en Privacy policy
Privacy statements in accordance with the Data Protection Act and the European Union’s General Data Protection Regulation
Newsletter Subscriber Register
Event Service Customer Register
Newsletter Subscriber Register
Controller
Theatre Museum, Cable Factory, Tallberginkatu 1 / 73, 00180 Helsinki
Business ID: 0222620-6
Person responsible for register matters
Ilona Kemppainen, Communications Officer, ilona.kemppainen@teatterimuseo.fi
Name of the register
Theatre Museum Newsletter Subscriber Register
Purpose of the register
The purpose of the register is to deliver the Theatre Museum newsletter to its subscribers.
Legal basis for processing personal data (EU General Data Protection Regulation, Article 6)
A) The data subject has subscribed to the newsletter via the Theatre Museum’s online form, by email, or in person at the museum or an event where the museum is present. The lawful basis for processing personal data is the consent given by the data subject (GDPR, Article 6, Section 1(a)).
Consent remains valid until the data subject cancels the subscription or newsletter delivery is discontinued. The subscription can be canceled at any time. When the subscription is canceled or newsletter delivery ends, personal data will be deleted.
B) The newsletter is also sent to members of the Theatre Museum’s governing bodies and stakeholders. In this case, the processing of personal data is necessary for performing a task carried out in the public interest (GDPR, Article 6, Section 1(e)) and for pursuing the legitimate interests of the controller (GDPR, Article 6, Section 1(f)). The data subject has the right to opt out of receiving the newsletter at any time, after which the data will be deleted.
Data contained in the register
First name, last name
Email address
Regular sources of data
The data subject provides the information when subscribing to the newsletter (A). Data is also collected through the Theatre Museum’s own activities (B).
Disclosure of data
Personal data of newsletter subscribers is not disclosed to third parties except for database storage and newsletter delivery:
Personal data is stored in the contact management system Gruppo, provided by Gruppo Software Oy (Business ID: 2190176-4). Gruppo Software acts as a data processor for storage purposes. Data is stored in a server room located in Finland, accessible only to technical maintenance staff.
The newsletter service is provided by the reputable company Campaign Monitor (Australia), whose service complies with EU data protection regulations according to their statement. Campaign Monitor does not disclose data to third parties and uses it only to deliver emails defined by the Theatre Museum.
Principles of register protection
The controller’s and Gruppo Software Oy’s systems and files are protected by standard technical security measures. Access to the register requires a personal username and password, granted only to staff whose position and duties require such access.
The register is not maintained in manual form. The controller’s premises are protected by access control.
Right of access
Every person in the register has the right to check the data stored about them. Requests should be sent by email to the person responsible for register matters.
Right to rectification
Every person in the register has the right to request correction of inaccurate data. Requests should be sent by email to the person responsible for register matters.
Customer Feedback Register
Controller
Theatre Museum, Cable Factory, Tallberginkatu 1 / 73, 00180 Helsinki
Business ID: 0222620-6
Person responsible for register matters
Meri Eerola, meri.eerola@teatterimuseo.fi, +358 40 192 2303
Name of the register
Theatre Museum Customer Feedback Register
Purpose of the register
The purpose of the register is to respond to customer feedback and handle possible complaints. Feedback may also be used to improve the Theatre Museum’s operations, in which case the data is anonymized.
Legal basis for processing personal data (EU General Data Protection Regulation, Article 6)
A) The data subject has sent feedback to the Theatre Museum either by email, via an online form, or by filling out a feedback form at the museum and provided their contact details. The lawful basis for processing personal data is the consent given by the data subject (GDPR, Article 6, Section 1(a)).
Consent remains valid until the feedback matter has been fully processed with the data subject. Personal data will be destroyed after the retention period. The feedback itself may be stored in anonymized form.
Data contained in the register
First name, last name (if provided)
Email address or phone number (if provided)
Feedback given
Regular sources of data
The data subject provides the information when giving feedback.
Disclosure of data
Personal data is not disclosed to third parties.
Electronically collected personal data is stored in Microsoft 365 Outlook email application.
Principles of register protection
The controller’s information systems and files are protected by standard technical security measures. Access to the register requires a personal username and password, granted only to staff whose position and duties require such access.
Feedback forms filled out at the museum are stored in manual form in a locked space, accessible only to persons whose position and duties require such access. Access control is in place.
Right of access
Every person in the register has the right to check the data stored about them. Requests should be sent by email to the person responsible for register matters.
Right to rectification
Every person in the register has the right to request correction of inaccurate data. Requests should be sent by email to the person responsible for register matters.
Event Service Customer Register
Controller
Theatre Museum, Cable Factory, Tallberginkatu 1 / 73, 00180 Helsinki
Business ID: 0222620-6
Person responsible for register matters
Meri Eerola, meri.eerola@teatterimuseo.fi, +358 40 192 2303
Name of the register
Theatre Museum Register of Event Service Forms and Email Inquiries
Purpose of the register
The purpose of the register is to respond to inquiries regarding the Theatre Museum’s event services submitted via form or email.
Legal basis for processing personal data (EU General Data Protection Regulation, Article 6)
A) The data subject has requested a quote for the museum’s event services either via the Theatre Museum’s online form or by email. The lawful basis for processing personal data is the consent given by the data subject (GDPR, Article 6, Section 1(a)).
Consent remains valid until the inquiry process ends, either with a negative response to the quote or after the event has taken place and the process is completed. The process ends when the data subject has paid the invoice for the event and any complaints have been handled. Invoice data is retained in accordance with accounting legislation. Personal data will be destroyed after the retention period.
Data contained in the register
First name, last name
Email address, street address, phone number
Regular sources of data
The data subject provides the information either by email or by filling out the online contact form for event services.
Disclosure of data
Personal data is not disclosed to third parties.
Personal data is stored in Microsoft 365 Outlook email application and, for forms, in the website’s backend system.
Principles of register protection
The controller’s information systems and files are protected by standard technical security measures. Access to the register requires a personal username and password, granted only to staff whose position and duties require such access.
The register is not maintained in manual form. The controller’s premises are protected by access control.
Right of access
Every person in the register has the right to check the data stored about them. Requests should be sent by email to the person responsible for register matters.
Right to rectification
Every person in the register has the right to request correction of inaccurate data. Requests should be sent by email to the person responsible for register matters.
Group Visit Customer Register
Controller
Theatre Museum, Cable Factory, Tallberginkatu 1 / 73, 00180 Helsinki
Business ID: 0222620-6
Person responsible for register matters
Milla Kortemaa, milla.kortemaa@teatterimuseo.fi, +358 40 192 2305
Name of the register
Theatre Museum Register of Group Visit Forms and Email Inquiries
Purpose of the register
The purpose of the register is to respond to inquiries regarding group visits to the Theatre Museum submitted via form or email.
Legal basis for processing personal data (EU General Data Protection Regulation, Article 6)
A) The data subject has requested a quote for a group visit to the museum either via the Theatre Museum’s online form or by email. The lawful basis for processing personal data is the consent given by the data subject (GDPR, Article 6, Section 1(a)).
Consent remains valid until the inquiry process ends, either with a negative response to the quote or after the event has taken place and the process is completed. The process ends when the data subject has paid the invoice for the event and any complaints have been handled. Invoice data is retained in accordance with accounting legislation. Personal data will be destroyed after the retention period.
Data contained in the register
First name, last name
Email address, street address, phone number
Regular sources of data
The data subject provides the information either by email or by filling out the online form (workshop booking inquiry).
Disclosure of data
Personal data is not disclosed to third parties.
Personal data is stored in Microsoft 365 Outlook email application and, for forms, in the website’s backend system.
Principles of register protection
The controller’s information systems and files are protected by standard technical security measures. Access to the register requires a personal username and password, granted only to staff whose position and duties require such access.
The register is not maintained in manual form. The controller’s premises are protected by access control.
Right of access
Every person in the register has the right to check the data stored about them. Requests should be sent by email to the person responsible for register matters.
Right to rectification
Every person in the register has the right to request correction of inaccurate data. Requests should be sent by email to the person responsible for register matters.