Register and Privacy Policy

Data Controller

Tanssiteatteri Hurjaruuthin Kannatus ry, Business ID 0485147–8

Name of the Register

Dance Theatre Hurjaruuth’s Customer and Stakeholder Register

Purpose and Legal Basis for Processing Personal Data

The primary basis for processing personal data is the use of Dance Theatre Hurjaruuth’s services and participation in its activities, or the user’s consent.

To provide certain services, Hurjaruuth uses external service providers. Hurjaruuth is not responsible for the privacy practices or terms of these third parties, but it carefully selects the service providers it uses.
Hurjaruuth processes data to communicate about its activities, as well as to market and develop them.

The ticket sales system provider for Hurjaruuth is the Finnish company Tixly Oy (Business ID 3224809–4), whose parent company is Icelandic. Tixly’s servers are located within the EU.
Hurjaruuth’s payment intermediary service is provided by the Finnish company Paytrail Oyj (Business ID 2122839–7).
For the Circus School Tonttukoulu registration and billing system, Hurjaruuth uses Ilmari, provided by Tietoverkko FI Oy (Business ID 2030873–1). Its servers are located in Finland.

Contents of the Register

Dance Theatre Hurjaruuth collects data about registered individuals that is relevant and necessary for the purposes defined in this privacy statement. Data is collected, for example, when a person purchases tickets, subscribes to the newsletter, enrolls as a student in our circus school, or visits Hurjaruuth’s website. Hurjaruuth may collect the following information, obtained either directly from the individual or automatically during website visits:

• name
• contact details: address, phone number, email address
• customer identifiers
• preferred communication language
• payment method information
• information about purchase channels
• details related to booking and purchase history of Hurjaruuth’s services
• customer feedback, contacts, and survey responses, including date of birth, gender, and age
• memberships and representations
• possible registration and transaction information such as username and customer number, as well as communication in venues, events, services, and channels, including user-generated content and allergy information
• user consents
• possible opt-out information
• donation details
• organization, title, or profession (for business clients, partners, and stakeholders)
• data collected by web analytics systems
• the website from which the user arrived at Hurjaruuth’s site
• device identifiers such as device model and unique device and/or cookie ID
• information about the browser used, its version, and the device’s operating system
• IP address and related regional information
• session ID, session time, and duration
• inferred information based on observed behavior, such as areas of interest

Regular Sources of Data

Customer information is primarily collected directly from the customer during ordering and registration, during purchases and use of services, in customer service interactions, and in other direct contacts. Data may also be generated in the theatre’s information systems through use of services. Information may also be updated from the Population Information System or other comparable external sources.

Additionally, the Data Controller collects visitor information about the website using Google Ads, Google Analytics (GA4), and Hotjar services, in order to analyze and improve the site and to target relevant marketing to visitors.

Data Retention and Accuracy

Data is retained for as long as it is justified and necessary to fulfill the purposes defined in this privacy statement.

Disclosure and Transfer of Data within or outside the EU/EEA

The personal data of Dance Theatre Hurjaruuth’s customers is primarily stored within the European Union or the European Economic Area. Hurjaruuth aims to use service providers located within the EU. However, data may, if necessary, be transferred outside these areas (for example, to the United States) in accordance with data protection legislation and within its legal limits.

Principles of Data Protection

When processing personal data, Dance Theatre Hurjaruuth follows good data security practices. Registers are primarily stored electronically on a secure server provided by the service provider. Only Hurjaruuth employees and the designated service provider (acting as a data processor on behalf of Hurjaruuth) have access to this data. Hurjaruuth carefully selects its service providers. Any manual records are stored in locked facilities.

Rights of the Data Subject

Data subjects have the right to access the data stored about them in the register. They also have the right to request the correction, deletion, or restriction of processing of their data. At the data subject’s request, their information can be completely removed from the registers of Dance Theatre Hurjaruuth Support Association. For these matters, the data subject may send a free-form data inspection or correction request to info@hurjaruuth.fi.

Profiling and Cookies

When processing personal data in its customer register, Hurjaruuth may use the data for profiling purposes — for example, by creating different customer identifiers. The aim is to better understand customer behavior and service demand.

Hurjaruuth uses cookies on its online services. Cookies are small files that a browser saves on the user’s device. They usually contain an anonymous, unique identifier. This identifier can be used, for example, to recognize and count browsers visiting the website.

Hurjaruuth uses data collected through cookies for targeted advertising, content customization, product development, and service improvement. Users can disable cookies, but doing so may affect the functionality of the services.