EN

Firmahupi Customer Register and Privacy Statement

  1. Frontpage
  2. Privacy policies
  3. Firmahupi Customer Register and Privacy Statement

Firmahupi Customer Register and Privacy Statement

This is the Firmahupi Customer Register and Privacy Statement of Linnanmäki, in accordance with the EU General Data Protection Regulation (GDPR).
Prepared on April 25, 2018. Last updated on March 16, 2023.

1. Data Controller

Children’s Day Foundation sr / Linnanmäki 
Tivolikuja 1, 00510 Helsinki
Phone: +358 10 5722 200
Business ID: 0116659-8

2. Contact Person for Register Matters

Lotta Rinne
Tivolikuja 1, 00510 Helsinki
Phone: +358 10 3248 501
Email: [email protected]

3. Name of the Register

Linnanmäki Firmahupi Customer Register

4. Legal Basis and Purpose of Personal Data Processing

The legal basis for processing personal data under the EU General Data Protection Regulation is:

  • The individual’s consent
  • The data controller’s legitimate interest (customer relationship)

The purpose of processing personal data is to maintain customer relationships, communicate with customers, conduct marketing activities, organize prize draws, and collect feedback.

Personal data is processed as part of the customer relationship, considering both the customer's and LPS's rights and obligations regarding data processing.

Personal data is also processed for LPS’s internal statistical purposes.

5. Contents of the Register

The register may contain the following personal data:

  • Name, position, company/organization
  • Contact details (phone number, email address, postal address)
  • Website addresses
  • Details of subscribed services and their changes
  • Billing information
  • Other information related to the customer relationship and ordered services

For newsletter subscriptions, the register contains:

  • Name
  • Title
  • Company/organization name
  • Email address

For service inquiries, the register contains:

  • Name
  • Company/organization name
  • Phone number
  • Email address
  • Event details

For prize draws and feedback submissions, the register contains:

  • Name
  • Title
  • Company/organization name
  • Phone number
  • Email address

Personal data is stored for the duration of the Linnanmäki Firmahupi newsletter service and customer register. Data can be deleted upon the customer’s request.

Newsletter subscriptions can be canceled at any time via the link provided at the bottom of each newsletter.

Service inquiries can be canceled by contacting the register’s contact person.

IP addresses of website visitors and cookies necessary for service functionality are processed based on legitimate interest, for example, for security purposes and statistical analysis. If such cookies contain personal data, explicit consent is requested separately for third-party cookies.

6. Regular Data Sources

Personal data is collected from customers through various means, including:

  • Online forms
  • Email, phone, and social media interactions
  • Contracts and customer meetings
  • Other situations where the customer voluntarily provides their information

Contact details of representatives of companies and organizations may also be obtained from public sources, such as websites, directory services, and other businesses.

7. Regular Data Disclosures and Transfers Outside the EU/EEA

Customer register data is not disclosed to third parties unless requested in writing by the customer or required by Finnish authorities.

Data is never transferred outside the EU or the European Economic Area (EEA).

8. Principles of Register Protection

Personal data is handled with care, and data security measures are in place to protect digital records. If data is stored on internet servers, both physical and digital security measures are appropriately ensured.

The data controller ensures that stored information, server access rights, and other security-critical personal data are handled confidentially and only by employees whose job descriptions require such access.

9. Right to Access, Correct, and Delete Data

Every individual in the register has the right to:

  • Inspect their stored data
  • Request corrections to inaccurate or incomplete data
  • Request the deletion of their personal data (“right to be forgotten”)

Requests for data inspection, correction, or deletion must be sent in writing to the data controller. The data controller may request verification of the requester’s identity.

The data controller responds within the timeframe stipulated by the EU General Data Protection Regulation (GDPR) (typically within seven business days).

10. Participation in Prize Draws, Competitions, and Customer Events

When participating in a Firmahupi prize draw, competition, or customer event, customers provide the required information via a form. This data is processed according to this privacy statement, with a few exceptions:

  • Customers cannot modify or supplement the information they have provided themselves. However, they can contact the register’s contact person regarding their data.
  • The data is processed only for the purpose of organizing the draw, competition, or event and for no other purpose.
  • The collected data is stored only for the necessary duration of the draw, competition, or event, after which it is deleted from the relevant system.