PRIVACY POLICY
According to the GDPR, the controller has the obligation to inform data subjects in a clear manner.
This notice fulfills that obligation.
1. Data controller
Name: ArtXperience Oy
Business ID: 3262341-3
Contact details: c/o Petri Mäkiharju Kurjentaival 11, 33100 TAMPERE
Contact details for matters concerning the privacy policy
ArtXperience Oy
Sami Hiidenhelmi
sami.hiidenhelmi@artxperience.net
2. Data subjects
Users of the Lingonperry platform.
3. Purpose of the use of personal data
Grounds for keeping the register:
Personal data is processed only for predefined purposes, which are:
managing the customer relationship and informing you about our services
4. Personal data stored in the register
The customer register contains the following data:
name
Customer details
details of products/services purchased
Telemetry data on music listening
5. Rights of the data subject
The data subject has the following rights, the exercise of which should be requested at info@artxperience.net
Right of access
The data subject may check the personal data we have stored.
Right to rectification
The data subject may request the rectification of inaccurate or incomplete data relating to him or her.
Right to object
The data subject may object to the processing of personal data if he or she believes that the personal data has been unlawfully processed.
Direct marketing ban
The data subject has the right to object to the use of the data for direct marketing.
Right of withdrawal
The data subject has the right to request the erasure of data if the processing is not necessary. We will process the request for erasure, after which we will either delete the data or provide a reasoned justification why the data cannot be deleted. Please note that the controller may have a legal or other right not to delete the requested data. The controller is obliged to keep the accounting records for the period specified in the Accounting Act (Chapter 2, Section 10) (10 years). Therefore, accounting records cannot be deleted before the expiry of this period.
Withdrawal of consent
The processing of your email and name can only be based on consent, and not, for example, on your customership or membership. Consent can be withdrawn by the data subject, for example by clicking on the unsubscribe button in the email.
If the processing of data is also related to customership, the Customer must withdraw customership and also withdraw consent to the processing of the email and name in the same way as mentioned above, or by other valid communication, for example by contacting the e-mail address mentioned at the beginning of paragraph (5).
The data subject may appeal against the decision to the Data Protection Ombudsman
The data subject has the right to request that we restrict the processing of the disputed data until the matter is resolved.
Right of appeal
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if he or she feels that we are in breach of the applicable data protection legislation when we process personal data. Contact details of the Data Protection Ombudsman:
https://tietosuoja.fi/en/contact-information
6. Regular data sources
Customer data is obtained on a regular basis:
e.g. from the Customer himself via the online form or when a customer relationship is established.
7. Regular disclosures of data
As a rule, the data will not be disclosed for marketing purposes outside ArtXperience Oy.
We have ensured that all our service providers comply with the
data protection legislation. We regularly use the following service providers:
Hubspot
8. Duration of processing
The data is stored as long as the Customer’s account is active, after which it is stored for a maximum of two years.
Email is stored as long as the Customer is on the list. Newsletters will contain a link to remove the email from the list.
9. Processors of personal data
The customer register is processed by the employees of ArtXperience Oy.
If the Customer has purchased a service from ArtXperience Oy, the personal data is also processed by the accounting office and the payment service provider.
If there is a need to outsource part of the processing of personal data to a third party, we will ensure through contractual arrangements that the personal data is processed in accordance with the applicable data protection legislation and otherwise in an appropriate manner.
10. Transfer of data outside the EU
While this Agreement is in force, no personal data will be transferred outside the EU or the European Economic Area.
11. Automated decision-making and profiling
We will not use the information for automated decision-making or profiling during the term of this Agreement.
FI 
EN