processed as long as the customer relationship requires or until the customer wishes to remove their information from the register unless otherwise agreed or required by law.

Marketing-related information shall be retained as long as the person has not refused to receive marketing communications.

9. Processors of Personal Data
The electronic information stored in the register is protected so that only authorized persons can view it. Access to data via user names and passwords is only granted to individuals who are entitled to process it due to the nature of their work.

10. Data Transfer Outside the EU
The data will not be transferred outside the EU or EEA unless it is required for providing the services. In such cases, the controller ensures that the necessary level of security is ensured in accordance with current legislation.

11. Automated Decision-Making and Profiling
We do not use the data for automated decision-making or profiling.

Feedback and Contact Information

E-mail us at