1. Data controller
Finnish Museum of Natural History / University of Helsinki
P.O. Box 17 (Pohjoinen Rautatiekatu 13)
00014 University of Helsinki
University of Helsinki’s business ID: 0313471–7
2. Contact regarding the register
Hanna Hyvönen
Pohjoinen Rautatiekatu 13, 00100 Helsinki
Tel. +35850 477 3356
3. Purpose and legal basis for the processing of personal data
The legal grounds for the processing of personal data are those listed in Article 6 of the GDPR. Personal data are processed for registration and invoicing of guided tours and events booked through the Timeworks booking system. Personal data can be processed for booking and cancelling the service, communication, contact, invoicing and feedback.
The register does not do automated decision-making or profiling.
The data are not used for other purposes or disclosed to third parties.
4. Data content of the register and storage time
The following data are stored in the register:
The booking website itself does not store personal data. Instead, they are transferred to the underlying Timeworks software. The software is maintained by Mercantus Oy.
Person data are processed by the persons responsible for the guided tours and events. In addition, employees of Mercantus Oy can log in to the system for technical support and maintenance.
Personal data are stored for two years, after which they are automatically removed from the system.
5. Regular sources of data
The data are obtained from customers through the booking site or by email or phone.
6. Regular disclosures of data and transfers outside the EU or EEA
Data are not disclosed or transferred outside the EU/EEA or to third parties.
7. Protection of the register
The processing of data in the data file is carried out with due care, and the data located on the internet servers are appropriately protected. Stored data as well as server access rights and other data critical for the security of personal data are processed confidentially.
8. Rights
You have the right to inspect your own data entered in the data file and to request any corrections in it. You also have the right to restrict the processing of your personal data or to erase it. Please, be in contact with the register’s contact person to make any changes in your personal data.
9. Right to lodge a complaint
If you have questions or concerns about the processing of your personal data, you may always contact us. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman if you consider that the processing of your personal data has infringed applicable data protection legislation.
Contact details:
Office of the Data Protection Ombudsman
Switchboard: +358 29 56 66700
Registry: +358 29 566 6768
Email: