Skip to content
[email protected]
Flowpark logo
Benji

Privacy Notice

FLOWPARK OY PRIVACY NOTICE

This privacy notice explains how Flowpark Oy processes personal data in connection with its services, website, customer relationships and marketing activities.

1. DATA CONTROLLER

Flowpark Oy
Business ID 2292908-0
Skanssinkatu 10
20730 Turku
Finland
+358 400 315 181

2. CONTACT PERSON FOR DATA PROTECTION MATTERS

c/o Janne Kalhama
Email: [email protected]
Tel. +358 400 427 828

3. PURPOSES OF PROCESSING PERSONAL DATA

Flowpark Oy processes personal data for purposes related to customer relationships and the provision, development and marketing of its services.

  • managing, developing and analysing customer relationships
  • customer communications and customer service
  • sales, distance sales and the processing of reservations
  • planning and targeting marketing communications where permitted by law
  • developing, planning and monitoring Flowpark’s services and business
  • conducting surveys, competitions, prize draws and events

4. PERSONAL DATA PROCESSED

Customers making reservations by email:

  • name, address, telephone number, email address and billing information
  • for business and organisational customers, company billing information

Customers purchasing tickets from the online shop:

  • name, address, telephone number and email address

Newsletter subscribers:

  • name and email address

Customers participating in climbing activities:

  • information provided in connection with safety instructions, such as name, telephone number, email address, date of birth, nationality and direct marketing consent
  • for minors, the name and contact details of a parent or guardian where required

Technical information generated when using the website:

  • IP address, browser and browser version, referring page, cookies and related technical information where such information constitutes personal data

Marketing and promotional information:

  • information concerning marketing activities directed at or participated in by the data subject, including competitions, prize draws and events

5. SOURCES OF PERSONAL DATA

Personal data is primarily collected directly from individuals when they visit a Flowpark adventure park, purchase tickets from the online shop, make a reservation, subscribe to a newsletter or participate in a campaign, competition, prize draw or event.

Where permitted by applicable legislation, information may also be obtained or updated from Flowpark Oy’s service providers, partners, public authorities and publicly available sources. In the case of business customers, information may also be obtained from company registers and company websites.

6. DISCLOSURE OF PERSONAL DATA AND INTERNATIONAL TRANSFERS

Personal data may be disclosed where required or permitted by applicable legislation, for example to Flowpark Oy’s service providers and partners where this is necessary for providing the services.

Flowpark Oy may use service providers that process personal data on its behalf. Such service providers may only process the data in accordance with Flowpark Oy’s instructions and applicable data protection requirements.

Personal data may also be disclosed to competent authorities where required by law and, where appropriate, in connection with corporate transactions or reorganisations.

If personal data is transferred outside the European Economic Area, Flowpark Oy will use the safeguards required by applicable data protection legislation.

8. PRINCIPLES OF DATA SECURITY

Personal data processed electronically is protected using appropriate technical and organisational measures, such as access controls, passwords, firewalls and other generally accepted information security measures.

Access to personal data is restricted to employees and authorised service providers who require the information for their work. Paper records containing personal data are stored in premises protected from unauthorised access.

9. RIGHTS OF THE DATA SUBJECT

Subject to the conditions laid down in applicable data protection legislation, you may have the right to access personal data concerning you, request the rectification or deletion of inaccurate or unnecessary information, request restriction of processing, object to certain processing and withdraw consent where processing is based on consent.

Requests concerning personal data may be sent to [email protected] or to:

Flowpark Oy
Skanssinkatu 10
20730 Turku
Finland

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that your personal data has been processed unlawfully.

10. CHANGES TO THIS PRIVACY NOTICE

Flowpark Oy may update this privacy notice as its services, processing practices or applicable legislation change. The current version of the notice is available on the Flowpark website.

11. FLOWPARK NIGHT COURSES GAME AND LEADERBOARD

Flowpark Oy processes personal data in connection with the Flowpark Night Courses game available on its website and the game’s public leaderboard.

Data processed

A submitted game result may include the nickname selected by the player, the course played, score, number of carabiners collected, finishing time shown by the game clock, remaining lives and the duration of the game performance.

An email address and consent information are also processed if the player voluntarily provides an email address at the end of the game.

The game does not require the player to provide their real name, age or location. Players are advised not to use their full real name as their nickname. Normal technical server information, such as an IP address, may also be generated when the online service is used.

Purpose and legal basis

The nickname and game result information are processed in order to operate the game and its leaderboard and to develop the service. The legal basis is Flowpark Oy’s legitimate interest in providing and developing its online service and leaderboard in accordance with Article 6(1)(f) of the EU General Data Protection Regulation.

An email address and the player’s selected prize park are processed to reward the best-performing players, direct the prize to the park chosen by the player and contact the winner, based on the player’s consent under Article 6(1)(a) of the GDPR. Winners are selected from among the best-performing players. One winner is selected for each of the Turku, Tampere and Vierumäki parks. Each winner receives tickets for two people to Moonlight Climbing at the respective park.

Providing an email address is voluntary. The game and leaderboard can be used without providing an email address. The email address will not be used for marketing communications without separate permission.

Retention period

Email addresses and prize park selections provided through the game will be deleted no later than 31 January 2027, after the winners have been selected and the prizes have been delivered.

Nicknames and game results will be deleted no later than 31 December 2026, or earlier if the leaderboard is discontinued.

Service providers and recipients

The game leaderboard uses database and online services provided by Supabase Inc. Supabase processes information on behalf of Flowpark Oy. The project’s primary data is stored in the server region selected for the Supabase project. Supabase may use subprocessors in providing its services.

Where personal data is transferred outside the European Economic Area, applicable safeguards required by data protection legislation are used.

Public leaderboard

The player’s nickname and score may be visible to all visitors on the public leaderboard. The player’s email address is not displayed on the leaderboard.

Inappropriate nicknames

Flowpark Oy may prevent or remove a nickname that is offensive, impersonates another person or is otherwise inappropriate.

Information stored on the player’s device

The game stores the most recently used nickname, unlocked courses and best scores in the browser’s local storage so that the player can continue later.

This local storage does not by itself transmit the information to Flowpark Oy. Information submitted to the shared leaderboard is transmitted separately when the player submits a result. Local information can be removed by clearing the browser’s stored website data.

Player’s rights

A player may request deletion of personal data connected with a game result by contacting [email protected].

Because a result is stored under a nickname rather than the player’s real name, the request should include the nickname used and, where necessary, other information required to identify the result. If an email address has been provided, consent to its processing may be withdrawn in the same way.