Privacy Notice

In addition to our own contact database, we collect data for the joint Business Customer Relationship Management (Business CRM) personal data register maintained by the City of Tampere, Business Tampere and Visit Tampere. You can view the privacy notice for this register by clicking here.

Privacy Policy

Updated on 18 May 2026

This is Visit Tampere Oy’s privacy policy in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

Visit Tampere Ltd
Frenckellinaukio 1
33100 Tampere

www.visittampere.fi

2. The contact person responsible for the register

Markus Autio
, Controller / Data Protection Officer
, Visit Tampere Oy

Email: markus.autio@visittampere.fi
Telephone: 040 706 7980

3. Name of the register

4. Legal basis and purpose of processing personal data

The legal bases for the processing of personal data are:

the data subject’s consent
the legitimate interests of the data controller
a contract or the drafting of a contract.

Personal data is processed for the following purposes:

ensuring the functionality and security of the website
analysing and developing website usage
improving the user experience of the website
management of the image bank user register
organising competitions, prize draws and surveys
responding to enquiries
provision of newsletter and communication services
partnerships, event and stakeholder communications.

The data will not be used for automated decision-making or profiling.

5. Data content of the register

The following data may be processed in the register:

name
email address
organisation or company
cookie information
website usage and analytics data
information regarding the use of the image bank
information provided in connection with competitions, prize draws and surveys
event attendance details
the information contained in the enquiries.

This website uses cookies and analytics tools to monitor and improve the user experience. For example, Google Analytics is used to analyse visitor statistics.

The IP addresses of website visitors and cookies necessary for the functioning of the service are processed on the basis of legitimate interest, for example to ensure data security and to collect statistical data on website visitors in cases where such data may be considered personal data. Where necessary, separate consent is sought for third-party cookies.

Personal data will only be retained for as long as is necessary to fulfil the purposes of data processing or to comply with legal obligations.

6. Standard sources of information

Information is available:

from online forms completed by the user
when registering with the image bank
when taking part in competitions, prize draws and surveys
when registering for events and other occasions
about the analytics and cookie data collected when using the website
by email or through other means of contact.

7. Routine disclosure of data and data transfers outside the EU or the EEA

As a general rule, data will not be disclosed to third parties without the data subject’s consent, unless required by law.

Third-party services used on the website, such as analytics services, may process data outside the EU or the EEA in accordance with the service providers’ own privacy policies and applicable data protection legislation.

8. Principles of data protection

Personal data is processed with care and in appropriately secured systems. Access to personal data is restricted to those individuals whose job duties require them to process such data.

Information systems and servers are protected by appropriate technical and organisational security measures.

9. Rights of the data subject

A data subject has the right to request the erasure of their personal data from the register (“the right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain circumstances.

Requests must be submitted in writing to the data controller. If necessary, the data controller may ask the person making the request to verify their identity. The data controller will respond to the customer within the timeframe set out in the EU General Data Protection Regulation (usually within one month).

The data subject also has the right to lodge a complaint with the Data Protection Commissioner if they consider that the processing of their personal data infringes current data protection legislation.