
Legal
Last updated: January 2026
Nexoraecho ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal information when you interact with our website, submit inquiries, or engage with our concierge services. We comply with the European Union's General Data Protection Regulation (GDPR), the Finnish Data Protection Act, and other applicable privacy laws.
We may collect the following categories of personal data:
Your personal data is processed for the following purposes:
We process your personal data on the following lawful bases:
We share necessary booking and preference details only with the relevant partner resort or service provider associated with your inquiry. We may also share data with:
We do not sell, rent, or trade personal information to third parties for marketing purposes.
Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place through Standard Contractual Clauses or equivalent legal mechanisms.
We retain personal information only as long as necessary for the purposes outlined in this policy, or as required by applicable law. Inquiry records are typically retained for up to 24 months unless an active booking relationship exists. Financial records are retained as required by tax law (typically 6 years in Finland).
We implement industry-standard technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), restricted internal access, regular security reviews, and secure data storage practices.
Our website uses cookies and similar technologies to enhance functionality and analyze traffic. For full details, please refer to our Cookies Policy.
Under GDPR and Finnish law, you have the following rights regarding your personal data:
Our services are not intended for individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, please contact us so we can promptly remove it.
Where you have provided consent, we may send curated updates about new resort offerings, seasonal experiences, and concierge services. You may opt out at any time via the unsubscribe link in any email or by contacting us directly.
This Privacy Policy may be updated periodically to reflect changes in legal requirements or our business practices. The effective date will be revised accordingly. We encourage you to review this page regularly.
For privacy-related questions or to exercise any of your rights, please reach out through our contact page. We respond to all legitimate requests within 30 days.