PRIVACY NOTICE

This privacy notice describes how Kaatolupa Oy processes the personal data of its current, potential, and active service-using customers in its customer relationship operations. Kaatolupa Oy is committed to complying with Finnish data protection and privacy legislation, the EU General Data Protection Regulation (GDPR), and other applicable laws.

Controller
Rekisterinpitäjänä toimii Kaatolupa Oy, y-tunnus 2302974-6
Ratsukatu 3, 02100 Espoo.

Contact for Data Protection Matters
Jaana Puhakka, 0400-618959, jaana.puhakka@kaatolupa.fi

Name of the Register
Kaatolupa Oy Customer Register

Legal Basis for Processing
Processing is based on the data subject’s consent, the controller’s legitimate interest, or a contract between the data subject and Kaatolupa Oy.

Purposes of Processing
Personal data is used for customer relationship management and development, statistical analysis, customer communication, bowling lane and facility reservations, locker and shelf rental registry management, sales, payments, invoicing, debt control, marketing, and business planning. Data is processed only as long as necessary. Employees handling the data are bound by confidentiality.

Personal Data Processed
The controller processes customer-provided data such as name, phone number, email address, and direct marketing consent. Additional details, such as address information, may be collected for purchasing and invoicing. For business customers, the register includes contact person information and direct marketing opt-out details.

User Tracking
We use Leadoo user tracking to monitor how users navigate our website. We combine this data with user information collected through interactions such as chat and forms. Leadoo uses etag tracking, which technically differs from cookie-based tracking but is subject to the same legal principles as cookies. Please review the privacy policy of Leadoo Marketing Technologies Oy (https://leadoo.com/privacy-policy/) for more detailed information about what data is tracked in the system. With regard to the GDPR, we act as the data controller and Leadoo acts as the data processor.If you do not want to be tracked, you can clear your browser cache. For more information about how Leadoo operates, please see: https://leadoo.com/privacy-policy-processor/

Sources of Data
Personal data originates from the data subject, service usage, third parties, or
data generated by the controller.

Recipients of Data
Data may be disclosed to authorities based on legal requests and to third-party software service providers. Marketing service providers outside the EU may be used under GDPR-compliant safeguards, such as EU Commission model clauses.

Retention Period
Data is retained for the duration of the customer relationship and as long as necessary for claims, feedback handling, invoicing, debt collection, and business analysis. Some data may be retained longer due to accounting or legal obligations. At the end of a customer relationship, data may be moved to a marketing register unless the individual has opted out.

Data Subject Rights
The data subject has the right to access, correct, delete, restrict, and transfer data as well as to object to processing based on legitimate interest. Requests must be submitted in writing and may require identity verification.

Updates
Kaatolupa Oy may update this privacy notice to comply with changing legislation or business needs.

Updated: March 10, 2026