Data Protection & GDPR
Privacy Statement
Privacy statement of Science Center in accordance with EU General Data Protection Regulation (GDPR 2016/679) and the Finnish Data Protection Act (1050/2018).
Contact Data ProtectionScience Centersäätiö sr (Business ID 0568019-2) is committed to protecting the personal data of all visitors, online ticket shop customers, newsletter subscribers, and partners in full compliance with the EU GDPR (2016/679).
1. Data Controller & Contact Information
Controller: Science Centersäätiö sr, Tiedepuisto 1, 01300 Vantaa, Finland.
Business ID: 0568019-2
Contact email: asiakaspalvelu@heurac.best
Phone: +358 9 8579 288 (Mon–Fri 09:00–15:00 EET).
Business ID: 0568019-2
Contact email: asiakaspalvelu@heurac.best
Phone: +358 9 8579 288 (Mon–Fri 09:00–15:00 EET).
2. Registry Name & Data Subjects
Customer and Marketing Register of Science Center. Data subjects include ticket buyers, annual card holders, group booking organizers, newsletter subscribers, and website visitors.
3. Purpose & Legal Basis of Processing
• Order Fulfillment (GDPR Art. 6(1)(b)): Managing ticket orders, delivery of electronic tickets, visitor admissions, and customer support communications.
• Legal Compliance (GDPR Art. 6(1)(c)): Compliance with Finnish accounting legislation (Kirjanpitolaki) and tax regulations.
• Legitimate Interests (GDPR Art. 6(1)(f)): Ensuring IT security, preventing fraud, and optimizing digital services.
• Consent (GDPR Art. 6(1)(a)): Delivering newsletter communications and managing cookie preferences.
• Legal Compliance (GDPR Art. 6(1)(c)): Compliance with Finnish accounting legislation (Kirjanpitolaki) and tax regulations.
• Legitimate Interests (GDPR Art. 6(1)(f)): Ensuring IT security, preventing fraud, and optimizing digital services.
• Consent (GDPR Art. 6(1)(a)): Delivering newsletter communications and managing cookie preferences.
4. Categories of Data Collected
• Customer identification: First name, last name.
• Contact details: Email address, phone number, billing address.
• Transaction details: Purchased tickets, visit date, order total, payment status, transaction reference.
• Technical data: IP address, browser type, device information, and cookie consent settings.
• Contact details: Email address, phone number, billing address.
• Transaction details: Purchased tickets, visit date, order total, payment status, transaction reference.
• Technical data: IP address, browser type, device information, and cookie consent settings.
5. Data Retention Periods
Personal data related to ticket orders and financial transactions is stored for 6 years in accordance with the Finnish Accounting Act. Newsletter subscription details are retained until consent is withdrawn.
6. Data Security & Third-Party Processors
All personal data is processed confidentially and stored on secure servers within the EU/EEA. All data transfers use 256-bit TLS/SSL encryption. We work only with GDPR-compliant service providers (payment processors, hosting infrastructure) bound by Data Processing Agreements (DPAs).
7. Rights of the Data Subject
Under the GDPR, you have the right to request access to, rectification of, or erasure of your personal data, as well as the right to restrict processing, object to processing, and data portability.
To exercise your rights, email asiakaspalvelu@heurac.best. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, www.tietosuoja.fi).
To exercise your rights, email asiakaspalvelu@heurac.best. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, www.tietosuoja.fi).
Ready to experience Science Center?
Book your tickets online in advance to save €3 per ticket and bypass the ticket office queue.
Buy Tickets Online (-€3)