Privacy Policy

Who we are

Kalakamu is a Finnish fly fishing travel company. Our website is kalakamu.com. The data controller is Tommi Heinonen, [email protected].

What data we collect and why

Contact and inquiry forms — When you send us a message through our website, we collect your name, email address, and the content of your message. We use this to respond to your inquiry. Legal basis: legitimate interest.

Newsletter signup — When you subscribe to our mailing list, we collect your email address. We use Kit (formerly ConvertKit) to manage our newsletter. Legal basis: your consent. You can unsubscribe at any time using the link in every email.

Booking and payment — When you book a trip, your booking and payment are processed through WeTravel. WeTravel collects the personal and payment information necessary to complete your reservation. WeTravel acts as an independent data controller for payment data. See WeTravel's privacy policy for details.

Website analytics — We use Google Analytics 4 (provided by Google Ireland Limited) to understand how visitors use our site: pages viewed, approximate location derived from a truncated IP address, device and browser type, and referring source. The data is aggregated and used only to improve the site. Legal basis: your consent if you are in the EEA, the UK or Switzerland; our legitimate interest elsewhere. See Cookies below for why that differs.

Advertising — We advertise on Google. Advertising cookies let us see which ad brought you here, so we can stop paying for the ones that do not work, and let us show our ads again to people who have already visited the site. This is handled by Google Ireland Limited. We do not sell your data and we do not share it with anyone beyond the advertising platform itself. Legal basis: your consent if you are in the EEA, the UK or Switzerland; our legitimate interest elsewhere. You can object at any time through the “Cookie settings” link in the footer, or by emailing us.

How long we keep your data

We keep contact form messages for up to 2 years. Newsletter subscriber data is kept until you unsubscribe. Booking-related data is kept for the duration required by Finnish accounting and tax law (6 years).

Your rights under GDPR

We are established in Finland, so GDPR governs how we handle your data wherever in the world you live. You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw your consent at any time (e.g., unsubscribe from the newsletter)
• Object to anything we do on the basis of legitimate interest, including analytics and advertising
• Request a copy of your data in a portable format
• Lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Data transfers

Kit (ConvertKit), WeTravel and Google (Analytics and Ads) are US-based services. Your data may be transferred outside the EU/EEA. These transfers are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses.

Cookies

Strictly necessary cookies, needed for the site and the booking checkout to work, are always active. Analytics and advertising are two separate choices.

How you are asked depends on where you are. In the EEA, the UK and Switzerland nothing beyond the necessary cookies is set until you decide: a banner appears on your first visit, and you can accept, keep only the necessary ones, or set each category individually under “Settings”. Everywhere else, analytics and advertising are active by default on the basis of our legitimate interest, and no banner appears. We work out which applies from the country your connection resolves to, and if that cannot be determined we treat you as being in the EEA.

Wherever you are, you can change your choice at any time through the “Cookie settings” link in the footer.

• Necessary — remembering your cookie choices, and running the booking checkout through WeTravel. Always active. Your choices are kept about 6 months; for the checkout, see WeTravel's privacy policy.
• Analytics — Google Analytics, to distinguish visitors and sessions. Kept up to 14 months.
• Advertising — Google Ads, to link a booking back to the ad that produced it. Kept about 3 months.

Changes to this policy

We may update this policy from time to time. The latest version is always available on this page.

Contact

Tommi Heinonen
Kalakamu
[email protected]