This privacy statement describes how DUMBØ (Business ID 2416238-9 / 2KG Productions) handles personal information; what personal information the company collects, for what purposes the information is used and to whom the information may be disclosed and how the data subject may influence the processing.

The Company protects the privacy of the data subject and respects the EU General Data Protection Regulation (2016/679) (the “Data Protection Regulation”) and other applicable data protection legislation and good data processing practices.

'Personal data' means all information relating to a natural person ('registered') which can be directly or indirectly identified by him as defined in the Data Protection Regulation. Registrar and Data Protection Officer

Registrar: DUMBØ (Elias Markkula)

Business ID 2416238-9 / 2KG Productions

Registrar's contact information: hello@dumboe.com

Purposes of the processing of personal data and legal basis for processing

Legal grounds for processing personal data:

The legal basis for the processing of registered personal data is primarily the contractual relationship between the Company and the data subject. The processing of personal data is also based on statutory obligations such as accounting obligations, customer knowledge obligations and statutory reporting obligations. The treatment of customer relationship management and direct marketing is based on the Company's legitimate interest.

Personal data groups to be processed and data content and data sources

The Company will only collect personal data from those who are relevant and necessary for the purposes described in this Privacy Statement.

The following information will be processed from the register:

-Personal Data Group

-Examples of information content

-Contact

-Registered name, address, phone number, email address.

Consent and prohibitions granted by the data subject

Behavioral and Technical Identification Information

Personal information, the disclosure of which is necessary for the performance of the Company's and the Registered's obligations under the Agreement and / or legislation and for the provision of the Company's services, shall be notified to the data subject in each connection.

Primarily, personal information is collected from the registered ones or the company represented by the data subject, for example, when making a bid, entering into a customer agreement or during a customer relationship, marketing, or through forms on the website. The data subject may also have provided information to the Company, for example in connection with a competition or lottery, in connection with the use of websites, or by ordering an electronic newsletter.

Personal data may also be collected from the entity on whose behalf the registered person acts. In addition, the information may be collected and updated in registers maintained by third parties, such as the Population Register Center, the Trade Register and the Credit Registers of Credit Agencies, in circumstances permitted by law.

Retention of personal data

The Company retains personal data for as long as is necessary for the purposes specified in the Privacy Statement, unless the law obliges you to keep personal data longer (for example, responsibilities and obligations related to specific legislation, accounting obligations, or reporting obligations), or unless the Company needs information to establish, present, or defend a legal claim or settle a similar disagreement.

The data retention period and the retention criteria vary by personal data group depending on the intended use of a particular personal data group.

Personal data is processed for the duration of the customer and contractual relationship and the required time after the termination of the customer and contractual relationship.

Information about potential customers is mainly kept for 24 months.

In the case of the Communities, the retention of the personal data of the data subject is linked to the length of time for which the data subject acts as the representative of the Community towards the Company. Personal data will be removed within a reasonable time after the end of that role.

If personal data is no longer needed as defined above, the data will be deleted within a reasonable time, unless the Company is obliged by law to retain the data for a longer period of time.

Recipients of personal data

In accordance with this privacy statement, the company may outsource the processing of personal data to service providers or subcontractors. With sufficient contractual obligations, the company ensures that personal data is processed properly and lawfully.

Transfer of personal data outside the EU / EEA

Personal data are not transferred outside the European Union or the European Economic Area.

Principles of personal data protection and security of processing

The Company handles personal information in a manner that seeks to ensure the proper security of personal information, including protection against unauthorized processing, accidental loss, destruction or damage.

The company uses appropriate technical and organizational safeguards to safeguard this, including the use of firewalls, encryption technologies, secure device facilities, proper access control and access control, guidance and agreements for personnel involved in the processing of personal data, and subcontractors.

Contracts and other documents kept in the form of originals shall be kept in locked premises, the right of access of which is restricted to authorized persons.

All parties handling personal data have a duty of confidentiality on matters related to the processing of personal data registered on the basis of the Employment Contracts Act and the agreement secrecy.

Registered Rights

Right of access to information and right of access

The data subject has the right to receive confirmation of the personal data of the data subject.

The data subject has the right to check and see the information concerning him / herself and, upon request, the right to receive the information in writing or in electronic form.

Right of rectification and deletion of data

The data subject has the right to demand the correction of incorrect or inaccurate information. In addition, the data subject has the right to request the deletion of their data.

The controller also removes, corrects, and replenishes personal information that is erroneous, unnecessary, incomplete, or outdated for the purpose of the processing it has detected.

Right to transfer data, limit processing and oppose processing

The data subject has the right to request the transfer of his data to another registrar.

In addition, the data subject has the right, under the conditions laid down in the data protection law, to request the restriction of the processing of personal data.

The data subject has the right to oppose the use of the data for a particular treatment. The data subject has the right to prohibit the disclosure and processing of his / her data for direct marketing.

Right to cancel consent

If the processing of personal data is based on the user's explicit consent, the data subject has the right to withdraw his / her consent to the processing of his or her data. Cancellation has no effect on the previous processing of the cancellation.

Enforcement of rights

Requests for registered rights are made electronically and addressed to the Data Protection Officer listed in this privacy statement. The identity is checked before the information is provided. The request for verification shall be answered within a reasonable time and, as far as possible, within one month of the request and the verification of the identity.

If the data subject's request cannot be accepted, the refusal shall be notified in writing to the data subject.

Right to appeal to the Supervisory Authority

The data subject has the right to file a complaint with the data protection authority if the data subject considers that his / her personal data have been processed in violation of applicable legislation.

Change to privacy statement

The company is constantly developing its services and may need to modify and update this privacy statement as necessary. Changes can also be based on a change in data protection legislation. We recommend that you regularly review the content of this Privacy Statement. Significant changes are reported to the registered.

The Privacy Statement is published on April 21, 2020

General information about cookies

We use cookies on our website to improve the site's user experience. Cookies are short text files that the web server stores on the user's terminal. After saving, the browser sends the data back to the server as part of the request. This allows the service site to recognize and track web browsers.

Cookies tell us how users use our website. We may use cookies to develop our services and website, analyze website usage, and target and optimize marketing. The user of the website may give his consent or deny the use of cookies in the settings of his web browser.

Of cookies

There are two main types of cookies: session cookies and persistent cookies:

Session cookies will disappear from the computer as soon as the browser is closed.

Permanent cookies remain stored on your computer until they are removed or expired.

Used cookies

site cookies for the following purposes:

-to gather information about the user using Google Analytics tools

-to share content with Facebook

-suggestions to the user if this has previously been on the site

-identifying the user when logging in; anonymous users will not receive this cookie

-to save the selected language to the cookie

We also use the AdWords service to track purchase decisions and re-target your ads. These are third-party cookies, the validity of which is from 90 to two years.

Third-party cookies

Google Analytics

We use Google Analytics to analyze website usage. Google Analytics provides statistics and other information about the use of the website through cookies stored on users' computers. The information gathered from the Website is used to compile reports on the use of the Website. Here's a brief look at what Google's cookies do:

-determining the domain to be tracked

-separation of individual users

-remembering the number and date of previous visits

-remembering traffic source information

-determining the start and end of the session

-remembering the value of custom variables for the visitor level.

Google records and uses this information for 30 minutes to two years, depending on the type of cookie.

Google's Privacy Policy is available at http://www.google.com/privacypolicy.html

Allow cookies

Most web browsers automatically allow cookies.

By using the site and accepting this policy, you consent to the use of cookies in accordance with the cookie policy document.

Blocking cookies

For instructions on how to prevent cookies, please visit your browser's help pages:

Chrome (https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en_US)

Firefox (https://support.mozilla.org/en/kb/support-breakdown)

Internet Explorer (https://support.microsoft.com/fi/help/17442/windows-internet-explorer-delete-manage-cookies)

Safari (https://support.apple.com/english/HT201265)

Blocking cookies is hampering the usability of some website

DUMBØ artshow privacy policy