Amos Anderson Glaspalatset AB / Amos Rex (hereafter Amos Rex) undertakes to process personal data in compliance with the data protection legislation and good data processing practice. The term “data protection legislation” refers particularly to the EU’s General Data Protection Regulation (GDPR) and Finnish legislation on personal data.

Amos Rex collects and processes personal data for the following purposes:

  • Ticket sales system operations
  • Sending out the newsletter
  • Gathering customer feedback to develop our operations

Below are the data protection policies for the registers that we administer. If you buy a ticket or products from Amos Rex’s online shop, the ticket sales customer register will be used to process your data.

If you subscribe to the newsletter subscriber register will be used to process your data.

Amos Anderson Glaspalatset AB / Amos Rex (hereafter Amos Rex) undertakes to process personal data in compliance with data protection legislation and good data processing practice. The term “data protection legislation” refers particularly to the EU’s General Data Protection Regulation (GDPR) and Finnish legislation on personal data.

 

Register Keeper

Name: Amos Anderson Glaspalatset AB / Amos Rex

Business Identity Code: 2137480-2

Mannerheimintie 22-24, 00100 Helsinki

 

Name of Register

Amos Rex newsletter subscriber register

 

Contact Person in Matters Related to the Register

Head of Marketing and Communications Timo Riitamaa, +358 41 529 2620, timo.riitamaa@amosrex.fi

Mannerheimintie 22-24, 00100 Helsinki

 

Purpose of processing and legal basis for processing personal data, and sources of data

Personal data collected is used to issue communications about Amos Rex’s operations and to gather customer feedback in order to develop operations.

 

The registered person themself is the main source of data.

The legal basis for the processing of personal data is the registered person’s freely given, specific, informed and unambiguous indication of their agreement to the processing of their personal data.

 

Data Content of Register

The register contains one or more of the following items of data.

E-mail address, person’s first name and surname.

 

Users of the Register

Personal data is processed by Amos Rex’s Head of Communications and Marketing, Communications Officer, Head of Education and Curator of Education.

The right to use data is restricted either to only viewing the data or to updating it only to the extent that each person’s job requires.

 

Register protection and security measures

Data is collected in the service provider MailChimp’s system. Use of the register requires a username. The main user also sets the level of user rights assigned to users. Logging into the system requires a password and the system is accessed through a secure SSL connection.

Amos Rex and MailChimp have entered into an agreement on the processing of data, which asserts that the service complies with data protection legislation. MailChimp guarantees that all its services comply with data protection legislation.

 

Disclosure of Information

Data are only disclosed to business partners acting as service providers.

Because we use service providers as business partners, we have ensured that all our service providers comply with data protection legislation.

Data will not be disclosed to third parties for marketing purposes.

 

Data transfer

Data may be transferred outside the EU by our partners in collaboration. Any transfer will not affect the privacy of the data. Partners in collaboration guarantee that any data transfers are secure.

 

Erasure of personal data

Amos Rex will retain personal data indefinitely. The registered data subject can however unsubscribe from the newsletter at any time, at which point their personal data will be erased.

 

Registered Data Subject’s Rights

The registered data subject has the right to see what data concerning them is stored, the right to require any erroneous data to be rectified or incomplete data to be completed and to be erased unless there is legal justification for keeping the data. The registered data subject also has the right to request that processing of their personal be restricted, to object to the processing of their personal data, and the right to transfer their personal data from one system to another.

The register keeper can if necessary ask the person making the request to provide proof of their identity. The register keeper will reply to the customer within the time stipulated in the data protection legislation (as a rule, within a month).

Requests for inspection and rectification should always be made to the contact person in matters related to the register.

 

Right to Complain

The registered data subject has the right to complain to the Data Protection Ombudsman if they think their personal data has been processed incorrectly.

 

 

Amos Anderson Glaspalatset AB / Amos Rex (hereafter Amos Rex) undertakes to process personal data in compliance with data protection legislation and good data processing practice. The term “data protection legislation” refers particularly to the EU’s General Data Protection Regulation (GDPR) and Finnish legislation on personal data.

 

Register Keeper

Name: Amos Anderson Glaspalatset AB / Amos Rex

Business Identity Code:

Mannerheimintie 22-24, 00100 Helsinki

 

Name of Register

Amos Rex ticket sales customer register

 

Contact Person in Matters Related to the Register

Head of Education Elsa Hessle, elsa.hessle@amosrex.fi

Mannerheimintie 22-24, 00100 Helsinki

 

Purpose of processing and legal basis for processing personal data, and sources of data

All personal data acquired is used for the purposes of Amos Rex’s ticket sales system. We use your data when you buy products or a ticket, so that we can:

  • process your order
  • improve the website user experience
  • receive payment, and
  • provide customer support

The legal basis for the processing of personal data is the registered person’s freely given, specific, informed and unambiguous indication of their agreement to the processing of their personal data.

The registered person is the main source of data.

For clarity we state here that, if the customer withdraws their consent, then Amos Rex has legal grounds based on a legitimate interest in processing the personal data in order to fulfil the purpose of the processing.

 

Data Content of Register

The person’s first name and surname, phone number, e-mail address, details of orders processed.

 

Users of the Register

Personal data is processed as necessary by the museum’s Head of Education, Curator of Education, Customer Service Coordinator, Head of Communications and Marketing, Producer, Head of Business Development, administrative staff and customer-service staff.

The right to use data is restricted either to only viewing the data or updating it to the extent that each task requires.

 

Register protection

Electronic materials are kept within the service provider’s environment. The service is protected with individual passwords and protected data connections are used for transferring data.

Amos Rex undertakes to employ sufficient safety measures to protect personal data in all its operations.

 

Disclosure of Information

Data are only disclosed to business partners acting as service providers.

Data will not be disclosed to third parties for marketing purposes.

Because we use service providers as business partners, we have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers:

Woocommerce (eCommerce platform provider)

WordPress (website hosting platform provider)

Paytrail (payment service provider)

 

Personal Data Retention Period

We keep your data only for as long as necessary to be able to offer you the services you request or purchase.

We keep your data solely for the purposes defined in the practice outlined here and for mandated legal purposes that require retention of data. We erase your data securely once we no longer require them for these purposes according to the museum’s practices.

 

Registered Data Subject’s Rights

The registered data subject has the right to see what data concerning them is stored, the right to require erroneous data to be rectified or incomplete data to be completed and to have their data erased unless there is legal justification for keeping it. The registered data subject also has the right to request that processing of their personal data be restricted, to object to the processing of their personal data, and the right to transfer their personal data from one system to another.

The register keeper can if necessary ask the person making the request to provide proof of their identity. The register keeper will reply to the customer within the time stipulated in the data protection legislation (as a rule, within a month).

Requests for inspection and rectification should always be made to the contact person in matters related to the register named at the start of this document.

Right to Complain

The customer has the right to complain to the Data Protection Ombudsman if they think their personal data has been processed incorrectly.