Privacy Lapland Resorts AB 01.02.2016

Potential external Data Processors

For the implementation of some of the activities connected to the aims detailed above, the Data Controller may also supply the personal data to external Data Processors, that is:

1. banks and lending institutions for payment handling;
2. legal and financial consultants, with objectives strictly connected to the economic activity of the Data Controller;
3. lift companies or commercial partners;
4. Information systems and facilities companies;
5. subsidiary or associate companies;
6. insurance companies;
7. Local health authority, Italian Red Cross and medical assistance companies.

The users in the categories above to which data may be sent will use the said data in their legal capacity as Data Processors, having no bearing on the original data handling carried out at the Company.

6. Potential Data Recipients

Personal data may be disclosed to personnel of the Company charged with its handling by their respective management, as well as the nominated Data handlers. An up-to-date list of persons in charge of processing may be obtained from the Company headquarters.

Cookies

A cookie is a brief string of text sent to the browser and saved on the device every time a userr visits a web site. The Site uses proprietary and third party cookies to improve the navigational experience of the user, rendering it as efficient and simple as possible. So when a user visits the website a minimum of information is saved on their equipment in a specific directory of their web browser. The saved cookies cannot be used to extract any data from the hard disk, insert malware or identify and use the email address of the user.

The cookies are used to improve the navigation of the user. In particular they:

• allow efficient internal navigation of the web site;
• store the user's name and preferences;
• avoid the need for reinput of the same information during the visit;
• monitor the use of the service on the part of the users in order to optimise the navigational experience and the service itself.

It is possible to disable cookies at any time. Disabling or deleting cookies could, in certain respects, block the optimal use of some areas of the site and compromise the use of some services.

There follows a description of the types of cookie that may be used on the Site and the purpose for which they are used.

Technical cookies

These are necessary for the correct functioning of the site and comprise both persistent and session (temporary) cookies . In their absence the site or certain parts of it may not function correctly. Therefore they are always used, independently of user preferences. This type of cookie are always sent from our domain. The Data Controller is not required to request consent for technical cookies since they are strictly necessary for the provision of the service.

Analytics cookies

This type are used to collect information on the use of the site. The Data Controller uses such information for statistical analysis, to improve the site and simplify its use as well as monitor its correct functioning.

Third Party Cookies

Cookies of this type are used to collect anonymized information on the use of the site by visitors, the key words used to reach the site, the web sites visited and the origin of the traffic. The Data Controller can use such information to produce reports and improve the site. The cookies are issued by the Site itself and by third party domains.

Cookies on the site are as follows:

How Can I Check The installation Of Cookies?

The user can decide whether to accept cookies using the settings on the browser.

Warning: Disabling all or part of the technical cookies can compromise the use of the functionality of the website reserved for registered users. On the contrary, the usability of public content is also possible completely disabling cookies.

Disabling cookies "third party" does not prejudge in any way the navigability.

The setting can be defined specifically for different websites and web applications. Furthermore the best browsers allow you to define different settings for cookies "owners" and those of "third parties".

For further information we recommend the links of the major browsers used with instructions for setting cookies:

Chrome: https://support.google.com/chrome/answer/95647?hl=ien

Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Internet Explorer: http://windows.microsoft.com/en-US/internet-explorer/delete-manage-cookies

Opera: http://help.opera.com/Windows/10.00/en/cookies.html

Safari: https://support.apple.com/en-us/HT201265

Laplandresorts AB
Address: Missing merchant_address
VAT Number: merchant_vat_number
Email: bokning@laplandresorts.se
Phone: +46 980 641 00

PRIVACY POLICY-Extended version

Updated and Effective as of June 2018

We have prepared this privacy policy ("Privacy Policy" or "Policy") to explain to you how we collect, use, and share information and Personal Data (as defined under EU`s privacy regulations, the General Data Protection Regulation GDPR) we obtain through your use of the e-commerce platform (Services), that are provided by us. By using the Services, you consent to such collection, use and sharing of your information and Personal Data and agree to the terms of this Privacy Policy in the name of the data controller and its subsidiaries.

Information You Choose To Submit-To be able to do an online purchase

We collect your personal data because of the following reasons:
The ski pass or a ticket is mostly personal and we have to be able to check if it is the correct person using the ski pass or ticket. Seasonal ski passes and daily passes is different for different age groups. And In case of refunds or issue of new RFID cards, we will have to be able to identify the correct ski pass holder.

To be able todo a purchase You are required to provide certain Personal Data (for example, your name and e-mail address,), and you must also provide a user name and password.

Examples of personal data we collect:

• Name, email adress, address, zip, country, gender, birthdate, cell phone and picture ( this is product depended), ID number where this could be product mandatory. This information is often mandatory upon control of your personal skipass/ticket purchase.
  
• Your purchase information, what products you ordered. The validity period of the product
  
• Your team and their personal data, a set of information is collected from your team if you choose to e.g buy a product to friends or family. You confirm that you have made that person aware of how we collect, use and share their Personal data.
  
  

We use your Personal Data to fulfil your requests for products and services, to improve our Services, to contact you from time to time, with your consent, about us and our products and services, and as otherwise described in this Privacy Policy.

This information can be later managed by you under MY ACCOUNT

Information We Automatically Collect

We and our third-party service providers automatically collect certain information from your device or web browser when you interact with the Services to help us understand how our users use the Services . For example, each time you visit the Services we and our third-party service providers automatically collect your IP address, mobile device identifier, browser and computer type, access time, the Web page you came from, the URL you go to next, the Web page(s) that you access during your visit and your interaction with our Services.

We and our third-party service providers use such Usage Data for a variety of purposes including to diagnose problems with our servers and software, to administer the Services, to gather demographic information. The Usage Data we collect is generally non-identifying. We mainly use Google analytics to obtain this information.

Information Use

We use the information we collect, including Personal Data and Usage Data:

• to enable you to use our Services, to create an account or profile, to process information you provide via our Services (including verifying that your email address is active and valid) and to process your transactions;
• to provide related customer service and care, including responding to your questions, complaints, or comments and sending surveys (with your consent) and processing survey responses;
• to provide you with information, products, or services that you have purchased;
• with your consent, to provide you with information, products, or services that we otherwise believe will interest you, including special opportunities from us and our third-party partners;
• for internal business purposes, such as to improve our Services
• to administer offers;
• to contact you with administrative communications and, in our discretion, changes to our Privacy Policy, Terms of Use, or any of our other policies;
• to comply with regulatory and legal obligations

Social Network and Platform Integration

The Services contain integration with social networks and other platforms in which information is shared between us and such platforms. For example, if you create or log into your account through a third-party social media site, we will have access to certain information from that site, such as your name, email address, age, photo. If you don't want a social network to collect the information about you as described above, or you don't want a social network to share it with us, please review the privacy policy, privacy settings and instructions of the social network before you log into our e-commerce platform.

Our Information Sharing Practice

• Generally. We share Non-Personal Data, including Usage Data, de-identified Personal Data and aggregated user statistics, with third parties controlled by us. We share User Information, including Personal Data, as otherwise described in this Policy, and under the following circumstances:
• Service Providers. We use third parties who provide services to us (for example, analytics companies, data management and storage, payment partners In those circumstances, we disclose User Information so that such service providers can perform those services.They are also required to follow and to comply with appropriate security measures to protect your Personal Data.
• Third-Party. We will not sell or transfer any information to a Third-party without your consent.
• You will have a choice (opt-in or opt-out) before we share your information with third parties controlled by the Data controller (E.g ski schools and ski rentals) for marketing purposes. Provided that you have chosen to receive marketing messages, we share your information (including Personal Data) with these third parties. We also match your email address with these third parties with whom you have also consented to share your email address and use such match to deliver custom offers or emails to you.
• We reserve the right to share User Information: in response to court orders, or legal processes.

Anonymous Data

When we use the term "anonymous data," we are referring to data and information that does not permit you to be identified or identifiable, either alone or when combined with any other information available to a third-party. We may create anonymous data from the Personal Data we receive about you and other individuals whose Personal Data we collect. Anonymous data will include analytics information and information collected by us using cookies. We make Personal Data into anonymous data by excluding information (such as your name, photo and birthdate). Anonymous data are used to analyze usage and make improvements to our e-commerce platform

Your rights
we want you as a customer to have full control with your personal data.
As an online customer you may go to MY ACCOUNT and manage your personal data:

• You may update your personal information, both your customer account and members of your team.
• You may download a copy of your information
• You may delete your customer profile and members of your team.
• You may change your opinion about getting offers.
  
  

Lapland Resorts AB guarantees its users to be able to exercise the rights on their data. In particular, clicking on "Manage personal data" in the "Account Settings" menu, you can:

Download personal data
By clicking on the "Download personal data" button, the system will send an email with all user data compressed and password protected, which is automatically generated and communicated only during the data download procedure.

Delete your data
By clicking on the "Delete user account" button, all user data will be deleted from the system, with the exception of the data that Lapland Resorts AB must keep by law, and the data necessary to process the orders.

Choice of /Opt-IN/Opt OUT for further Communication

We offer you the opportunity to manage your communications from us. Even after subscribing to one or more newsletters and/or opting in to one or more offers to receive marketing and/or promotional communications from us or our third-party partners, users may elect to modify their preferences by going to the MY ACCOUNT anytime or by following the "Communications settings " and/or "Unsubscribe" link provided in any email received. You may also be able to change your preferences by updating your profile or account, depending on which of our Services you are using. Even if you do opt-out of marketing emails, we reserve the right to send you transactional and administrative emails including those related to the Services, service announcements, and to contact you regarding any goods or services you have ordered.

Choice of Updating, downloading and Deleting Your Personal Data

You may access the information we hold about you any time through MY ACCOUNT . Here you would may update, correct, modify or delete from our database any Personal Data. If you delete certain information you may not be able to order services in the future without re-submitting such information. Please note that we will maintain Personal Data in our database whenever we are required to do so by law.
Please note that we need to retain certain information and/or to complete any transactions that you began prior to requesting such change or deletion (for example, when you did a purchase of a lift ticket, you may not be able to change or delete the Personal Data provided until after the completion of such a purchase, e.g a yearly subscription ticket could have a validity of up to one year).
We will retain your Personal Data for the period necessary to fulfil the purposes outlined in this Policy unless a longer retention period is required or permitted by law.

Payment Details

Payment data will be processed for purposes pursuant to directive 2015/2366 (EU) and subsequent changes to payment services in the European internal market (so-called PSD2).

Contact us:
We are happy to answer any questions, you will find our contact details on top of the document If you are not satisfied on how we treat your personal data according to this privacy policy you have the right to contact the destinations local country data protection agency.