Privacy Policy

1. Data Controller Information

This Privacy Policy outlines how CityEventGuides Oy ("we", "us", "our") collects, processes, and protects your personal data when you visit our physical venue or access our official website at cityeventguides.com. We operate a physical Scandinavian & European bistro and 18+ private recreational card lounge located at Mannerheimintie 14, 00100 Helsinki, Finland.

2. Personal Data We Collect

We process personal data strictly necessary to facilitate table reservations, manage private lounge bookings, respond to guest inquiries, and maintain a safe hospitality environment:

• Reservation & Contact Details: Full name, telephone number, email address, party size, reservation date/time, and special dietary or seating requests submitted via our reservation form.
• Age Compliance Records: Local storage verification tokens used solely on your device to remember 18+ age acknowledgment for our private card room.
• Communication Data: Records of correspondence, feedback, and special event inquiries sent directly to our hospitality team.
• Technical Server Metrics: Anonymized server log entries including IP addresses, browser types, referral URLs, and timestamps to preserve platform security.

3. Legal Grounds for Data Processing

Under Article 6 of the General Data Protection Regulation (EU GDPR), our data processing operations rely on the following legal bases:

1. Performance of Contract (Art. 6(1)(b)): Processing is necessary to manage your table reservation or private card room booking.
2. Legal Obligation (Art. 6(1)(c)): Compliance with Finnish accounting laws, consumer protection statutes, and 18+ age restriction requirements for licensed premises.
3. Legitimate Interests (Art. 6(1)(f)): Maintaining physical and digital security, preventing fraud, and optimizing venue operations.

4. Data Retention & Security Measures

We implement robust technical and organizational security measures to protect your personal data against unauthorized access, loss, or alteration. All reservation details are stored in encrypted databases. Dining reservation data is securely archived for 90 days following your visit before automatic deletion, except where extended retention is mandated by Finnish tax and accounting laws.

5. Data Sharing & Third Parties

We never sell, rent, or trade guest data to third-party marketing companies. Personal data is shared only with trusted service providers who assist in our operational workflows (e.g., secure cloud hosting providers and transactional email systems bound by strict Data Processing Agreements).

6. Your Data Rights Under EU GDPR

As a data subject residing in the European Economic Area (EEA), you possess the following enforceable rights under GDPR regulations:

• Right of Access: Request a copy of all personal data held about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request immediate deletion of your data when no legal retention obligation exists.
• Right to Restriction of Processing: Request temporary suspension of data processing during disputes.
• Right to Object: Object to processing based on legitimate interests at any time.

To exercise any of these rights, please contact our Data Protection Officer at privacy@cityeventguides.com. We respond to all verified requests within 30 days without charge.

7. Supervisory Authority Contact

If you believe our data processing practices violate applicable data protection laws, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman)
Address: Lintulaidankatu 6, 00530 Helsinki, Finland
Email: tietosuoja@om.fi | Website: tietosuoja.fi