Effective date: 19.04.2024
1. Background and Purpose of processing EO-Space Oy (hereinafter "EO-Space" or "we") is a Finnish-based company specialized in creation of educational environment (online and in classroom) for children to help them master skills in math.
In connection with our operations and to be able to provide our services and EO STEM Jam event, we may collect and process personal data of you and your children as a participant of EO STEM Jam event ("You").
The purpose of this Privacy Policy is to describe and explain how we as a controller process personal data in connection with EO STEM Jam event, what personal data we collect and how you may use your rights as a data subject.
In this Privacy Policy, "Services" refer to EO STEM Jam event as well as website https://eo-space.fi/, including applicable features such as, but not limited to, online events, online ticket store.
Unless indicated otherwise, this Privacy Policy relates to our use of any personal data we collect or use in relation to the following services:
- EO STEM Jam event;
- EO STEM Jam's websites and their related subdomains, including those pertaining to registration for attendance and/or volunteering at EO STEM Jam's events;
- Online surveys relating to the EO STEM Jam's events;
- Messages sent via EO STEM Jam's website, and
- EO STEM Jam's events official social media channels.
2. Information we collect When we provide the Services, we collect and receive information in several different ways. In many cases, you may choose what information to provide. In some others, certain information is required for us to provide you the Services.
2.1 Directly from you, or approved third parties
We collect a variety of information from you when you provide it to us directly, when we request it from you, or when you give us permission to get it from a third-party source. This information includes, but are not limited to:
- Attendee registration information. When you register to attend an event, you must provide us with basic information such as name, email address, telephone number. We also give you the option to provide additional information.
- Payment and credit card information. When purchasing tickets to attend an event, you must provide us with your name, address, telephone number, email address, credit card, debit card or bank information. This information will only be shared with third parties such as our payment provider who perform tasks required to complete the purchase transaction.
- Event survey responses. We may ask you to participate in optional surveys regarding your experience at the event in order to help us improve it and for related commercial purposes.
- Customer Support. So that we may provide customer services, respond to and resolve any enquiries or complaints.
2.2 Information you generate using our services
We may collect information about the ways in which you use and interact with our services, such as, but not limited to, the types of tickets you buy.
To understand and enhance your user experience, we may use tools for experience insights and behaviour analytics purposes. These tools may allow us to access heatmaps, recordings, surveys, and user interviews, for instance.
2.3 From your browser or device
We automatically collect certain information from your browser or device when you use certain services or read a message from us.
For example, we collect:
- data regarding the device you are using, such as its unique identifier and operating system; logs will be recorded by our servers based on the information sent from your app or browser;
- information automatically as you navigate through our websites using cookies and other tracking technologies. (Information collected automatically may include usage details, email address, IP addresses, and information collected through cookies and other tracking technologies).
Information may be recorded by cookies and similar technologies when you use the services. Please review our
cookie policy for further detail on how we use cookies and similar technologies on our services and how to opt out of these.
3. How we use your information We use your information in order to provide, operate, improve, understand, customise, support, and market our services, including:
3.1 Providing and improving the requested services
We use your personal data as necessary to run the events, such as to register attendees, issue tickets, facilitate information sharing with partners with whom you have consented for us to share information.
3.2 Communicating with you
We use your personal data to contact you regarding your registration to attend an event, to notify you of any changes to our policies and practices, and to respond to any requests or inquiries you may submit to us.
If you subscribe to marketing, such as newsletters, we will use your data as described below. To opt out of our marketing communications and newsletters, please click the unsubscribe button at the bottom of marketing emails from us or alternatively email us via the contact info.
3.3 Marketing
If you opt-in to receiving marketing communications from us, we will use your personal data for outreach and marketing, such as to send you information about our future events or about our services of online math education. You can opt-out of these communications by using the unsubscribe links in our communications or by contacting us.
We may also use your image in our published list of event attendees, which is visible in our websites; as well as on promotional posts and videos of our events. If you want to object to this use, please contact us via the contact details at the bottom of this policy.
3.4 Tracking
Cookies & Web Beacons.
We may use information from beacons and cookies collected from your use of our website to target your online activity, browser or apps, with certain advertisements. We may also use these tools to determine the popularity of certain content or advertisements on our website.
3.5 Advertising
We use your personal data to be able to show you advertising on other websites. Please also review our cookie policy for your options to control how we use cookies and similar technologies for advertising.
3.6 Legal obligations and rights
We may use your personal data to protect our rights and properties in connection to our Services, to enforce our policies and prevent fraud or potentially illegal activities, to comply with our legal obligations, to resolve any disputes we may have with you, and to enforce our agreements with third parties.
4. Legal bases for processing your information We rely on a number of bases to lawfully process your personal data for the purposes described in this Privacy Policy. We process your personal data:
- when necessary to perform our Terms and Conditions and other legal policies, or to provide you with the Services;
- where you have consented to the processing, which you may revoke at any time;
- when necessary for us to comply with a legal obligation, a court order, or to exercise and defend legal claims;
- when necessary to protect your vital interests, or those of others, such as in the case of an emergency;
- where you have made the information manifestly public;
- where necessary in the public interest; and
- where necessary for the purposes of our, your, or a third party's legitimate interests, such as those of partners or other attendees or volunteers.
If you have questions or need further information about the legal bases on which we collect and use your personal data, please contact us.
5. Our legitimate interests As indicated above, in certain cases we use your information where necessary to pursue our, your and others' legitimate interests. These cases include, but are not limited to:
- Implementing and enhancing security measures and protections in respect to our websites, and services in general, protecting you and others against fraud, spam and abuse;
- Enforcing our policies, such as our Terms and Conditions;
- Enhancing the event and our services in general, as well as our websites, to improve your user experience;
- Conducting access control and enforcing security at the events;
- Conducting data analysis and analytics across our services;
- Using your image in our marketing materials in order to highlight the attendees participating in our events. We also use photos and audio-visual footage from past events which may contain your image or voice.
If you want to exercise your right to object to any of these uses, please email us via the email at the bottom of this page.
6. Sharing with third parties We only share personal data within our organization, if and as far as reasonably necessary, for the purposes of this Privacy Policy, e.g. with our employees responsible for customer service and marketing.
We do not share personal data with third parties outside of our organization unless one of the following circumstances applies:
- It is necessary for the purposes of this Privacy Policy To the extent third parties (such as other Users of EO-Space Services, side event organizers or other collaborators/event organizers) need access to your personal data in order for us to perform EO-Space Services. EO-Space has taken the appropriate contractual and organizational measures to ensure that your data are processed exclusively for the purposes specified in this Privacy Policy and in accordance with the applicable laws and regulations. Furthermore, we may provide your personal data to our affiliates, other trusted businesses or persons to process it on behalf of us, based on our instructions and in accordance with our Privacy Policy as well as any other appropriate obligations of confidentiality and security measures.
- For legal reasons We may share personal data with third parties outside our organization if we have a good-faith belief that access to and use of the personal data is reasonably necessary to: (i) meet the requirements or obligations under the applicable law, regulation, and/or court order; (ii) detect, prevent, or otherwise address fraud, security or technical issues; and/or (iii) protect the interests, properties or safety of EO-Space, the Users or the public in accordance with the applicable law. When possible, we will inform the User of such data transfer and processing.
- To authorized service providers. We may share personal data to authorized service providers who perform services for us (including but not limited to data storage, accounting, payment, sales and marketing service providers). Our agreements with our service providers include commitments ensuring that the service providers agree to limit their use of personal data and to comply with privacy and security standards at least as stringent as the terms of this Privacy Policy.
7. Data retention We will retain your personal data for as long as necessary to provide you with the services, maintain our legitimate interests and business operations, and/or exercise, defend or establish our rights.
Generally, we will maintain your personal data for up to a period of one year after such information is collected to achieve the purposes set out in this Privacy Policy. However, we may need to keep some of your information for a longer period to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our Terms and Conditions.
8. Data transfers As a global business, we access and transfer information around the world. This means that we access and transfer your personal data from within and outside the EO STEM Jam event's locations , including in and to the United States.
The data protection laws and the rights of authorities to access your personal data in some of these countries may not be the same as in your home country. We transfer your personal data in accordance with applicable law(s), and take steps to ensure that your information is appropriately protected.
In particular, where we transfer information to countries that are not viewed as providing an adequate level of protection, we rely on an approved mechanism known as the "standard contractual clauses" to protect the information transferred. These are template contracts published by the European Commission containing approved commitments to protect the privacy and security of the information transferred. To request a copy of the clauses, please contact us.
9. Your rights You have a number of rights in relation to your information that we process. While some of these rights apply generally, certain rights apply only in certain limited cases. We describe these rights below.
If you wish to exercise your rights, please contact us.
Right to access.
The Users have the right to access the personal data relating to them and processed by us. We give you the possibility to request a copy of your personal data.
Right to object
If the data is processed based on our legitimate interest, you may have the right to object to certain use of your personal data. If you object to the further processing of your personal data, this may lead to fewer possibilities to use our Services.
Right to rectify
The Users have the right to have incorrect, imprecise, incomplete, outdated or unnecessary personal data we have stored about the User corrected or completed by contacting us.
Right to erasure
The Users may also request us to delete their own personal data from our systems. We will comply with such requests unless we have a legitimate ground not to delete the personal data. Such legitimate ground may be based on e.g. the applicable laws.
Right to data portability
In certain situations, you may have the right to receive your personal data from us in a structured and commonly used format and to independently transmit the data in question to a third party.
Right to withdraw consent
In case the processing is based on a consent granted by the User, the User may withdraw the consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to restriction of processing
You may request us to restrict processing of personal data, for example, when your data erasure, rectification or objection requests are pending and/or when we do not have legitimate grounds to process your personal data. However, this may lead to fewer possibilities to use our Services.
The abovementioned rights may be exercised by sending an email or a letter to us on the address below this Privacy Policy. The message should include the following information: full name, home address, email address and telephone number. We may request the provision of additional information necessary to confirm the identity of the User. We reserve the right to reject requests that are unreasonably repetitive, excessive or manifestly unfounded.
9.1. Lodging a Complaint
The User can lodge a complaint with the local data protection supervisory authority in case the User considers that EO-Space's processing of personal data appears to be inconsistent with the applicable data protection laws. In Finland, the local supervisory authority is the Data Protection Ombudsman (www.tietosuoja.fi). The contact details of the supervising authority are as follows:
Office of the Data Protection Ombudsman Visiting address:
Ratapihantie 9 (6th floor), 00520 Helsinki
Postal address: P.O. Box 800, 00521 Helsinki, Finland
Email:
tietosuoja@om.fi Telephone: +358 (0)2956 66700 (switchboard)
Telephone guidance: +358 (0)2956 66777
10. Security The security of your personal data is important to us. We implement reasonable and appropriate security measures to help protect the security of your information both online and offline and to ensure that your data is always treated in accordance with this Privacy Policy. These measures vary based upon the sensitivity of your information. Despite these measures, the Internet is not a fully secure environment and we cannot guarantee that your personal data will never be intercepted or improperly accessed.
11. Children Attendees under 18 years of age may attend EO STEM Jam event if accompanied by a parent or guardian at all times.
Generally, we do not process children's personal data as only the parent's and/or guardian's data is required to enable the children's attendance to the event. Where there is any exceptional need to collect children's data for the referred purpose, we recognize the need to provide further privacy protections, namely:
- Informing their parents or guardian(s) about our information practices with regard to children, including the types of personal data we may collect, the uses to which we may put that information, and whether and with whom we may share that data;
- In accordance with applicable laws, and our practices outlined in this Privacy Policy, obtaining consent from their parents or guardian(s) for the collection of personal data from their children;
- Limiting our collection of personal data from children to no more than what is reasonably necessary to attend an event;
- Giving their parents or guardian(s) access or the ability to request access to personal data we have collected from their children, as well as the ability to request that the personal data may be changed or deleted.
For additional information about our practices regarding children's personal data, please contact us at the contact details at the bottom of this page.
12. How can you stop the use of personal data belonging to you for direct marketing? There are several ways you can stop direct marketing communications from us:
- Click the 'unsubscribe' link in any email communication that we send you. We will then stop any further emails.
- You can contact us.
- Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated.
13.
Contact us If you have any questions or concerns about this Privacy Policy or our privacy practices generally, or if you would like to exercise your statutory rights, you can contact us at:
Mailing address: EO Space Oy
Aapelinkatu 10 B 9
02230 ESPOO, FINLAND
Attention: Legal Department
support@eo-space.com