PRIVACY POLICY

Privacy policy – escape game services

1. Data controller

Controller: Vaikutusvaltaistuin Oy
Business ID: 2697805-8
Postal address: Tukholmankatu 10, 00290 Helsinki
Email: toni.hinkka@vaikutusvaltaistuin.fi
Phone: +358 44 306 3949
Website: www.pakomielle.fi
Contact person for data protection: Toni Hinkka (toni.hinkka@vaikutusvaltaistuin.fi)

This privacy policy applies to the escape game service operated under an auxiliary business name.

2. Personal data collected and purposes of use

Customers’ name, email and phone number
Purpose: Managing bookings, running the games, customer communication (confirmations, reminders)
Retention: 24 months after the booking

Booking content and additional information (e.g. special requests, accessibility information)
Purpose: Organising the game
Retention: 24 months after the booking

Billing information, including the name, email and phone number of company contact persons
Purpose: Accounting, taxation, payment processing
Retention: 6 years

Details of light entrepreneurs / freelancers (name, email, phone, business ID if any)
Purpose: Payroll, work shifts, accounting
Retention: 6 years

Data related to marketing consent
Purpose: Newsletters, campaign messages
Retention: Kept until consent is withdrawn

3. Data processing systems and service providers

Data is processed only:

• in the booking system
• in email communication
• in payment services
• in accounting

Customers may also choose to provide information through chat and messaging services (e.g. WhatsApp, website chat), but such information is collected only for delivering the service and handling the booking, and providing it is at the customer’s own discretion. Data is not disclosed for any other purposes.

4. Transfers of personal data outside the EU/EEA

If data is transferred outside the EU or EEA (e.g. cloud servers of Bookly or payment services), the transfer is made with safeguards in accordance with the GDPR, such as standard contractual clauses.

5. Security and surveillance cameras

Surveillance cameras are used at the game venue to ensure safety and to support smooth running of the games.

Camera recordings are processed only for safety purposes and for running the game, and they are deleted regularly.

Clear signs informing about the surveillance are displayed at the game venue.

6. Automated decision-making and profiling

No automated decision-making or profiling is used in this service.

7. Rights of the data subject

The data subject has the right to:

• access their own data
• request rectification of the data
• request erasure of the data
• request restriction of processing
• object to the processing of the data
• transfer the data from one system to another
• withdraw marketing consent at any time

These rights can be exercised by contacting the data protection contact person named above.

8. Mandatory and voluntary provision of data

Providing booking details is necessary for delivering the service.
Providing special requests and other additional information (e.g. accessibility or other wishes for tailoring the game) is voluntary, but may improve the service experience.
Details of company contact persons (name, email, phone) are collected only for billing and delivering the service.

9. Right to lodge a complaint

The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman if they consider that their data is being processed unlawfully.

This is a translation of the Finnish privacy policy. In case of discrepancies, the Finnish version prevails.