In accordance with the Personal Data Act, the person must be notified when his or her personal data is entered into a personal data file. Personal data includes, for example, name and address. The data subject must also be notified of the purpose of personal data processing, regular disclosure of data, and the rights of the data subject.
All information that you submit to Särkänniemi and which enables your identity to be established will be processed in accordance with Särkänniemi’s privacy policies.
Tampereen Särkänniemi Oy
Business ID: 0155085-6
2. Persons responsible for matters related to the personal data file
Heikki Ihanamäki, Chief Sales and Marketing Manager
Tuula Salminen, Data Protection Officer
3. Purpose of personal data processing
Särkänniemi can use the personal data of the data subjects for the following purposes:
Managing customer relations (incl. marketing)
Särkänniemi processes the personal data of data subjects in order to contact them in relation to the products and services of Särkänniemi and to notify data subjects of changes in the said products and services. Särkänniemi can also use the information submitted by data subjects through the website for sending bulletins and marketing messages, requiring that the data subject has given his or her consent to this or there is some other justified reason for the marketing communications.
Sale of products and services
Särkänniemi processes the personal data of data subjects in order to fulfil its obligations under the contact, e.g., to deliver the ordered products.
Developing the operations
Särkänniemi processes the personal data of data subjects in order to maintain and develop its business operations. Information will also be used for research and analysis purposes.
In premises that are covered by Särkänniemi’s CCTV system, the system ensures the safety of the customers and the staff and protects their property.
4. Description of the data subjects and the content of the data file
The data subjects are the customers of Särkänniemi who visit Särkänniemi or Särkänniemi’s website, purchase Särkänniemi’s products, or participate in the development of Särkänniemi’s operations by providing feedback or by participating in customer surveys.
The personal data that will be processed include name and address, telephone number, email address, price group / customer segment (e.g., school, daycare centre, or association), organisation, ordered services/products incl. specified content, payment details of the services/products, details related to payment transactions, and technical online identifiers. In the case of seasonal ticket customers, the processed personal data also includes date of birth, photograph, and, if the holder of the seasonal ticket is under 18 years of age, the name, telephone number, and email address of their guardian. In addition, video material taken and saved by Särkänniemi’s CCTV system in the premises that are covered by the said system and images saved by the on-ride camera system will be processed.
5. Grounds for the processing
The processing of personal data included in the data file is based on a legitimate interest of and a customer relationship with Särkänniemi. Subject to the consent of the customer, the customer register will also be used for the sending of newsletters, event invitations, and bulletins. Personal data will also be processed to ensure that Särkänniemi is able to fulfil its obligations under the contract, e.g., to deliver the products or services ordered by the data subject.
6. Regular sources of information
Sources of information include the information provided by the data subject in connection to registering as a customer, ordering products/services, making a table reservation or providing customer feedback, and orally in connection to the purchase of products or services. Other sources of information include the photography material produced by the CCTV and on-ride camera systems, competition and lottery forms (printed and electronic), social media accounts of people who have participated in lotteries, and any additional information that has been provided by the participants.
Särkänniemi also collects technical online identification data of the visitors to its website. It is not usually possible to identify individual persons from the technical data, but in certain situations this might be possible. In such a situation, also technical data can be considered to be personal data in accordance with valid legislation.
7. Recipients and recipient groups of personal data
Personal data is received and used by persons authorised by Särkänniemi, who manage Särkänniemi’s customer relations as part of their work, process products or services that are subject to a contract, develop the operations of Särkänniemi, or ensure the safety of the customers and staff of Särkänniemi.
Särkänniemi uses third party services in the processing of personal data as regards IT services, for example, in which case Särkänniemi ensures that data is processed in a lawful manner through contracts and by instructing the third parties. Third parties will only process data assigned by and on behalf of Särkänniemi.
8. Regular disclosure and transfer of data to countries outside the EU or the European Economic Area (EEA)
Some of the services used by Särkänniemi for the processing of personal data operate outside the EU or the EEA. In such cases, the transfer will be implemented in accordance with the requirements of data protection legislation.
When a customer purchases a photograph taken by the on-ride camera system, the photograph is transferred to the server of the system supplier (https://photoathome.com/privacy-policy/).
Authorities have the right to receive information based on the law. Such authorities include the police and the customs, border control, and tax authorities.
9. Storage time of personal data
Personal data whose processing is based on a legitimate interest will be stored for a maximum of four (4) years (organisations) or two (2) years (private persons) from the last customer contact. Personal data whose processing is based on a contract will be stored for one (1) year or for the period that is required by the Accounting Act, and personal data related to seasonal tickets is stored for two (2) years after the validity period ends. Personal data whose processing is based on a consent will be stored until the data subject cancels his or her consent.
Exceptional shorter storage periods are applied to a) personal data collected in connection to competitions and lotteries and b) video material saved by the CCTV system, which will be a) deleted/anonymised no later than 3 days after the competition/lottery and b) overwritten 2–3 weeks after filming.
10. Information security
Särkänniemi takes appropriate technical and organisational measures to prevent unauthorised access to the personal data of data subjects and to protect the personal data against loss, misuse, disclosure, and unauthorised modification. Information security measures include, for example, the use of firewalls, data access control and access control systems, and secure operating premises.
If despite these measures a data breach occurs that is likely to have negative impacts on the privacy of the data subject, Särkänniemi will notify the data subject of the data breach as soon as possible.
11. The rights of the data subjects regarding the processing of personal data:
The right to be informed of the processing of one’s personal data and the right to inspect one’s personal data
The data subject has the right to inspect the data concerning themselves that has been saved in the register and to receive a copy of the said data. Requests to inspect the data must be send by email to firstname.lastname@example.org. The data subject must provide, in the inspection request, the data that is necessary to retrieve the said information. Where required, the controller will request additional information in order to identify the data subject.
The reply to the inspection request will be delivered to the person who submitted the inspection request by email, unless the data subject has requested the data to be submitted by some other means.
The right to correct the data
Särkänniemi ensures the quality of the personal data it processes to the best of its ability. Särkänniemi corrects, removes, and supplements any incorrect or unnecessary personal data on its own initiative or following a request of the data subject.
Right to restrict the processing of one’s data
The data subject has the right to request that Särkänniemi restricts the processing of his or her personal data if the data subject considers the personal data to be incorrect, for example. In such a case, the processing will be restricted until the controller has ensured the correctness of the information.
The right to object to the processing of one’s personal data
The data subject has the right to object to the processing of his or her personal data, i.e., request that his or her personal data is not processed at all when the processing is based on a legitimate interest. The data subject always has the right to object to direct marketing by removing his or her name from the direct marketing posting list.
The right to request that data be removed
The data subject has the right to request that his or her personal data be removed from the register. Requests to remove personal data must be sent by email to email@example.com. Requests will be processed and the data subject will be notified of the processing without undue delay within one month from the moment the request is received.