Privacy Policy

Helsinki Contemporary Oy (later also ”the Gallery”) follows the EU General Data Protection Regulations (GDPR).

1. Name of Data Controller
Helsinki Contemporary Oy
Business ID: 2140333-5
Bulevardi 10
00120 HELSINKI

2. Data Policy Representative
Katja Räisänen / Helsinki Contemporary
katja.raisanen@helsinkicontemporary.com

Aim of the GDPR

The aim of the GDPR is, among other things, to reinforce the rights and freedoms of individuals, to acknowledge the global reach of privacy protection, and to enforce the implementation of privacy legislation.

The gallery’s essential operations include communications and sales, which is why we must manage related person registers. Helsinki Contemporary Oy is committed to following the GDPR guidelines, and to continue to collect only the data we need, only store it for the necessary length of time, and report without delay any data security breaches in our registers. Personal data is processed only by the relevant personnel, and the processing leaves a trace in our data system. Everyone currently in our registers will have the opportunity to access information about themselves, alter the information and be removed from the register if they so wish and there is no legal basis to store the data for, for example, archiving purposes.

1. Collection of Data

Personal data are collected only when you decide to or subscribe to Helsinki Contemporary newsletters and invitations. The newsletter andf invitation mailing list is hosted by MailChimp.

When subscribing to newsletters and invitations, your email address will, with your permission, be used for Helsinki Contemporary marketing and communications purposes until you unsubscribe.

Your email address will not be forwarded to other parties. You can stop receiving newsletters by clicking the unsubscribe link on the email.

2. Use of Cookies

This website uses cookies to improve your online experience. The cookies are temporarily stored on your computer. No personal information is automatically saved. We use the web analytics service “Google Tag Manager” to calculate general statistics.

Inquiries

You may send an inquiry to katja.raisanen@helsinkicontemporary.com after which we will deliver a report about your information in our registers within a month of your inquiry. Please mention your name and your connection to the gallery in your message. The report is free of charge.

In the future, we will request permission to process the data from new contacts as transparently and clearly as possible. When requesting the permission, we will provide information about why we collect data, how we use it, how long it will be stored and the rights of the data subject. We secure the permission using a two-stage verification process.

Person registers

Helsinki Contemporary Oy manages 1) a contact register (mailing list) and 2) a customer register.

Below you will find the privacy statements of both register. The statements explain why data in registers is collected or stored, how the data is processed, who processes it, the rights of the data subject and how the register’s data security is maintained.

Contact Register (Invitations and Newsletter mailing list)

The Gallery’s contact register included information collected on our MailChimp mailing list subscription form. This includes person’s first and last name, email address and preferred language of communication. The data is processed only by the gallery staff is not to be given to third parties.

Customer Register

The Gallery’s customer register includes information collected in lieu of the purchase of artworks. Person’s or a representative’s name, address, email address and phone number are collected in the artwork purchase confirmation, and the data will be restored in the gallery’s physical sales registry to ensure artwork provenance and for bookkeeping.

If a customer gives permission to add the given data to the gallery's customer register, they give permission for the gallery to store the given data in the customer register, and, if chosen so, for their email to be added to the gallery’s mailing list. The data is stored and processed only in the Gallery’s local server. The data is processed only by the gallery staff.

According to the EU Money Laundering Act, the following information must be collected and stored on personal customers who complete a single transaction or a series of linked transactions within the span of a year of at least €10 000: 1) date of birth and personal identification number of the client or client's representative 2) statement of political; and a 3) copy of a valid personal identification document, eg. passport. A statement of the source of funds related to a transaction must be provided when the client's business is out of the ordinary or the client is a politically influential person. A physical document of this data will be stored in the gallery’s Customer Register for 2 years.

Data subject rights

The gallery collects only the necessary information used for communications and marketing purposes (name, email-address, preferred language of communication). Unless there are legal grounds for storing the data, each data subject has the right to their own data, to know who has processed their data, the right to correct false information and the right to be forgotten.

The data subject has the right to be notified about any data breach involving their data. The data subject has the right to receive the report on their data within a month of their request.

The data subject has the right to issue a complaint to the supervising authorities if they suspect their personal data has been processed erroneously.