Privacy policy

Aeronautica Arena Oy's privacy policy concerning customer, partner and marketing information.

1. Controller
Aeronautica Arena Oy business ID 3202256-2

2. Contact information in matters concerning the register
Aeronautica Arena Oy, Kotitie 10, 49270 PYHTÄÄ tel. 041 315 6664

3. Name of the register
Aeronautica Arena Oy customer and marketing register.

arena@aeronautica.fi

4. Purpose and grounds for processing personal data
The basis for registration is a business relationship established by an agreement with the customer or partner Aeronautica Arena Oy, or separate consent to the processing of customer data. The purpose of the register is to maintain the personal data required for cooperation between Aeronautica Arena Oy's customers and partners, to ensure smooth customer service and the production and provision of benefits and services, to enable marketing and business planning and development.
Personal data is collected and processed with the customer or partner for the following purposes: *For the implementation and confirmation of air tunnel, surfing, other activities, event, gift card, ticket or product purchases or other service / goods purchases to the customer
*To provide additional purchase-related information
*To carry out and confirm purchases made through the online store to the customer
*Third-party sources (communities only, B2B emails)
*For the analysis and development of products, services and business and for the necessary statistics *To collect feedback, deviation and satisfaction data
*For advertising, marketing and direct marketing purposes. The data subject has the right to withdraw their consent to direct marketing. The permission can be revoked by using the link in the email or by e-mail arena@aeronautica.fi

5. Data content of the register
The register contains the following customer/partner information, such as:
*Contact person(s)
*Address*Billing and/or delivery information, services ordered and delivered
*Information collected through the service provided by our partners
Online payments are always made by an external payment service provider, whose privacy policy you can read here. in the service.

6. Data sources of the register
The main source of personal data is the information provided by the customer or partner at the start of the cooperation or during it, as well as the feedback, deviation, satisfaction and information collected for research purposes regarding the cooperation. Personal data is also collected from visits to customer service points, as well as from purchased registers intended for marketing purposes. The sources of information provided by the entities are mainly the information provided by the entity in the contact forms, but also the public information on the communities' websites or the registers maintained by third parties.

7. Disclosure of data
Data concerning the data subject may be disclosed within the controller's sister companies and to our partners in order to fulfil the described purpose. Otherwise, the data will only be disclosed to the extent permitted and required by law.

Data will not be transferred outside the EU or EEA unless required for the implementation of the service. Even in such a case, the Controller guarantees that the necessary level of data security is ensured in accordance with current legislation.

8. Data protection and storage
The starting point for the processing of personal data is respect for the rights and freedoms of the data subject at all stages of the processing of personal data, and that the legal basis for the processing of personal data is ensured. The controller collects and processes only those personal data that is necessary for the operations.
Digital material can only be accessed by a legitimate employee or partner. Users are given access rights that are sufficient for the performance of the task, but as limited as possible. Customer/partner data is stored in the register after the end of the customer relationship and the fulfilment of all obligations for a maximum of 12 months, unless otherwise agreed or otherwise required by law. The controller ensures that it has valid agreements with suppliers and data processors and that the processors' data security practices are suitable for the purpose. The controller works together with the processors to prevent and detect unauthorized access to personal data by third parties and the loss of personal data.

In securing the data, we take into account the risks to privacy and business related to the processing of personal data, the available technical possibilities and various threats in accordance with applicable legislation, regulations and contractual obligations.

9. Other rights of the data subject related to the processing of personal data
The data subject's right to access the data (right of inspection)
The data subject has the right to inspect what information about him or her has been stored in the register. The inspection request must be addressed in writing so that the identity of the data subject can be reliably verified. The request will be submitted to the contact point of the register mentioned in section 2 of this privacy policy.

The data subject's right to request rectification, erasure or restriction of processing.
The data subject may request the rectification of their own data after being informed of the error or having detected the error themselves. If the data subject has the opportunity to rectify the error, he or she must correct, delete or supplement the incorrect, unnecessary or outdated data without delay. If the data subject is unable to rectify the data themselves, the rectification request must be made to the controller.

To the extent that the data subject is unable to correct the data themselves, the request for rectification must be made to the contact point of the register mentioned in section 2 of the privacy statement. The data subject must be prepared to prove his or her identity in accordance with the instructions given by the controller.
The data subject also has the right to require the controller to restrict the processing of their personal data, for example in a situation where the data subject is waiting for a response to a request for rectification or erasure of his or her data.

The data subject's right to data portability from one system to another.
To the extent that the data subject has provided the customer register with data that is processed on the basis of the data subject's consent or mandate, the data subject has the right to receive such data for himself or herself, as a rule, in a machine-readable format, and the right to transfer this data to another controller. When requesting a transfer in writing, the controller will provide the information described in the right of access section within a reasonable time, taking into account the scope of the information to be provided. The data subject must be prepared to prove his or her identity in accordance with the instructions given by the controller.

The controller Aeronautica Arena Oy reserves the right to charge a reasonable fee for the deletion, rectification or modification of data or to refuse a request if it is justifiably unjustified or unreasonable.

Other rights
The data subject has the right to lodge a complaint with the competent supervisory authority if the controller has not complied with the applicable data protection regulations in its operations.

10. Contacts
In all questions and requests related to personal data, the data subject must contact the party responsible for the controller's personal data file mentioned in section 2.

11. Third Party Sites and Services
This privacy policy applies only to sites maintained by Aeronautica Arena Oy and we are not responsible for the privacy practices of other sites. The Site may contain links to third party sites. We recommend that you check the privacy statements of other websites you visit.

12. Changes to the Privacy Statement
Aeronautica Arena Oy is constantly developing its business and therefore reserves the right to change this privacy policy. Changes may also be based on changes in legislation. The latest version of the privacy policy is available on Aeronautica Arena Oy's website so that users are always aware of how their personal data is processed. Last reviewed on 26/07/2021