PRIVACY NOTICE – ONLINE STORE

1. Data Controller

Jyväskylän festivaaliyhdistys ry
Business ID: 1062184-7
Seminaarinkatu 13, 40100 Jyväskylä, Finland
kesa@jyvaskylankesa.fi

2. What Data We Collect

Information you provide

• Name
• Address and delivery details
• Email address
• Phone number
• Ordered products, booking details and purchase history
• Payment confirmation details (via Paytrail)
• Event tickets, course registrations and participation information

Automatically collected data

• IP address
• Browser and device information
• Cookie-based analytics and marketing data (Google Analytics, Meta Pixel)

Marketing-related data

• Newsletter subscriptions (via Creamailer)
• Consents and preferences
• Social media advertising identifiers

3. How We Use Your Data

To process your order

• Order confirmation and delivery
• Sending digital tickets and course access
• Customer service and refunds
• Handling complaints and issues

For marketing and service improvement

• Newsletters (with your consent)
• Advertising on Facebook and Instagram
• Website analytics and development (Google Analytics)

To comply with legal obligations

• Accounting
• Required reporting to authorities if applicable

4. Legal Basis for Processing

• Contract (processing your order)
• Consent (newsletter, marketing cookies)
• Legitimate interest (service development, customer communication)
• Legal obligation (accounting requirements)

5. Data Retention

• Order information: 6 years (accounting law)
• Marketing data: until consent is withdrawn
• Event and course data: duration of the service + reasonable period
• Cookies: depending on your browser settings

6. Who Processes Your Data?

We do not sell your data to third parties.

Data is processed only by trusted partners:

• Paytrail (payments)
• WordPress / WooCommerce (online store)
• Creamailer (newsletters)
• Google Analytics (analytics)
• Meta Platforms (Facebook & Instagram ads)

Some partners may process data outside the EU/EEA with EU-approved safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

7. Your Rights

You have the right to:

• access your personal data
• correct incorrect data
• request deletion (when possible)
• withdraw marketing consent
• object to direct marketing
• limit processing
• transfer your data to another controller

Contact: kesa@jyvaskylankesa.fi

8. Cookies

We use cookies for:

• online store functionality
• analytics (Google Analytics)
• targeted advertising (Meta Pixel)

You can manage cookies in your browser settings.

9. Data Security

Your data is stored securely on servers managed by Jyväskylän festivaaliyhdistys ry in Finland.

We use HTTPS encryption, limited access rights and regular updates to protect your data.