Privacy Notice

Updated 5 August 2026. This notice describes the actual data flows of the Little Bear Trail digital audio guide.

1. Controller

Korpiretket, Business ID 2501532-1
Myllykoskentie 30
93900 Kuusamo
+358 40 778 7316
info@pienikarhunkierros.fi

2. Data processed

• Order email address, order date and language.
• Stripe Checkout Session ID, Payment Intent ID, payment status, price, amount and currency returned by Stripe.
• Consent version, time and records of accepting the terms, requesting immediate delivery and acknowledging loss of the withdrawal right.
• If the optional winner's diploma is selected: the diploma selection, the name entered for the diploma, purchase language, delivery status and a keyed hash of the name version used for delivery. The name is not used for marketing.
• Hashed access token and hashed recovery code. The usable access token is stored in the customer's browser as a secure, HttpOnly cookie.
• Order-confirmation delivery status and technical error code, if sending fails.
• Information submitted in withdrawal notices and complaints, their receipt times, language, message-delivery status and technical error code.
• IP address, time, requested URL, browser and device-related technical information in the hosting provider's ordinary web server and security logs.
• For first-party usage statistics: page and guide openings, language, audio starts and completion stages, activated guide-point identifiers, paywall and offline-button use, coarse device/browser category and technical GPS error code. Exact location, travelled route, raw IP address and the full user-agent string are not stored in the statistics database.

The guide processes precise location in the customer's browser to identify the nearest guide point. The application does not send or store the precise location or travelled route on Korpiretket's server. First-party usage statistics use a secret-key-protected daily identifier derived on the server; it changes each day. No analytics cookie or persistent browser identifier is created. The fonts used by the service are loaded from Korpiretket's own server.

The diploma name is requested only if the customer selected the optional diploma checkbox during checkout. The PDF is sent only to the purchase email address.

3. Purposes and legal bases

• Contract performance: creating and delivering the order, granting and restoring access, sending the order confirmation and, when requested by the customer, creating and emailing the personalised winner's diploma.
• Legal obligation: accounting and consumer-law records, including records of the request for immediate delivery and acknowledgement concerning the withdrawal right.
• Legitimate interests: information security, preventing misuse, troubleshooting, measuring and improving the guide, and demonstrating the parties' rights and handling legal claims.

4. Recipients and processors

Payment data is processed by Stripe. Website, database, server-log and email infrastructure is provided through the hosting provider Louhi Networks. Data is not sold.

5. Transfers outside the EU or EEA

Stripe may process data outside the EU or EEA. Stripe is responsible for using an applicable legal transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses. Their own privacy notices provide further details.

6. Retention

• Access and recovery records are retained while the access right remains active and for a reasonable period needed to resolve related claims.
• Order, payment, consent and accounting records are retained for the period required for contract, consumer-law and statutory accounting purposes. Accounting material is generally retained for six years from the end of the relevant financial year.
• The diploma name is retained for no more than 13 months after it was last entered or updated. Diploma-delivery records are retained for no more than 13 months. Delivery records contain a keyed hash of the name, not the readable name.
• Withdrawal notices, complaints, customer-service messages and related delivery error data are retained only as long as needed to handle the matter and related legal claims, subject to statutory obligations.
• Web server and security logs follow the hosting provider's operational retention and backup cycles.
• First-party usage-statistics events are retained for no more than 13 months.

7. Your rights

Subject to the applicable legal requirements, you may request access to or correction or deletion of your personal data, restriction of processing, data portability, and object to processing based on legitimate interests. Statutory retention obligations may limit deletion.

Send privacy requests to info@pienikarhunkierros.fi. You may also lodge a complaint with the Finnish Data Protection Ombudsman.

8. Browser storage

The service uses a secure, HttpOnly access cookie for access and browser local storage for language, progress and offline status. Cache Storage and a Service Worker store selected application resources and content downloaded for offline use. Removing browser data may require access to be restored with the recovery code.