Privacy Policy

Note: This is a machine-generated translation of the original Finnish document. The translation is for information purposes only; in case of any conflict, the Finnish version shall prevail and be binding.

Last updated: 27.03.2026

1. Data Controller

Savon Kinot Oy (”Savon Kinot”)
Business ID: 0641037-7
Niskakatu 9 B 32
80100 JOENSUU
Email: [email protected]

2. Purpose of processing personal data

We process personal data for the following purposes:

• reservation and sale of movie tickets
• sale of gift cards and other products
• management of customer relationships
• payment processing and accounting
• customer service and communication
• ensuring and developing the operation of the service
• prevention and investigation of abuse

3. Legal basis for processing

The processing of personal data is based on the following legal grounds:

• Implementation of the contract: personal data is processed so that we can carry out ticket reservations, ticket sales, and the purchase and delivery of gift cards and other products.
• Legal obligation: we process data for accounting and other legal obligations.
• Legitimate interest of the controller: we process data to develop the service, provide customer service and prevent and investigate abuse.

We do not use personal data for direct marketing without separate consent.

4. Personal data processed

We may process the following information:

• name
• email address
• phone number
• address information
• language of customer service
• username and password
• information related to payment transactions
• purchase history and reservations
• invoicing and collection information
• customer feedback and contacts
• technical information (IP address, browser, log data)

5. Data sources

The data is mainly obtained from the registered person himself/herself through the online store, booking system or customer service.

6. Personal data retention period

We generally retain personal data for a maximum of 2 years from the last activity, such as login, purchase or other customer relationship activity, unless legislation requires a longer retention period.

If the customer does not have valid products (for example, unused gift cards, multi-tickets or other benefits), the personal data will be anonymized after this period so that the individual can no longer be identified.

If the customer still has valid products or rights, the data will be retained until these have been used or their validity has expired, after which the retention period described above will apply.

Personal data related to accounting will be retained in accordance with statutory obligations for 6 years from the end of the financial period to which the data relates.

7. Transfer of personal data and processors

We do not sell personal data to third parties.

We transfer personal data to selected partners to whom we have outsourced tasks involving the processing of personal data. The partners process personal data only on our behalf and in accordance with the agreement.

Such parties include, for example:

• IT service providers
• payment service providers
• financial management service providers

Processors are not entitled to use the data for their own purposes.

8. Data transfers outside the EU/EEA

As a rule, data is not transferred outside the EU/EEA. Any transfers will be made in accordance with the requirements of data protection legislation.

9. Cookies

We only use strictly necessary cookies on our website that are necessary for the operation of the service (for example, shopping cart and login functions).

We do not use cookies for marketing purposes without the user's consent.

10. Data subject rights

You have the right to:

• get access to your personal data
• request the rectification of incorrect data
• demand the deletion of data
• restrict the processing of data
• object to the processing
• have the data transferred from one system to another

Requests for information and other requests related to rights must be submitted in writing by email or by post. We will generally respond to requests within one month.

You have the right to file a complaint with the supervisory authority:

Office of the Data Protection Ombudsman
www.tietosuoja.fi

11. Data security

We protect personal data with appropriate technical and organizational measures, such as:

• access rights management
• encrypted connections
• system monitoring and logging

12. Automated decision-making

We do not use personal data for automated decision-making or profiling.

13. Changes to the privacy policy

We reserve the right to update this privacy policy. The current version is available on our website.

14. Contacts

For data protection-related matters:
[email protected]