Privacy policy

(updated 01.01.2025)

1. Information about the company processing your data

Business ID: 2450444-9

Address: Vanha talvitie 19 A, 00580 Helsinki

E-mail address: kimmo.mustonen@qmea.fi

2. Data controller and data protection officer

Name: Kimmo Mustonen

E-mail address: kimmo.mustonen@qmea.fi

3. Name of the register

Qmea Entertainment Oy’s customer and marketing register

4. Whose personal data do we process?

We process data of customers, potential customers or data based on other legitimate grounds or on the data subject’s explicit consent.

5. Why do we process your data?

We use the information to fulfil contractual or legal obligations. The data may be used to communicate with the data subject and other parties necessary for the performance of the contractual relationship, to send newsletters, to provide information, to market products and services, to conduct market analysis and to develop our business.

6. How long will we process your data?

The data will be kept indefinitely, in accordance with applicable law and only for as long as necessary to fulfil the purposes described in this Privacy Policy. Due to accounting or other mandatory legislation, data may be kept in accordance with the provisions of that legislation even after the end of the customer relationship or other basis for processing personal data.

If you wish, you can change the staff information settings on our website here: Change your consent

7. What information do we process?

We process the information that you provide to us. The name and relevant contact details of the data subject, such as address, telephone number and e-mail address, business identification number, position in the organisation, date of birth or personal identification number, information on products and services ordered by the customer and their delivery and billing, communications, comments and materials, consents, prohibitions and customer feedback between the controller and the data subject or any other party necessary for the management of the contractual relationship may be recorded, as the case may be. Cookies may be used to collect information on the use of the services on the website of the data controller. Technically, information such as IP address, country or city of location, online services used, device and operating system used, browser type, and external websites from which the user has arrived or to which the user is transferred from the controller’s online service may be collected.

8. Where do we get the information?

The information stored in the register is obtained from the data subject himself/herself, from the technical use of the data subject’s online and electronic services, from analytics services provided by third parties (such as Google Analytics), from public data sources or from public contact data providers.

If you wish, you can change the staff information settings on our website here: Change settings

9. Do we pass on information to a third party?

Personal data is not regularly disclosed to third parties. However, it may be disclosed for a legitimate purpose. Personal data is not regularly transferred outside the EU or EEA. However, where data are transferred, the controller will ensure an adequate level of protection of personal data, including by agreeing on the confidentiality and processing of personal data as required by law. Data may be selectively disclosed for the purposes of a targeted marketing campaign by a third party commissioned by the controller. Ownership of the data does not transfer away from the controller and the third party does not have the right to use the data beyond the scope of the mandate.

10. How is the register protected?

We restrict access to the register to those members of our staff who need it to carry out their duties. The data in the register is protected by technical solutions and applications that are not part of the organisation. We use a secure internet connection and a firewall. Confidential information such as bank and credit card details are collected and transmitted using an SSL secured connection. Manual data is stored in a locked room and destroyed once it has been converted to electronic format. Electronic material is stored in an appropriately secure manner. The controller will report any security breaches directly to the authorities or to the user in accordance with the legislation in force.

11. What rights do you have in relation to the processing of your personal data?

You have the right to check the personal data we hold about you. You can ask us to correct or complete the information if necessary. You have the right to request the correction or deletion of any inaccurate information in our personal data. You have the right to request the deletion of information if you feel it is not necessary for our purposes. You have the right to object to the processing of your personal data at any time if you consider that we are not entitled to process your personal data or if you consider that we have processed them unlawfully. You have the right to object at any time to us using your data for direct marketing. Please note that online advertising (Google, Facebook) is not direct marketing but is based on cookies. You have the right to request that your data be transferred electronically to another service provider. If you feel that we are in breach of applicable data protection legislation, you have the right to lodge a complaint with the Data Protection Ombudsman. Visitors to the website may clear or block cookies, but this may degrade the user experience or cause malfunctions.

Requests for inspection etc. should be addressed to the contact person of the controller, using the contact details above and signed by the data subject in writing.