Privacy policy

1 Data Controller
& Espoo Theatre
Business ID: 0172494-6
Address: P.O. Box 10665, 02070 Espoo City

2 Contact Person
Karoliina Kiviluoto, p. 045 728 4306

3 Register Name
Customer Register

4 Purpose of Processing Personal Data
The primary basis for processing personal data is the customer relationship between the customer and & Espoo Theatre. Processing of personal data may also be based on the customer's consent or a mandate given by the customer to the theatre.

Personal data is processed for the following purposes:
• Producing, developing, and monitoring theatre services, as well as implementing customer service.
• Managing and developing customer relationships, personalizing services.
• Implementing customer communication and marketing, as well as managing contact history.
• Processing and responding to customer feedback.
• Handling, responding to, and paying compensation claims and reimbursement requests.
• Analyzing and classifying the customer base for targeted communication.
• Monitoring and compiling statistics for electronic service channels (such as online and mobile services) to improve services, for marketing purposes, and to facilitate transactions.

5 Register Data Content
The following information about the customer may be stored:
• Name
• Date of birth
• Usernames and customer identifiers
• Gender
• Language
• Address
• Phone number(s)
• Email address
• Information about the customer's employer, position, or role in the organization if the customer represents an organization
• Service, sales, payment, and event information
• Usage data for various service channels, such as internet and mobile services, including log and service event data and cookies required for combining page loads.
• Information provided by the customer to personalize services and facilitate transactions.
• Analysis and grouping information about the customer.
• Consents and prohibitions for direct marketing.
• Information related to the implementation of direct marketing and customer communication.
• Information obtained from external sources, such as the Population Information System (VTJ) address.
• Information related to data processing, such as log data.
• Information related to customer feedback and responses.

6 Regular Data Sources
Information related to the customer is primarily collected directly from the customer during order and registration, when using and purchasing services, in the "My Account" section of the internet service, during customer service events, and directly from the customer. Customer-related information is also generated in & Espoo Theatre's systems during the use of services. Data is also updated from the Population Information System or other similar external sources.

7 Regular Disclosures of Data
Customer register data is only used by & Espoo Theatre, except when & Espoo Theatre uses an external partner to provide the service. In ticket sales, & Espoo Theatre's ticket sales partner is Lippupiste Oy. Lippupiste Oy uses personal data for its own purposes in connection with providing services, to the extent that the information obtained through ticket sales is stored in the ticket sales partner's own ticket sales system and customer register, and the ticket sales partner processes personal data for its own commercial purposes. Personal data may also be disclosed to authorities as required by law.

8 Transfer of Data Outside the EU or EEA
Personal data may be transferred outside the territory of EU Member States or the European Economic Area if it is necessary for the purposes of processing the personal data mentioned above or for the technical implementation of data processing. In such cases, the transfer of data complies with the requirements of data protection legislation.

9 Principles of Register Protection
Personal data is properly protected. The data controller collects information in databases that are protected by firewalls, passwords, and other technical means. The databases and their backups are located in locked and guarded premises, and only certain pre-designated individuals have access to the information. The use of the register by & Espoo Theatre and other ticket resellers requires a user ID granted by the register's data controller. The data controller also determines the level of access granted to the user. In addition, the data controller has contractually ensured that the partner processing personal data on its behalf is committed to protecting personal data, including the actions of its employees. The register's data is located in systems and servers maintained by the theatre. Users of the register have a personal username and password for logging in and verifying their identity.

10 Right to Inspection and Correction
Everyone in the register has the right to inspect and correct the information stored in the register. Requests for inspection and correction should be addressed in writing to the register maintainers by mail or email at info@espoonteatteri.fi.

11 Right to Request Data Deletion
Everyone in the register has the right to request the deletion of information about them in the register. Requests for deletion should be addressed in writing by mail or email to the register maintainers at info@espoonteatteri.fi.

12 Other Rights Related to the Processing of Personal Data
The data subject has the right to prohibit the processing of personal data for direct advertising and direct marketing purposes.

13 Use of Cookies
& Espoo Theatre collects information about the user's terminal device using cookies and other similar technologies, such as browser local storage. A cookie is a small text file that the browser saves to the user's terminal device. Cookies often contain an anonymous, unique identifier that allows us to identify and count browsers visiting our site.

14 Data Collection by Third Parties
Third parties refer to external entities, such as advertisers, ad networks, and providers of measurement and tracking services. These third parties may set cookies on the user's terminal device when the user visits our services, for example, to provide targeted advertising or to compile visitor statistics for different sites. Since the user's browser then requests advertisements set by a third party from a server outside & Espoo Theatre, these third parties may view, modify, or set their own cookies as if the user were on their sites. We strive, through contractual arrangements, to ensure that these third parties comply with applicable legislation and industry self-regulation guidelines. Our services may use social plugins, such as Facebook's like button. Users can review the terms of use for social services on each service. We recommend reviewing the privacy conditions of each site.

15 Contact
For all questions related to this register description and situations related to the exercise of the data subject's rights, contact the person mentioned in section 2. & Espoo Theatre may, if necessary, ask the data subject to clarify their request in writing. The data subject must prove their identity before taking action. We will provide the data subject with information about the measures we are taking within one month (excluding the theatre's summer break).

16 Changes to the Privacy Policy
We continuously develop our services and reserve the right to change this privacy statement by notifying it in our services. Changes may also be based on changes in legislation. We recommend regularly reviewing the content of the privacy statement.