Arenaharbor

Privacy Policy

Information about the processing of personal data under the EU General Data Protection Regulation (GDPR).

1. Data controller

Urbanfix Oy (Business ID 3606816-2)
Helsinki, Finland
Email: varaukset@arenaharbor.fi
Phone: +358 40 160 8684

2. Name of the register

Arenaharbor Game Park customer and booking register.

3. Purpose and legal basis

  • Booking handling and confirmation (performance of contract).
  • Customer service and communication (contract / legitimate interest).
  • Invoicing and accounting (legal obligation).
  • Service development and anonymous analytics (legitimate interest).
  • Marketing communications based on separate consent.

4. Data collected

  • Name, email, phone number.
  • Booking details: date, field, player count, additional requests.
  • Business customers: invoicing details and Business ID.
  • Technical data from the website (IP, browser, cookies — see cookie policy).

5. Data sources

Data is primarily collected from the data subject themselves when making a booking, contacting us, or visiting the website.

6. Data disclosures and transfers

Data is not sold or disclosed for marketing to third parties. Data may be processed by trusted service providers (hosting, email, payment and accounting services) under data processing agreements. If data is transferred outside the EU/EEA, we ensure an adequate level of protection (e.g. EU Standard Contractual Clauses).

7. Retention period

Booking and customer data is retained for the duration of the customer relationship and thereafter as required by law (e.g. Finnish Accounting Act: 6 years plus current financial period). Data processed based on marketing consent is retained until consent is withdrawn.

8. Data security

Data is stored in secure systems accessible only by designated employees with personal credentials. Electronic transfers are protected with TLS encryption. Paper records are kept in locked premises.

9. Rights of the data subject

  • Access your personal data.
  • Request correction of inaccurate data.
  • Request erasure ("right to be forgotten") within legal limits.
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time.
  • Lodge a complaint with the supervisory authority (tietosuoja.fi).

Requests can be sent to varaukset@arenaharbor.fi. We respond within one month as a rule.

10. Cookies

The website uses cookies. See the separate cookie policy.

11. Changes

We reserve the right to update this policy. The current version is always available on this page.