Privacy Policy

Updated 1st April 2025

Protecting your personal data is of utmost importance to us. Therefore, we use your personal data only in accordance with applicable laws, particularly the EU General Data Protection Regulation ("GDPR"). This privacy policy describes how Your City Guide uses and processes your personal data when you use Your City Guide’s services, such as through our website and mobile applications. It also explains your rights concerning your personal data and how you can contact Your City Guide.

This privacy policy has been drafted and will be interpreted in English. Translations of this privacy policy are for reference purposes only. If there are any discrepancies between the English version and any translated version, the English version of the privacy policy shall prevail.

1. Terms

In this privacy policy, the following terms are used:

  • "Activity" refers to the tours, attractions, or travel experiences offered by activity providers via the Your City Guide platform.

  • "Activity Provider" means the provider of tours, attractions, or travel experiences offered on the Your City Guide platform.

  • "GDPR" refers to the General Data Protection Regulation (EU) 2016/679.

  • "Your City Guide" refers to the booking platform operated by Your City Guide, accessible through www.yourcityguide.fi, associated websites, partner sites, apps, tools, platforms, devices, or other services.

  • "Personal Data" means any information that relates to an identified or identifiable natural person.

2. Data Controller and Contact Information

The data controller responsible for processing your personal data when using Your City Guide’s services is:

Nparts Ltd.
Address: Sipolantie 29, 96100 Rovaniemi, FINLAND
Contact: You can find our contact form https://www.yourcityguide.fi/pages/contact

Please note that the data processing carried out by activity providers related to the booked activity is outside the control of Your City Guide and is subject to the activity provider’s own privacy policy. Activity providers act as independent data controllers.

3. Data Processing Activities

Automatic Data Collection

When you visit the Your City Guide platform, we automatically collect the following information. This data is stored separately from any other information you may send us:

  • URL of the page visited

  • Date and time

  • Information about your device and device settings (e.g., operating system, internet browser, app version, language settings, app crashes, and other system behavior)

  • Information about clicks and pages shown to you

We collect this information to ensure the proper operation and security of our platform and to prevent fraudulent activity based on our legitimate interests.

4. Customer Service

If you contact our customer service team or interact with us through other means, such as through our social media channels, your request will be handled by Your City Guide’s team. The team collects contact information such as First Name, Last Name, Email Address, Phone Number, Order Number, and Nationality.

5. Booking Functions

5.1 Activity Providers

When you book an activity via the Your City Guide platform, we collect the information necessary for the organization and execution of the activity. This typically includes your first and last name, email address, phone number, number of participants, booking date and time, and details of the booked activity. Depending on the activity, we may also request additional information such as nationality or the age of participants. We use this personal data to provide our services to you, particularly to complete and manage your booking in accordance with Article 6(1)(b) of the GDPR. If necessary, we will transfer this information to the activity provider responsible for the activity. The activity provider processes your personal data in accordance with their own privacy policy and acts as an independent data controller. If the transfer of data outside the European Economic Area is necessary, it will be based on Articles 49(1)(b) and (c) of the GDPR.

5.2 Booking Confirmations

To keep you updated about your bookings, we will send you booking confirmations, reminders, and updates regarding your upcoming bookings (e.g., changes in the time or meeting location). Booking confirmations are sent to your email address. In sending booking confirmations, we process your personal data as necessary to provide our services (under Article 6(1)(b) of the GDPR).

6. Payments

We offer various payment methods for paying for your booked activity. Depending on the chosen payment method, we process your personal data as described below to facilitate the payment transaction. This processing is necessary for fulfilling our contractual obligations under Article 6(1)(b) of the GDPR.

6.1 Payment Services (PayPal, Stripe)

If you choose to process your payment through payment services, we will receive confirmation of your payment. We may also receive billing and contact information, such as the email address associated with your payment method. Our payment service providers act as data controllers when offering payment services to you and may also act as processors on our behalf when processing payments as requested. For data processing purposes, the relevant privacy policy of the payment service provider will apply. Your City Guide currently collaborates with the following payment service providers:

  • PayPal Inc. (”Paypal”): https://www.paypal.com/us/legalhub/paypal/privacy-full
  • Stripe Payments Europe Limited (”Stripe”): https://stripe.com/de/legal/privacy-center

6.2 Payment by Invoice (30 days)

If you pay by invoice, we will transfer the information to Klarna Bank AB (publ) ("Klarna"). Klarna uses this information initially for credit assessment and, if necessary, for processing payments. Credit assessments may include probability scores (points), calculated using scientifically recognized mathematical-statistical methods, which also include address data. For more information on how Klarna processes personal data, see https://www.klarna.com/international/privacy-policy/

7. Cookies and Tracking Technologies

We use so-called cookies and other web tracking technologies to provide certain features on our website and to optimize the use of our website and applications, or to implement our marketing and advertising strategies.

We specifically use the following cookies and tracking technologies (unless other cookies are mentioned in this privacy policy or in the cookie consent):

  • Session Cookies: These are needed to store certain technical data during your visit to our website, such as whether items are in your shopping cart.

  • Persistent Cookies: These are needed to store data after the browser session ends, should you wish.

  • Tracking Pixels: These can be used to retrieve data from your device, such as device type, operating system, IP address, and the time of your visit. They are also used to offer and read cookies in your browser or to trigger cookie placement.

  • Scripts: These are small computer programs embedded on our website to support various functions (security features, interactive features, etc.). They may also be used for analytical or advertising purposes. A script might collect information about how you use our website, such as which pages you visit or what you search for.

  • Tracking URL Addresses: These are links with unique identifiers used to track which website you came from to our website or app.

  • Software Development Kits (SDKs): These are part of the app’s source code, and unlike browser cookies, SDK data is stored in the app’s storage. They are used for analyzing app usage, sending tailored push notifications, or sharing app data with third parties. For this purpose, they store unique identifiers related to your device, such as device ID and IP address, as well as internal app activity and web location.

We classify cookies and other tracking technologies into the following categories:

  • Strictly Necessary Technologies: These are technologies that are required for the operation of our websites and apps, and they must be enabled for you to use our services.

  • Analytical Technologies: These measure and track the usage of our website and apps. We use this data to improve our website, apps, and services.

  • Marketing Technologies: Your City Guide and other trusted partners use these to collect data on user paths both on the website and app to deliver relevant sponsored content about our products and to implement our marketing and advertising strategies.

For more detailed information about each category and to provide or withdraw your consent for the use of analytical or marketing technologies, please visit the "Cookie and Marketing Preferences" link in the footer of our website or the "Privacy Settings" section in the app menu.

Using the tool, you can activate or deactivate cookies, tracking devices, SDKs, and other technologies used on our website and in the Your City Guide app. You can browse through different technology categories and find detailed information about each group, as well as additional information about third parties with whom Your City Guide may share your data. You can choose to enable or disable each category separately.

Your preferences are remembered across different devices and platforms (website and apps): for example, when you accept or decline all non-essential tracking technologies using this tool while navigating the website, your choice is remembered through a unique identifier and non-essential tracking technologies are automatically activated or deactivated when you use the Your City Guide app. You can withdraw your consent at any time through our consent management system.

8. Customer Research

We use Microsoft Clarity's ("Clarity") heatmapping services. These services help us identify areas on our website where visitors frequently move the mouse or click, highlighting areas of interest. Data collection is limited to certain pages and a selected number of random visits. The record is retained for 365 days and then automatically deleted. We process this data based on your consent (Article 6(1)(a) of the General Data Protection Regulation). Clarity respects general "Do Not Track" requests. More information on how Clarity processes personal data can be found https://clarity.microsoft.com/privacy

9. Marketing and Remarketing Services

We use the following marketing and remarketing services. We use these services based on your consent (Article 6(1)(a) of the General Data Protection Regulation). You can view and withdraw your consent at any time by changing the settings in the "Cookie and Marketing Settings" section of the footer of our website or the "Privacy Settings" section of the app menu. This will not affect the legality of processing carried out before your consent withdrawal.

9.1 Google Services

We use services from Google Ireland Limited ("Google"). Google may process personal data in countries outside the European Economic Area, particularly in the United States. Google participates in the EU-U.S. Privacy Shield, the UK-EU-U.S. Privacy Shield Extension, and the Swiss-U.S. Privacy Shield to ensure that all transferred personal data is properly protected. For more information on how Google processes personal data, see https://policies.google.com/privacy?hl=en

9.2 Google Analytics

If you have given consent, we may use the Google Analytics web analytics service. Google Analytics collects pseudonymized data on the usage of our website, including your truncated IP address. Google uses this information to analyze website and app performance. Google Analytics retains your data for up to 26 months. After this period, the data is deleted and only aggregated statistics are retained.

You can withdraw your consent at any time and disable Google Analytics using the browser add-on. You can also withdraw your consent via the consent management system. This will not affect the lawfulness of processing carried out before the withdrawal.

9.3 Google Campaign Manager, Display & Video 360, Google Ads

If you have given consent, we use Google's advertising products. To improve your advertising experience, we analyze the usage of our website and app through remarketing cookies, customer identifiers, server-side connections, or software development kits (SDKs). This helps us understand your interests so we can show you more relevant ads for our products when you visit other websites in the Google Ads Network (including Google Search, YouTube, and other websites maintained by Google, its subsidiaries, and its ad partners). To enable this personalized advertising, we share certain data with Google and its advertising partners. Further processing will occur only if you consent to Google linking your browsing history to your Google account and using your Google account information to personalize ads you see online. If you give this consent, Google links your data with Google Analytics data to create targeted advertising groups. In this process, Google temporarily links your personal data with Google Analytics data to form these groups.

Remarketing cookies are automatically removed once they are no longer needed for the purposes for which they were collected or used.

You have the following options for Google Ads:

  • You can disable Google's personalized ads (see https://myadcenter.google.com/personalizationoff?hl=en )
  • You can disable personalized ads on a device-specific basis (see https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=en-GB&visit_id=638654327866390437-3954241628&rd=1#mob&zippy=%2Cmobile-device )
  • You can disable personalized ads in your browser (see https://optout.networkadvertising.org/?c=1 )

9.4 Meta Services (Facebook, Instagram)

Käytämme Meta Platforms Ireland Limitedin (" Meta ") palveluita alla kuvatulla tavalla.

We use services from Meta Platforms Ireland Limited ("Meta") as described below.

Meta may process personal data in countries outside the European Economic Area, particularly in the United States. Meta participates in the EU-U.S. Privacy Shield, the UK-EU-U.S. Privacy Shield Extension, and the Swiss-U.S. Privacy Shield to ensure that all transferred personal data is properly protected. For more information on how Meta processes personal data, see https://www.facebook.com/privacy/explanation

We share data from some of your interactions with Your City Guide with Meta to show you more relevant ads or help find similar audiences. The data you share also helps us track and analyze the success of our marketing campaigns to optimize the effectiveness of the ads. Your City Guide and Meta are joint controllers for this technology.

If you have given consent, Meta pixel and server-side connections are used on our website and app to send data to Meta. We track when you perform certain actions on our website and apps, as well as usage data (such as URL, referrer URL, IP address, device and browser properties, and timestamp), and send this to Meta associated with anonymized identifiers. If available, your Facebook ID is sent. Meta uses this information to understand which ad you clicked, to measure the effectiveness of certain ads, and to provide us with this data in an aggregated form. If you have a Facebook profile and log in, you may be shown targeted, personalized ads on Facebook based on the data sent. Meta removes the data of users who do not have a Facebook or Instagram profile without using it.

10. CRM System

To manage our customer relationships, we store your personal data in our CRM system. This allows us to respond to inquiries and send contextual advertising within permissible limits. The processing in this context is based on our legitimate interest in managing customer relationships, Article 6(1)(f) of the GDPR. For this purpose, we use the services of Pipedrive ("Pipedrive"). Pipedrive may process personal data in countries outside the European Economic Area, particularly in the United States. Pipedrive is certified under the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield, ensuring that all transferred personal data is properly protected. If you give consent (Article 6(1)(a) of the GDPR) through our "Cookie and Marketing Settings" or the "Privacy Settings" section in the app menu, we will send you newsletters, push notifications, or in-app messages based on your interests and your use of our website. For more information on how Pipedrive processes personal data, see https://www.pipedrive.com/en/privacy

11. Personalization of Website Content

We also process your data to display personalized content on our website. The legal basis for this is our legitimate interest in showing you relevant tours and activities, Article 6(1)(f) of the GDPR.

12. Sharing of Data

Edellä kuvattujen tapausten lisäksi henkilötietojasi luovutetaan ilman nimenomaista etukäteistä suostumustasi vain seuraavissa tapauksissa:

  • In addition to the cases described above, your personal data is disclosed without explicit prior consent only in the following circumstances:

    If it is necessary to investigate the illegal use of our services or for legal prosecution, personal data may be transferred to law enforcement authorities and, if necessary, to third parties who have suffered damage. However, this will only occur if there is specific evidence of illegal or fraudulent activity. Data transfer may also occur if it serves the enforcement of terms of service or other agreements. We also have a legal obligation to provide data to certain authorities upon request. These include law enforcement agencies, authorities prosecuting administrative offenses involving fines, and tax authorities. This data is shared based on our legitimate interest in combating fraud, prosecuting crimes, and securing, presenting, and enforcing claims, provided that your rights and interests in protecting your personal data are not overridden, based on Article 6(1)(f) of the GDPR or Article 6(1)(c) based on a legal obligation.

    We share personal data with auditors, accounting service providers, lawyers, banks, tax advisors, and similar entities to the extent necessary for providing our services (Article 6(1)(b) of the GDPR) or for proper business operations (Article 6(1)(f) of the GDPR) or when we are required to do so (Article 6(1)(c) of the GDPR).

    If cooperation with our partners requires it, we may share booking data with our partners if these events are related to advertising content offered on their websites or apps. This sharing is based on our legitimate interests to measure the effectiveness of certain partnerships and campaigns or to pay our partners corresponding compensation (Article 6(1)(f) of the GDPR).

    We use third-party companies and external service providers ("processors") for providing our services. In such cases, personal data is transferred to these processors to continue processing. These processors are carefully selected and regularly reviewed to ensure that your rights and freedoms are protected. Processors may only use the data for the purposes we define, and we are contractually obligated to process your data solely in accordance with this privacy policy and the German data protection laws. Data transfer to processors is based on Article 28(1) of the GDPR. We ensure through contracts that your personal data is processed in countries outside the EU/EEA only if a decision on the adequacy of data protection (Article 45 of the GDPR) guarantees a certain level of protection or other appropriate safeguards (Article 46 of the GDPR), such as standard contractual clauses, are in place for such transfers to third countries.

    As part of the development of our business, Your City Guide (Nparts Ltd.) may change its structure, such as through changes in legal form, the establishment, acquisition, or sale of subsidiaries, parts, or components of the business. In such business transactions, customer data will be transferred together with the transferred part of the business. Whenever personal data is transferred to third parties to the extent described above, we ensure that this occurs in accordance with this privacy policy and applicable data protection laws. The transfer of personal data is justified as we have a legitimate interest in adapting our business structure as needed to economic and legal circumstances (Article 6(1)(f) of the GDPR).

13. Deletion of Your Data

We will delete or anonymize your personal data as soon as it is no longer needed for the purposes for which we collected or used it as described above. We will continue to retain your data if we have a legal obligation to do so or if the data is needed for longer periods for criminal prosecution or for securing, presenting, or enforcing legal claims.

If data must be retained for legal reasons, processing will be restricted. The data can no longer be used thereafter.

You can contact our data protection team by sending an email to: info (at) yourcityguide.fi and request the deletion of your data.