Privacy Statement

Published: 24 January 2024

Dance House Helsinki is committed to protecting the privacy of its customers and partners. This privacy statement explains what kinds of personal data are collected, how the data are processed, and what rights individuals have concerning their personal data.

1. CONTROLLER AND CONTACT PERSON

Tanssin talo säätiö sr, postal address: Tallberginkatu 1 / 122, 00180 Helsinki, Finland
Contact person for matters regarding personal data:
Saara Oranen, saara@tanssintalo.fi, +358 44 566 1903

2. NAME OF THE REGISTER

Dance House Helsinki Customer Register

3. PURPOSE AND LEGAL BASIS FOR DATA PROCESSING

Personal data are processed based on the customer relationship between the individual and Dance House Helsinki, for example, when the person has purchased or reserved tickets for events, subscribed to the newsletter, contacted customer service, participated in marketing campaigns, or applied for or registered as a member of Dance House Helsinki events.

In some cases, data processing is based on the individual's consent. For customers who have purchased tickets and/or used our services, data is processed based on Dance House Helsinki’s legitimate interest arising from the customer relationship.

Data may be processed for the following purposes:

To provide, develop and monitor Dance House Helsinki’s services
To handle customer service requests, deliver ordered products and services, and maintain the customer relationship
To manage customer communication and marketing, as well as contact history
To process and respond to customer feedback
To handle, respond to and process compensation or reimbursement requests
To analyse and categorise the customer base
To monitor and compile statistics on the use of digital service channels (e.g. online and mobile services) for service development, marketing purposes and to facilitate user experience

4. DATA CONTENT AND RETENTION PERIOD

Depending on the customer service situation, the following data may be recorded:

Name
Date of birth
Language
Address
Telephone number(s)
Email address
Information on the customer’s employer and role when representing an organisation
Service, sales, payment and event information
Usage data from different service channels, such as online and mobile services, including logs and transaction details, customer segmentation and analysis
Direct marketing consents and prohibitions
Data related to the implementation of direct marketing and customer communication
Metadata related to data processing, such as log information
Data related to feedback and responses

Customer data is retained for as long as there is a valid legal basis for processing in accordance with current legislation.

5. REGULAR SOURCES OF INFORMATION

Information is primarily collected directly from the customer during booking, registration, purchases, service usage, customer service interactions, and other direct contacts. Data may also be updated using publicly available sources.

6. PRINCIPLES OF DATA SECURITY

No manual records are kept.

Collected data is stored in IT systems protected by firewalls, encryption technologies, restricted access control and user rights. Only designated employees and authorised individuals who need the data to perform their duties—and who are bound by confidentiality—have access to the register. Access is granted via personal usernames and passwords.

7. REGULAR DATA DISCLOSURES AND TRANSFERS OUTSIDE THE EU/EEA

As a rule, we do not disclose personal data to third parties. However, data may be shared with event organisers regarding individuals who have purchased tickets for that organiser’s event.

Personal data may be transferred outside the European Union or European Economic Area if required for technical implementation of services or communication. In such cases, we ensure adequate protection by means such as data processing agreements that comply with data protection legislation.

8. RIGHTS OF THE DATA SUBJECT

Data subjects have the rights guaranteed by data protection legislation.

They have the right to receive confirmation as to whether their data is being processed and to inspect and access their personal data. Upon request, they may receive the data in writing or electronically.

They have the right to request the correction of inaccurate or incorrect information. They may also request the erasure of their data as stipulated by applicable legislation. We will also correct, complete or delete inaccurate, unnecessary, incomplete or outdated data on our own initiative when detected.

They may request the transfer of their data to another controller in accordance with applicable law.

They may also request restrictions on data processing when, for example, the accuracy of data is disputed or a deletion request is under consideration.

They have the right to object to specific types of processing, including the use of data for direct marketing purposes.

Requests related to data subject rights can be submitted in person, in writing or electronically to the contact person mentioned in this statement. Identity will be verified before disclosing any information. Requests will be processed within a reasonable time and, when possible, within one month of verifying the request and identity.

If a request cannot be fulfilled, we will inform the data subject in writing. We may refuse deletion or other requests if required to do so by legal obligation or justified legal interest.

Consent for electronic direct marketing can be withdrawn by contacting the designated contact person. Additionally, the data subject may unsubscribe from our email list at any time by clicking the link in the email.

If a data subject believes their data has been processed in violation of current legislation, they have the right to file a complaint with the Data Protection Ombudsman: www.tietosuoja.fi

9. UPDATES TO THE PRIVACY STATEMENT

As we develop our services and legislation evolves, this privacy statement may be updated. We recommend reviewing it regularly.