PRIVACY NOTICE – ONLINE STORE

Data Controller

Jyväskylä Festival Association
Business ID: 1062184-7
Seminaarinkatu 13, 40100 Jyväskylä, Finland
kesa@jyvaskylankesa.fi

2. What Data We Collect

Information you provide

• Name
• Address and delivery details
• Email address
• Phone number
• Orders, booking details, and purchase history
• Payment confirmation details (via Paytrail)
• Event tickets, course registrations, and participation information

Automatically collected data

• IP address
• Browser and device information
• Cookie-based analytics and marketing data (Google Analytics, Meta Pixel)

Marketing-related data

• Newsletter subscriptions (via Creamailer)
• Consents and preferences
• Social media advertising identifiers

3. How We Use Your Data

To process your order

• Order confirmation and delivery
• Sending digital tickets and course access
• Customer Service and Refunds
• Handling complaints and issues

For marketing and service improvement

• Newsletters (with your consent)
• Advertising on Facebook and Instagram
• Website analytics and development (Google Analytics)

To comply with legal obligations

• Accounting
• Required reporting to authorities, if applicable

4. Legal Basis for Processing

• Contract (Processing your order)
• Consent (newsletter, marketing cookies)
• Legitimate interest (service development, customer communication)
• Legal obligation (accounting requirements)

5. Data Retention

• Order information: 6 years (accounting law)
• Marketing data: until consent is withdrawn
• Event and course data: service duration + reasonable period
• Cookies: depending on your browser settings

6. Who Processes Your Data?

We do not sell your data to third parties.

Data is processed only by trusted partners:

• Paytrail (payments)
• WordPress / WooCommerce (online store)
• Creamailer (newsletters)
• Google Analytics
• Meta Platforms (Facebook and Instagram ads)

Some partners may process data outside the EU/EEA with EU-approved safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

7. Your Rights

You have the right to:

• access your personal data
• correct incorrect data
• request deletion (when possible)
• Withdraw marketing consent
• object to direct marketing
• limit processing
• Transfer your data to another controller

Contact: kesa@jyvaskylankesa.fi

8. Cookies

We use cookies for:

• online store features
• analytics (Google Analytics)
• targeted advertising (Meta Pixel)

You can manage cookies in your browser settings.

9. Data Security

Your data is stored securely on servers managed by Jyväskylä Festival Association in Finland.

We use HTTPS encryption, restricted access rights, and regular updates to protect your data.