Privacy policy

This Privacy Policy explains how Oy Elokuvateatteri Gilda Biograf Ab processes the personal data of its customers and users of our website.

1. Data Controller

Oy Elokuvateatteri Gilda Biograf Ab

Visiting address: Narinkka 2, 00100 Helsinki
Postal address: c/o Oy Atlantic Film Finland Ab, Fredrikinkatu 61 A, 00100 Helsinki

Email: teatteri@gilda.fi
Phone: 010 551 4120

Website: www.gilda.fi

2. What personal data do we process?

We may process the following information about our customers and users of our website:

name
email address
phone number
information related to reservations and ticket purchases
selected film, screening, seats and ticket types
information related to orders and payment transactions
messages and other communications sent to customer service
email address and consent information related to newsletter subscriptions
technical information related to the use of the website, such as IP address, browser and device information, and information collected through cookies.
As a general rule, we do not store full payment card details in our own systems. Payments are processed in the systems of the payment service provider we use.

3. For what purposes do we use personal data?

Reservation and purchase of cinema tickets

We process personal data in order to provide cinema ticket reservation and purchase services.

The data is used, for example, for:

processing a reservation or order
linking the reservation to the correct customer
delivering tickets and order confirmations
processing and verifying payment transactions
contacting the customer regarding a reservation or screening
handling cancellations, refunds and other customer service matters.
The processing of this data is based on entering into and performing a contract between the customer and Gilda and, where applicable, complying with our legal obligations.

Customer service

When you contact us, for example by email or phone, we may process the contact details you provide as well as the information contained in your message in order to handle your request.

Depending on the circumstances, the processing is based on the performance of a contract or Gilda’s legitimate interest in providing customer service and handling customer enquiries.

Newsletter and electronic marketing

If you subscribe to Gilda’s newsletter, we process your email address in order to send newsletters, news about our film programme, offers and other marketing communications from Gilda.

The sending of newsletters is based on your consent.

You may unsubscribe from the newsletter at any time by using the unsubscribe link included in the newsletter or by contacting us.

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Website operation and development

We may process technical information generated through the use of the website for the purposes of operating and securing the website, investigating errors and developing our services.

Necessary cookies and similar technologies may be used to enable the technical operation of the website and reservation system.

Non-essential cookies, such as analytics and marketing cookies, are used only on the basis of the user’s consent.

More information about the use of cookies is available in Gilda’s Cookie Policy.

4. Where do we obtain personal data?

We primarily receive personal data directly from the customer when they, for example:

reserve or purchase cinema tickets
use our website
subscribe to the newsletter
contact our customer service.
In addition, our systems may generate technical information when the service is used.

5. Recipients of personal data and service providers

We use external service providers in the course of our operations, and these service providers may process personal data on behalf of Gilda.

Such service providers may include, for example:

the provider of the cinema reservation and ticketing system
payment service providers
website hosting and technical maintenance service providers
email and communications service providers
newsletter and marketing service providers
analytics and cookie service providers
accounting service providers and other service providers supporting Gilda’s business operations.
We only disclose to service providers the information that is necessary for providing the relevant service.

Service providers process personal data in accordance with applicable data protection legislation and the agreements concluded with them.

Personal data may also be disclosed to authorities where required by law or pursuant to a lawful request by an authority.

6. Transfer of personal data outside the EU or EEA

We aim to use service providers that process personal data within the European Union or the European Economic Area.

However, in connection with some of the technical services we use, personal data may also be processed outside the EU or EEA.

In such cases, we ensure that there is a lawful basis for the transfer of personal data under applicable data protection legislation and that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or another applicable transfer mechanism.

7. How long do we retain personal data?

We retain personal data only for as long as necessary for the purposes for which it is processed or for as long as required by law.

Reservation and purchase information is retained for as long as necessary for processing the order, providing customer service, handling potential complaints and fulfilling Gilda’s legal obligations.

Information that forms part of accounting records is retained for the period required under applicable accounting legislation.

Customer service information is retained for as long as necessary to handle the matter in question and to resolve any potential subsequent claims.

A newsletter subscriber’s email address is retained for as long as the newsletter subscription remains active. When the subscription is cancelled, the email address is removed from the marketing list or marked in the system so that no further marketing communications are sent to it.

Technical log and usage information is retained only for as long as necessary for the operation and security of the service.

8. Protection of personal data

We protect personal data using appropriate technical and organisational measures.

Access to personal data is restricted to individuals and service providers who need the information for their work or in order to provide the relevant service.

We use appropriate technical security measures to prevent unauthorised access to, alteration, disclosure, loss or other misuse of personal data.

9. Rights of the data subject

Under applicable data protection legislation, you have the right to:

know whether we process your personal data
request access to personal data concerning you
request the correction of inaccurate or incomplete personal data
request the deletion of your personal data where there is no longer a lawful basis for processing it
request the restriction of the processing of your personal data
object to the processing of personal data based on legitimate interests
in certain circumstances, receive the data you have provided in a machine-readable format and transfer it to another data controller
withdraw your consent at any time where the processing of personal data is based on consent.
Not all rights apply in every situation. For example, a legal obligation may prevent certain information from being deleted immediately.

Requests concerning personal data may be sent to:

teatteri@gilda.fi

Where necessary, we may request additional information to verify your identity before fulfilling your request.

10. Right to lodge a complaint with a supervisory authority

If you believe that your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

11. Automated decision-making and profiling

We do not use personal data for automated decision-making or profiling that would have significant legal or similarly significant effects on the customer.

12. Changes to this Privacy Policy

We may update this Privacy Policy if our personal data processing practices, the services we use or applicable legislation change.

The current version of this Privacy Policy is always available on this page.