Privacy Policy

Last updated: 20 August 2026

1. Data controller

The controller responsible for processing personal data on this website is:

One Day in Helsinki Oy
Köydenpunojankatu 8
00180 Helsinki, Finland

Contact person: Niki Keinonen
Email: niki@onedayinhelsinki.com
Telephone: +358 40 775 4500

2. Personal data we collect

When you contact us through our website, by email, telephone or WhatsApp, we may process the following information:

  • your name;
  • your email address;
  • your telephone number;
  • the contents of your message;
  • information relating to your tour or service enquiry;
  • any other information you voluntarily provide to us.

The website contact form collects your name, email address and message. Contact-form submissions are sent to us by email and are not intended to be stored as a separate submission database in WordPress.

Please do not include sensitive personal data in the contact form unless it is necessary for arranging the requested service.

3. Purposes and legal bases for processing

We process personal data for the following purposes:

  • responding to enquiries;
  • preparing offers and arranging tours or other services;
  • communicating with customers;
  • managing customer relationships;
  • fulfilling agreements and contractual obligations;
  • complying with legal and accounting obligations;
  • maintaining the security and functionality of our website;
  • establishing, exercising or defending legal claims.

The legal bases for processing are:

  • taking steps at your request before entering into a contract;
  • performance of a contract;
  • compliance with legal obligations;
  • our legitimate interests in communicating with customers, providing our services and protecting our business and website; and
  • consent, where consent is required, for example for non-essential cookies or marketing technologies.

4. Bookings and payments

The website does not provide online booking or online payment facilities. Tours and other services are arranged through email, telephone or WhatsApp.

Payment information is not collected through this website.

5. Retention of personal data

Ordinary enquiries and related correspondence are retained for no longer than two years after the last communication, unless a longer retention period is necessary for providing an agreed service, resolving a dispute or establishing, exercising or defending legal claims.

Information connected with contracts, payments, invoices and accounting is retained for the periods required by applicable Finnish legislation.

When personal data is no longer necessary for its purpose, it is deleted or anonymised.

6. Recipients and service providers

We may use trusted service providers to operate the website and provide our services. These may include:

  • SiteGround for website hosting and technical services;
  • WordPress and the Divi theme for website functionality;
  • email and telecommunications service providers;
  • Google services, such as Google Maps or Google Fonts, where used;
  • Meta services when you contact us through WhatsApp or interact with our Facebook or Instagram services.

These providers may process personal data on our behalf or as independent controllers according to their own privacy policies.

We do not sell personal data.

7. International transfers

Some service providers, including Google and Meta, may process data outside Finland or the European Economic Area.

Where personal data is transferred outside the European Economic Area, the transfer must be based on an applicable legal transfer mechanism, such as an adequacy decision or approved standard contractual clauses.

8. Cookies and similar technologies

Our website uses necessary cookies for its operation. Other cookies or technologies may be used only according to the choices made through the website’s consent banner.

Further information about the cookies and services used on this website is available in our Cookie Policy.

You can change or withdraw your cookie choices at any time through the Manage Consent function available on the website.

9. Analytics

We do not currently intentionally use Google Analytics to compile website visitor statistics.

If analytics services are introduced in the future, this Privacy Policy and the Cookie Policy will be updated, and any consent required by law will be requested before analytics technologies are activated.

10. Meta Pixel and marketing technologies

The Meta Pixel is currently inactive on this website.

If it is activated in the future, it will be classified as a marketing service and will only be allowed to operate after the visitor has given the required consent through the consent banner.

Visitors will be able to reject marketing technologies or withdraw their consent at any time.

11. WhatsApp and social media

If you contact us through WhatsApp, Facebook or Instagram, Meta may process information relating to that communication in accordance with Meta’s own terms and privacy policies.

We recommend reviewing Meta’s privacy information before using these services. You may alternatively contact us by email or telephone.

12. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

Access to personal data is limited to persons who require it for the purposes described in this Privacy Policy.

13. Your data-protection rights

Subject to the conditions of applicable data-protection law, you may have the right to:

  • obtain information about how your personal data is processed;
  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive personal data you have provided in a portable format where applicable;
  • withdraw your consent at any time, without affecting processing carried out before withdrawal; and
  • lodge a complaint with a competent data-protection supervisory authority.

To exercise your rights, please contact us at niki@onedayinhelsinki.com. We may need to verify your identity before fulfilling a request.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman:

Office of the Data Protection Ombudsman
P.O. Box 800
FI-00531 Helsinki, Finland
Website: https://tietosuoja.fi/en/

14. Automated decision-making

We do not use personal data collected through this website for decisions based solely on automated processing that produce legal or similarly significant effects.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technologies or legal obligations change. The current version and its last-updated date will always be published on this page.