Finlandia-talo

Elements of Experience

Privacy policy

1. DATA CONTROLLER

The data controller according to applicable data protection laws is Finlandia-talo Oy. Finlandia-talo Oy is responsible for ensuring that your personal data is processed in accordance with this statement and applicable data protection laws.

Contact details of the data controller:
Finlandia-talo Oy
Business ID: 2036668-3
Mannerheimintie 13 e, 00100 Helsinki
Phone: +358 (09) 40241
Email: servicepoint@finlandiatalo.fi

Contact person of the data controller:
Minna Sauramaa, Marketing and Communications Director
Phone: +358 (09) 4024 430
Email: minna.sauramaa@finlandiatalo.fi

Data protection responsible party:
Avoki Ltd
Phone: +358 010 8411 169

2. COLLECTION OF PERSONAL DATA

Your personal data may be collected in various ways.

In general, we collect and process personal data that you:

  • Have provided to the data controller when you contact or transact with us, e.g., when you purchase our service, subscribe to our newsletter, or contact us to request an offer or respond to our feedback survey.
  • Arise during the use of services or when filling out a request form on the website.
  • Are obtained from other sources, to the extent permitted by applicable laws, e.g., from the Trade Register, Population Register, Business and Community Information System, or Postal Address System.

You are not required to provide your personal data to us, but if you choose not to, we may not be able to offer our services to you.

We collect and process, for example, the following categories of personal data:

  • Customer relationship-related information, such as name, job title, relationship to the company you represent, and contact details (email, address, and phone number) as well as communication language. Service and order-related information, payment data, invoicing details, marketing consents, and restrictions.
  • Basic information, such as name and email address.
  • Information collected during the use of our website, e.g., data collected via cookies or similar technologies (device ID and type, operating system, and application settings).
  • Other case-specific data based on your consent.

3. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

We collect and process personal data only when necessary for conducting our business, managing customer relationships, and other legitimate commercial purposes.

We process your personal data for the following purposes:

  • Providing services and managing customer relationships: We process personal data primarily to offer and deliver services to you or the company you represent. To do so, we maintain and manage the customer relationship between you or your company and Finlandia-talo. In this case, the processing of personal data is based on the contract between you or your company and the data controller.
  • Marketing: We may contact you to inform you about new service features or to market and sell other services to you. We may also process your personal data for market research and customer surveys. The processing of personal data is based on our legitimate interest in providing information as part of our service and marketing other services to you. You have the right to object to the processing of your personal data for direct marketing purposes at any time (see section 8 of this statement).
  • Service development, data security, and internal reporting: We also process personal data to ensure the security of the service and website, improve the quality of the service and website, and develop the service. We may also compile internal reports based on personal data to manage and develop customer relationships and business appropriately.
  • Compliance with laws: We may process your personal data to fulfill legal obligations or respond to requests from authorities based on legal grounds.
  • Other purposes for which consent has been given: We may process your personal data for other purposes if you have consented to such processing.

4. TRANSFER AND DISCLOSURE OF PERSONAL DATA

We may disclose your personal data to third parties:

  • To the extent permitted or required by law, e.g., to fulfill a data request from an authorized authority.
  • When our partners process personal data on our behalf and according to our instructions. We ensure that personal data is processed appropriately in these cases.

5. TRANSFER OF PERSONAL DATA OUTSIDE THE EU OR EEA

We may transfer personal data outside the EU or the European Economic Area (EEA) when a partner handling the assignment is located outside these regions. In such cases, we ensure appropriate safeguards to protect the rights and freedoms of the data subjects according to applicable data protection laws, such as the EU General Data Protection Regulation (679/2016).

6. COOKIES

We also use cookies and other similar technologies on the website www.finlandiatalo.fi. Cookies are small text files placed on your device to collect and remember useful information, improve the functionality and usability of our website. We may use cookies and other similar technologies for statistical purposes, such as compiling statistics on website usage to understand how users interact with the website and improve the user experience.

You can prevent cookies from being placed, limit their use, or delete them from your browser. Since cookies enable the functionality of our website, limiting their use may affect the usability of the website.

7. STORAGE OF PERSONAL DATA

Personal data is stored only as long as necessary to fulfill the purposes outlined in this statement. Personal data is retained for the duration of the customer relationship. Personal data may also be retained after the end of the customer relationship to the extent permitted or required by applicable law. For example, we may retain personal data to comply with your direct marketing opt-out request. Personal data is deleted when it is no longer necessary for the purposes of the law or for the enforcement of rights or obligations.

8. RIGHTS OF THE DATA SUBJECT

You have the right to access your personal data. You can also request the correction, update, or deletion of your personal data at any time. However, personal data that is necessary for the purposes outlined in this statement or required by law cannot be deleted.

You have the right to object to or restrict the processing of your personal data to the extent required by applicable law. In certain cases, you have the right to transfer the personal data you have provided to us from one system to another, i.e., to receive your personal data in a structured, commonly used, machine-readable format and transfer it to another data controller, in accordance with applicable law. If we process your personal data based on your consent, you have the right to withdraw your consent at any time. After that, we will not process your personal data unless there is another legal basis for doing so. You can exercise your rights by sending a request to the data protection contact mentioned above.

If you believe that the processing of your personal data is not appropriate, you have the right to file a complaint with the supervisory authority.

9. DATA SECURITY

We implement appropriate measures (including physical, digital, and administrative actions) to protect personal data from loss, destruction, misuse, unauthorized access, or disclosure. Personal data is only accessible to those who need it to perform their work tasks. Users are bound by confidentiality obligations.

Please note that even the most appropriate measures cannot prevent all potential data security breaches. In the event of a data security breach involving personal data, we will notify you in accordance with applicable laws.