Privacy Policy

CONTROLLER

Truescape Oy (Business ID: 3016295-9)
Stenstrandintie 20 B, 02420 JORVAS

Hereinafter Truescape

PERSON RESPONSIBLE FOR REGISTER MATTERS

Jaakko Rytsölä
Phone 020 372 273
Email jaakko.rytsola@truescape.fi

PERSON RESPONSIBLE FOR MYSTEERI INFORMATION SECURITY

Jaakko Rytsölä
Phone 020 372 273
Email: jaakko.rytsola@truescape.fi

NAME OF THE REGISTER

Truescape Oy customer register

LEGAL BASIS AND PURPOSE OF THE REGISTER

The basis for processing personal data is the data subject’s consent to the processing of personal data.

The person gives this consent when making a booking, when purchasing Truescape products from the online store and/or by leaving contact details on the website or at a Truescape or Mysteeri venue with a company employee.

At the same time, they confirm that they are over 16 years of age.

PURPOSE OF USE OF THE REGISTER

The purpose of the register is to maintain Truescape’s customer register and to archive and process customer orders, as well as all matters related to managing the customer relationship. The register is also used to follow up on issues such as lost deliveries. Data may be used to develop Truescape’s operations, for statistical purposes and to produce more personalised, targeted content in our online services. Personal data is processed within the limits permitted and required by the Personal Data Act.

Register data may be used in Truescape’s own registers for targeting advertising without disclosing personal data to third parties (e.g. Facebook). Truescape may also use partners to maintain the customer and service relationship. Some register data may be transferred to a partner’s servers for technical reasons. Data is processed solely for maintaining Truescape’s customer relationship via technical interfaces.

Truescape has the right to publish the information contained in the customer register as an electronic or printed list, unless the customer specifically prohibits this. A list means, for example, mailing labels for direct marketing. The customer has the right to prohibit publication of their data by notifying the register contact person by email at jaakko.rytsola@truescape.fi.

LOCATION OF THE REGISTER

The register is located in several locations.

A-Varaus.fi booking system (Karelia Code Oy, 3499848-9)
TrueStats statistics service (Planeetta Internet Oy, 1753494-9)

Gifti.fi gift card service (Teonos Oy, 2624169-7)

Requests concerning data management or, for example, deletion of one’s own data can be sent to the register contact person by email at jaakko.rytsola@truescape.fi.

DATA CONTAINED IN THE REGISTER

The personal data register contains the following information:

First and last name
Email address
Postal address
Phone number
Information on processed orders and bookings

DISCLOSURE OF DATA

Customer register data is used only by Truescape, except when Truescape uses an external service provider to produce a value-added service, to target advertising, or to support a credit decision. Personal data is not transferred outside the European Union, unless this is necessary to ensure the technical implementation of Truescape or its partner. In that case, it is ensured that the transfer takes place in accordance with a European Commission adequacy decision on data protection.

The registered person’s personal data will be deleted at the user’s request unless legislation, open invoices or collection measures prevent deletion.

PROTECTION OF THE REGISTER

The register is not disclosed to third parties. Use of the register requires personal user rights assigned by the controller and the information security officer.

Physical access to devices used to process personal data is prevented by access control and other security measures. Access to the data requires sufficient rights and authentication. External attacks and access to register data are prevented using, among other things, firewall technology.

Register data is backed up securely and can be restored if needed. The level of information security is
audited at regular intervals through either external or internal audits.

RIGHTS OF THE DATA SUBJECT

A person in the register has the right, among other things, to:

request from the controller access to personal data concerning them, as well as the right to request rectification or erasure of that data, or restriction of processing, or to object to processing
check and, if necessary, have corrected the data recorded about them in the register. The person has the right to have data that has been recorded incorrectly about them in the register corrected.
to the extent that processing is based on the data subject’s consent, the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
lodge a complaint about the processing of personal data with a supervisory authority

DIRECT MARKETING CONSENTS AND OPT-OUTS

The customer can subscribe to or cancel the newsletter by contacting the person responsible for register matters. The newsletter can also be cancelled via the link in the newsletter message.

Privacy Policy

‍