Privacy policy

Privacy policy (in accordance with Section 10 of the Personal Data Act)

1. Controller

BioRex Cinemas Oy
Business ID: 1745591-7
Postal address: Viipurintie 4, 13200 Hämeenlinna

2. Contact person in charge of records

Email: tietosuoja@biorex.fi

3. Name of records

BioRex Cinemas Oy customer records

4. Purpose of processing personal data

Data in the customer records may be used by BioRex and any company that belongs in the same chain for the purpose of service provision, management and maintenance of customer relations, billing, distance selling, studies on the service use, further development of the service, direct marketing, polls and market research. In addition, data may be used, without disclosing the customers’ personal data, to target the advertising of BioRex’s business partners that are part of the same chain.

5. Records’ data content (data subject group(s) and the related data or datasets)

  • Contact details
  • Age/Date of birth
  • Gender
  • Data on buying behaviour
  • Billing information
  • Delivery information
  • Profiling information and customer feedback provided by customer
  • Information on opting out of ads.

6. Regular sources of information

Information provided by customers (by phone, via internet or other similar way).

7. Regular disclosure of data and transfer of data

No data will be disclosed outside BioRex Cinemas without advance notification.

8. Transfer of data outside the EU or the EEA

No data is disclosed outside the EU or the EEA.

9. Protection of the records

The database and equipment in which the recorded data is located are protected by technical means. The database can only be accessed by the necessary individuals. The devices are adequately guarded.

10. Right to check and rectify

According to the Personal Data Act, a data subject has a right to check what type of personal information has been recorded about them in the records. Requests to do so must be made in writing by post to BioRex Cinemas. BioRex will rectify, erase or amend any inaccurate, unnecessary, incomplete or outdated personal data in the records, either proactively or on request by the data subject. The data subject must contact BioRex Cinemas’ customer services to rectify their data.

Privacy policy – Camera surveillance

1. Controller

BioRex Cinemas Oy
Business ID: 1745591-7
Postal address: Verkatehtaankuja 3, Hämeenlinna

2. Contact person in charge of records

Email address of the data protection officer: tietosuoja@biorex.fi

3. What personal data do we process?

We process videos and other visual material of people and vehicles moving within the camera-controlled areas of BioRex Cinemas Oy (such as its operating facilities and business premises). The relevant dates and times are recorded alongside the visual material.

4. How do we collect personal data?

Equipment for camera surveillance has been installed in the company’s premises and other areas managed by the company. Camera surveillance is used to record and store visual and personal data of individuals moving within the area covered by the camera surveillance. The camera surveillance in the area is indicated with signs.

5. Why do we process your personal data?

We process personal data in order to fulfil BioRex Cinemas Oy’s statutory obligations, rights and compelling reasons, in order to guarantee the legal protection and safety of its employees, partners and customers, protect the information and property of the employer, employees and customers, and prevent and investigate criminal offences. 

Personal data is also processed to investigate cases of misuse and false alarms, and to recognise and identify people in the premises. Furthermore, the information can be used to carry out installation and maintenance work. We may also process anonymised or statistical data which cannot be linked to specific individuals.

6. To whom do we disclose your personal data?

Data may be disclosed to the supervisors, external contact persons, customers and/or the authorities (e.g. the police) to the extent permitted and required by law.

Data may be transferred to subcontractors that we have commissioned to process it on behalf of BioRex Cinemas Oy. Subcontractors may not use this personal data for anything other than the provision of the service that we have agreed on. When using subcontractors, we will ensure that the processing takes place in an appropriate manner and in accordance with this privacy policy and the privacy statement.

As a rule, data is not transferred outside the EU or the EEA.

If transferring personal data outside the EU or the EEA, we will ensure through agreements (for example by using the EU Commission’s agreement clause template) or other means that the transfers are carried out as required by law.

7. Data security

The data is stored in locked premises or cabinets and only processed by persons who need it for their work duties. The camera surveillance systems are in a closed network. Access to the application has been restricted with specific access rights.

8. Data retention time 

We will only keep your personal data for as long as it is necessary to complete the purposes specified in this privacy policy, unless otherwise required by law. There are no corresponding restrictions on storing anonymised data. We will not store outdated or unnecessary data. We endeavour to ensure that your personal data is up-to-date and correct.

As a rule, video recordings are stored until the camera system records new footage over them. This period is about six months in length. If a recording is needed for the above purposes for longer than that, it will be retained for as long as required.

9. Data subjects’ rights

Under the EU General Data Protection Regulation, you have a number of rights. Depending on the circumstances, you may be entitled to:

  • receive confirmation on whether your personal data is being processed and, when it is processed, you have a right to access this data
  • have your incorrect personal data corrected or, in some cases, have incomplete data amended
  • erase your personal data
  • restrict the processing when certain conditions are met
  • obtain the personal data you have submitted to us in a structured, commonly used and machine-readable format; you also have a right to have that data transferred to another controller
  • oppose the processing of your personal data in situations where the data is processed on the basis of a legitimate interest
  • withdraw your consent at any time if the processing of your personal data is based on consent.

According to the Personal Data Act, a data subject has a right to check what type of personal information has been recorded about them in the records. Requests to do so must be made in writing by post to BioRex Cinemas. BioRex will rectify, erase or amend any inaccurate, unnecessary, incomplete or outdated personal data in the records, either proactively or on request by the data subject. The data subject must contact BioRex Cinemas’ customer services to rectify their data.