1. Who is responsible for your data?
The controller is Ed Helsinki, Tax ID FI32437629, Topeliuksenkatu 35 A2, 00250 Helsinki, Finland. You can contact the controller at info@edhelsinki.com or +358 41 7930870.
2. What this website collects
The static website does not create customer accounts and does not currently load analytics or advertising trackers. The contact form prepares an email in your own mail application; it does not submit or store the form on this website.
If you send an enquiry, Ed Helsinki receives the information you choose to include, such as your name, email address, preferred tour, dates, accessibility needs and message. Hosting and security providers may also process basic technical logs such as IP address, browser information, requested page, timestamp and error or security events.
3. Bookings and payment
Public tour bookings are completed in the external Holvi booking shop. Holvi processes the information and payment details needed for checkout under its own privacy information. Ed Helsinki receives the booking details needed to confirm and deliver the tour and to meet accounting and legal obligations. This website does not receive or store card details.
4. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to enquiries and planning a tour | Contact details and message | Steps requested before a contract and legitimate interests in customer communication |
| Managing and delivering a booking | Booking, contact and tour details | Performance of a contract |
| Accounting, tax and legal claims | Transaction and correspondence records | Legal obligation and legitimate interests in establishing or defending legal claims |
| Keeping the site reliable and secure | Limited technical and security logs | Legitimate interests in protecting the website and visitors |
| Optional analytics, if introduced later | Online identifiers and usage events | Consent; no analytics is currently active |
5. Recipients and international transfers
Data is shared only where needed with service providers supporting hosting, email, booking and payment, professional advisers, or public authorities where the law requires it. If a provider processes data outside the European Economic Area, an adequacy decision or another safeguard recognised by Chapter V of the GDPR must be used.
6. How long data is kept
Enquiries are kept only as long as needed to answer and follow up the request. Booking and accounting records are retained for the periods required by Finnish law. Security logs are kept for a limited period appropriate to investigating reliability or abuse. Data may be retained longer when necessary to establish, exercise or defend legal claims.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or objection to processing. You may withdraw consent at any time without affecting earlier lawful processing. You also have the right to lodge a complaint with Finland’s Office of the Data Protection Ombudsman.
Send requests to info@edhelsinki.com. Identity may need to be verified before a request is completed.
8. Children, automated decisions and sales of data
The website is not designed to collect data directly from children. A parent or guardian should handle bookings and enquiries for a child. Ed Helsinki does not sell personal data and does not use solely automated decision-making that produces legal or similarly significant effects.
9. Cookies and changes
See the Cookie Policy for the current, analytics-free configuration. This notice will be updated before new purposes or tracking providers are introduced. Material changes will be identified by a new effective date.