Chill Like a Finn – 7 Day Challenge in Lakeland

Privacy notice of the campaign

Privacy notice for applicants and visitors

Drafted on 18 February 2026

Visit Finland has organized a marketing campaign called Chill Like a Finn – 7 day challenge in Lakeland (“Campaign”) together with the following regional travel organizations: Regional Council of Kainuu, Pohjois-Savon Matkailu Oy, Business Joensuu Oy, Savonlinna Travel Ltd, Mikkeli Development Miksei Ltd, goSaimaa Ltd, City of Kouvola and Cursor Oy (hereinafter “Organizers”, “Controllers” or “we”). Visit Finland is a Finnish travel promotion organisation, a part of Business Finland and fully owned by the Finnish Government.

The purpose of the Campaign is to promote travelling to Finland, particularly to Eastern Finland Lakeland region, by selecting visitor duos or pairs (“Visitors”) who will participate in the 7 day challenge in Lakeland programme (“Campaign Session”) in Finland in June 2026. Your participation in the Campaign will be used for marketing of Finland’s travel image during and after the Campaign as explained in this Privacy notice.

Visit Finland is part of Business Finland Oy, business ID 2725690-3, having its registered address at Porkkalankatu 1, 00180 Helsinki, Finland, and fully owned by the Finnish Government.

Organizers are joint controllers for processing of personal data under this Privacy Policy and are represented by Visit Finland in all data protection matters. This Privacy notice describes:

the ways we collect personal data about the applicants and visitors and why we do so,
how we process your personal data, and on which legal basis
the choices you have about your personal data.

1. CONTACT INFORMATION OF THE CONTROLLERS IN DATA PROTECTION MATTERS

Your contact point in all data protection matters is:

Name: Business Finland Oy/Visit Finland

Address: Porkkalankatu 1, 00180 Helsinki, Finland

Phone: Switchboard: +358 (0)29 50 55000

Email: dataprotection@businessfinland.fi

2. DATA WE COLLECT AND WHEREFROM

We collect following personal data of the applicants and visitors including their partners or co-applicants (together “participants” or “you”) of the Chill Like a Finn – 7 Day Challenge in Lakeland Campaign.

The data is collected directly from the participants or from third parties, and other services on the Internet referred to by the participant or otherwise made public or available to us. Documentation data and data related to participation are collected from the Session and events, and hosts.

Data related to the admission process, such as:

Application data of the participants such as name, date of birth, age, gender, nationality, home country and hometown, language of communication, time-zone, contact information (email address, home address, cellphone number), social media account, and a link to the application challenge video created by the participant
Profile information such as participant´s profession, education, hobbies, language skills, other special skills, description of personal features, video material attached to the application, information from the portfolios, profiles and other services on the Internet referred to by the participant or otherwise made public or available to us (via participant´s settings in at the social media used in Chill Like a Finn – 7 Day Challenge in Lakeland campaign (Instagram and Tiktok), content posted by participants with their Instagram or TikTok handle in relation to the Campaign, and any other information participants have provided in the application, interviews and video presentations, tracking data about your performance and behavior in the campaign challenge.
Device Data, such as your device IP address, device name and ID; operating system, browser type and language, data we collect with cookies and similar technologies, general location data based on your IP address,
Admission process data, such as data about your signing up to the Chill Like a Finn – 7 Day Challenge in Lakeland campaign including application process and participation in the session, information on your agreement to the terms and conditions of the campaign and session and giving consents to the processing of personal data and use of data and materials shared under campaigns hashtags and use of Documentation data, data about your progress in the admissions process, data about the evaluation and selection of visitors, data of your communication with the admissions support,

Data related to the participation in the session, such as:

data collected of the visitors in relation to the admission process
Identity documentation from the chosen visitors, e.g., a copy of passport and driver’s license.
data of the travel and accommodation arrangements
copies of insurance certificates
information required by the Finnish tax regulation for example to be submitted to the Finnish Incomes Register.
data necessary for the management of the Chill Like a Finn – 7 Day Challenge in Lakeland session, and participant relationship, e.g., arrangement of events during the visit, special diets and other requirements and wishes of the visitors
person to contact in emergency situations (name email address, home address, cellphone number)
communication related to the session between visitors, hosts, and Organizers

Documentation data

Your Campaign posts
documentation of the visit on videos, voice recordings, photographs and written descriptions
well-being data collected in the form of a survey before and after the visit.

The following table sets out the purposes for which personal data is processed, the categories of personal data processed for each purpose, the legal basis under GDPR:

PURPOSE OF PROCESSING	PERSONAL DATA / DATA CATEGORIES PROCESSED	LEGAL BASIS (GDPR)
The execution of the Chill Like a Finn – 7 Day Challenge in Lakeland campaign and the Session, e.g. collection and evaluation of applications, selection of visitors, arrangement of travel and accommodation and activities.	- Data related to the admission process - Data related to the participation in the session	Article 6(1)(b) GDPR - Performance of a contract or pre-contractual measures Article 6(1)(a) GDPR - Consent of the data subject for processing of Device Data
Management of the application and admission process and the Campaign Session and participant relationship, e.g.: communication with you; assist and support you, facilitate and operate the Campaign and Session, set up and conduct interviews, performance of feedback and satisfaction surveys, etc	- Data related to the admission process - Data related to the participation in the session	Article 6(1)(f) GDPR - Legitimate interest of the Controller based on the Participant relationship Article 6(1)(a) GDPR - Consent of the data subject for processing of Device Data
Development of Organizers’ services, particularly marketing campaigns with the Company	- All personal data in aggregated anonymous form so that individual persons are not identifiable	Original data is collected for the purposes and on the legal bases listed in this table and anonymized based on Article 6(1)(f) GDPR - Legitimate interest of the Controller based on the Participant relationship
Keep the application and admission process and participation safe and fair and to fight fraud by analyzing and monitoring the process and taking action against fraudulent or misbehaving candidates and participants.	- All collected data	Article 6(1)(c) GDPR - Legal obligation Article 6(1)(f) GDPR - Legitimate interest of the Controller
Marketing of Finland’s travel image, e.g. documenting the Campaign and Session using Campaign posts, videos, voice recordings, photographs and written descriptions, Publishing and distributing this Documentation Data on the Chill Like a Finn – 7 Day Challenge in Lakeland Campaign on the Campaign websites, on Visit Finland’s social media channels such as YouTube, Facebook, Instagram, and TikTok (“Visit Finland’s Marketing Channels”), on any national or international media organization channels, and on the marketing channels of the Organizers and their partners outside Finland during and after the Campaign.	- Profile Data - Documentation Data - Device Data	Article 6(1)(f) GDPR - Legitimate interest of the Controller based on the Participant relationship Article 6(1)(a) GDPR - Consent of the data subject for processing of Device Data

The personal data shall not be processed for automated decision-making.

5. HOW YOUR PERSONAL DATA IS SHARED

Information may be disclosed to Innovation Funding Agency Business Finland within the framework as regulated by the Finnish Act on Innovation Funding Agency Business Finland and Business Finland Oy (1146/2017).

Data may be disclosed to Organizers´ co-operation partners, other companies and organizations to make the travel and accommodation arrangements and to arrange visits and events. It may be provided to public authorities to fulfill our legal obligations and in response to lawful requests.

Documentation data will be published on the Campaign websites, on VisitFinland.com, on Visit Finland’s social media channels such as YouTube, Facebook, Instagram, and Tiktok (“Visit Finland’s Marketing Channels”), on any national or international media organization channels, and on the marketing channels of Visit Finland’s partners outside Finland (together “Other Marketing Channels”).

Content posted by applicants who have filled out the application form with their Instagram or TikTok handle and who tag @ourfinland (IG) or @visitfinland.com (TikTok) and use the hashtag #ChillLikeaFinn can be shared on the Chill Like a Finn – 7 Day Challenge in Lakeland site and Visit Finland’s social media channels.

Processing tasks may be outsourced to third party service providers. For example, online tools and video interviews, ICT services, marketing and communication, may be outsourced to external suppliers. Each supplier processes personal data only on behalf of Organizers to the extent necessary for the performance of its services subject to confidentiality obligations. The suppliers are bound by written agreements on the processing of personal data, including confidentiality and data security obligations.

Otherwise, personal data will not be disclosed to third parties without the participant’s consent unless required by law.

Personal data may be transferred for processing to a country outside of the EU/EEA. Unless the European Commission has approved the adequacy of data protection in the processing country, we will ensure the appropriate data protection by entering into written agreements with subcontractors under the standard contractual terms approved by the European Commission. The standard terms and conditions can be found at: https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en

We also use third party services to collect and analyze data about the users of Visit Finland´s website. These service providers may use cookies to collect information for their own use in accordance with their own terms and conditions and privacy policies. See our cookie policy here: Cookies policy | Visit Finland.

6. PROTECTING AND RETAINING PERSONAL DATA

Any material to be retained on paper will be stored in locked facilities equipped with access control. The data controllers´ personnel have undertaken confidentiality obligations.

Only people who need personal data for the performance of their work are entitled to use the personal data and are bound by confidentiality obligations. Personal data is saved in databases that are protected by firewalls and anti-virus malware software, and other technical means. The databases are located in locked and guarded premises, and the data can only be accessed by pre-defined and designated persons.

We retain participant data until the Chill Like a Finn – 7 Day Challenge in Lakeland and all related contractual and legal rights and obligations have been fulfilled.

Documentation data can be stored as long as it is used for Organizers´ marketing purposes in accordance with terms and conditions of the Chill Like a Finn – 7 Day Challenge in Lakeland campaign.

The data collected by using cookies will be deleted in accordance with the retention periods specified in connection with the cookie consents.

We assess the need for the retention of personal data on a regular basis and take reasonable measures to ensure that no incompatible, outdated or incorrect personal data is retained.

7. YOUR RIGHTS RELATING TO YOUR PERSONAL DATA

You may:

Request access to the Personal Data that we process about you.
Request that we correct or delete inaccurate or incomplete Personal Data about you.
Request restrictions, temporarily or permanently, on our processing of some or all Personal Data about you.
Request transfer of Personal Data to you or a third party in situations provided by law.
Object to our use of Personal Data about you where our use is based on our legitimate interests.
You can always withdraw your consent.

You do not have to pay a fee for exercising your rights and we will aim to respond to you within 30 days. Please note that we may ask you to verify your identity before taking further action on your request, for security purposes

If you consider that our processing of your personal data infringes applicable law, you may lodge a complaint with the relevant supervisory authority Data Protection Ombudsman in Finland.

In all questions concerning the processing of personal data and situations related to the exercise of the data subject’s rights, you should contact dataprotection@businessfinland.fi.