Zaza studio
Privacy policy
This is an English translation of our Finnish-language privacy policy for your convenience. In case of any discrepancy, the Finnish version applies.
This privacy policy describes the principles for processing personal data relating to the services of our business (Zaza studio). A more detailed description of our services can be found on our website or upon request.
This privacy policy describes, among other things:
- how our business processes customers' personal data.
- what kind of personal data our business may collect about customers.
- for what purposes our business may use customers' personal data.
- the customer's rights regarding the personal data we collect.
Data controllers
- Helen Viitala, Business ID 2689057-4
The data controllers listed above manage and maintain the customer register described in this privacy policy independently of one another, and together form the "Business" described here. If any of the above data controllers decides to transfer their business to an outside operator, the Business has the right to hand over a copy of the customer register to that outside operator as well. If an individual requires that their personal data remain only in the use of the Business as described in this privacy policy, please notify the data controllers' contact person.
Contact person and contact details
- Name: Helen Viitala
- Phone: 0449754682
- Email: zazastudio.helsinki@gmail.com
- Address: Arkadiankatu 10, 00100 Helsinki
Name of the register
Customer register
Purpose and background of the processing of personal data
The customer register collects personal data of the Business's customers so that services can be provided appropriately and lawfully. Customers' personal data is used in particular for managing the customer relationship, communication, and marketing.
The Business's representatives jointly use the Timma service to process and maintain personal data — a booking and customer-management system provided by Timma Oy (more information: www.timma.fi). For clarity, Timma Oy is not the controller of the customer register described here, but rather a data processor that has appropriately handled its responsibilities as a data processor.
The register collects personal data provided by the customer in connection with a booking, considered necessary for properly managing the customer relationship. When booking, the customer is asked for the following information via the online booking form or another booking method (e.g. phone call):
- Name
- Phone number
- Email address
- Additional details or special requests for the booking
- Consent to direct marketing by email
- Consent to direct marketing by text message
In addition, the Business may store the following information about the customer in the customer register:
- Address
- General information about the services offered to the customer
- How many times the customer has failed to show up for a booked appointment
- Which representative of the Business the person is a regular customer of
- Discounts granted to the customer
- Additional information used to make use of customer data generated during the customer relationship for the person's benefit going forward
In addition to the above, the Business retains the date of the booking and the customer's identifier.
Regular sources of information for the register
Personal data is obtained when the customer makes a booking, or when the customer otherwise provides personal data about themselves to the Business.
In addition, further information about the customer may be recorded in connection with providing the service, aiming to ensure quality service going forward. Such additional information may include services and products suited to the customer, and other information relevant to the customer relationship.
Personal data is also automatically transmitted to our customer register when the customer makes a booking with the Business through the Timma service.
In addition, the Business may collect anonymised user data about visitors to its website using analytics tools. Our Business also reserves the right to use cookies on its website, which the user can typically decline via their browser settings.
Disclosure of personal data
The disclosure of personal data always follows applicable law.
Personal data is not disclosed to third parties, unless a data controller working within the Business transfers their business to an outside operator. In that case, a copy of the customer register may be handed over to the transferring data controller so that they can continue to properly serve their regular customers.
In addition, personal data may be disclosed to authorities as required by law upon request. The register is stored and protected so that unauthorised parties do not have access to the register data.
The customer understands that their personal data is processed within the Timma service provided by our partner. The customer consents to their personal data being transferred via the Timma service to third-party data processors, provided that the transfer of personal data is carried out in accordance with EU data protection legislation. This includes the right to transfer personal data to a third country outside the European Union and the European Economic Area, provided that the transfer fully complies with the requirements of EU data protection legislation.
Protection of the register
The Business has arranged the information security of the register in a generally accepted manner and seeks, through appropriate technical solutions, to prevent unauthorised access to both its IT-based systems and its manually maintained and stored materials.
In principle, only the Business's employees and the entrepreneurs and their employees operating within it have access to the information contained in the register. In addition, Timma Oy's employees and other data processors of the Timma service may have grounds to manually process the register's personal data in order to provide the Timma service to the Business and its customers appropriately. Timma Oy's employees and other data processors of the Timma service are bound by confidentiality obligations that protect the customer's personal data as required by law.
Right of access
The customer has the right to know what information about them has been stored in the personal data register, or that the register contains no information about them. At the same time, the Business must state the regular sources of information for the register, and for what purposes the register's information is used and regularly disclosed.
A person who wishes to inspect information concerning themselves must submit a request to that effect to the Business in a document that is personally signed or otherwise verified in an equivalent manner.
Correction of information
If a person notices, for example while exercising their right of access, that the register's information contains deficiencies or errors, they have the right to request that the Business correct the information.
Other rights
The Business reserves the right to amend this privacy policy from time to time in order to fulfil its legal obligations.
The Business undertakes, either on its own initiative or at the request of a person recorded in the register, to correct, delete, or supplement information in the register that is found to be inaccurate, unnecessary, incomplete, or outdated. If a correction request is not accepted, the person will be given a reasoned notice stating the grounds on which the request was not accepted.
In addition, customers have the right to prohibit the Business from processing their information for direct marketing purposes.
Cookie policy
We use cookies to ensure a smooth user experience and to analyse the use of our website. We offer businesses using Timma's booking view the option to add third-party services to measure the use of the booking page and the effectiveness of marketing. All services using cookies are listed on our cookie policy page.
Cookies are data stored on the user's device, used in analytics services and to personalise services for users. You can prevent the use of cookies in your browser settings. Cookie instructions for different browsers: