Skip to content

Privacy policy

The Privacy Policy describes how Korkeasaari Zoo processes the personal data of its customers, partners and stakeholders. You have control over how your data is processed: we will tell you about your rights and how you can exercise them.

The Korkeasaari Zoo Foundation, Korkeasaaren eläintarhan säätiö sr, processes your data responsibly and lawfully. We only ask our customers and partners for information that is necessary for us.

Your data will be stored in the context of the conclusion of a contract or other transactions. We process your data for the purposes of performing the contract or our services, marketing and customer communications and customer service. We also use the data to target our marketing and communications to you. We want to continue to create better experiences, more engaging events and improve our operations, and the information we collect helps us to better understand our customers and partners and enables us to stay in touch with our customers.

1. Where do you collect information?

We collect information for example when you…

  • register as a user of our services or participate in an event or activity that requires registration,
  • give us marketing consent and receive communications from us,
  • make purchases in our online store or use our other online and mobile services,
  • participate in a marketing campaign or a marketing or opinion survey that we conduct,
  • provide us with feedback, submit a contact request or otherwise contact us;
  • are a contact person for one of our business or community customers or other stakeholders, or you are contacting us as a representative of a community you represent.

We also monitor the media at a general level to better understand our customers.

2. What kind of data do you collect?

The information we process may vary depending on which of our services you use and how you use them. You have control over what information we collect. Some of the information we receive directly from you, for example, when you shop online, register for an event or activity we organise, or participate in a campaign. Some of the information is obtained through cookies and similar technologies.

  • Name and contact information: we collect first and last name, address, email address, telephone number and other similar contact information.
  • Demographic information: we collect other descriptive information such as age and/or date of birth, language and country.
  • Identifying information: we collect registration information for electronic services, such as user ID and other similar security information.
  • Customer relationship information: we collect information about your purchases made in our online store or other service, reservations, benefits used, newsletters you receive (e.g. whether a message has been opened) or other activities, among other things. We also collect customer feedback and other communications. In certain claims situations, we may process health information to resolve our legal liability.
  • Payment information. Among other things, we collect information about the payment method you use and billing information if you order our products and choose to pay by invoice.
  • Representation data: we collect your position in the company or other entity you represent, as well as the name and contact details of that entity when you deal with us as a representative of your company or other entity or stakeholder group. We also collect other information necessary to manage the relationship with the company or other entity you represent.
  • When you participate in one of our marketing campaigns, such as a lottery or a contest, we collect the information you provide in connection with that campaign, as well as information about your participation in the campaign.
  • Market research and opinion polls: when we conduct market research and opinion polls, we may collect information to help us improve our services, business and products.
  • Marketing authorisations and marketing bans: we collect information on marketing authorisations and marketing bans.
  • Change information: if the above information changes, our systems may record information about the changes to ensure that the information is correct.
  • We may take photographs or video footage of you when we make changes to the information we collect. If we are specifically photographing you, and not for example a member of the public, we will ask for your consent to publish the image. In addition, for security reasons, your image may be recorded on our security cameras in the Korkeasaari area.
  • Access control data: the access control system collects information related to a person’s access and event, such as the time of access, and information about the person’s employer, role and vehicle.

3. What kind of cookies do you use??

We use cookies on our website to provide you with interesting content and to improve your experience. Cookies make it easy, fast and user-friendly to use our site by helping us to remember your choices and preferences. They also help us to develop the website and analyse usage data. Blocking or disabling cookies may interfere with some of the functions of our website.

A cookie is a small text file that is stored on a user’s device by an internet browser. Cookies do not harm the user’s terminal equipment or files and cannot be used to spread malware. Cookies alone do not allow the user to be identified. You can read more about cookies on the website of the Finnish Transport and Communications Agency Traficom.

You can manage cookies on our website in two ways: by changing the cookie settings in your browser, or by selecting the cookies allowed in the settings window that opens when you visit our website for the first time.

4. What is the data used for?

We process your data for the purposes of our operations, for example, to provide a service you have purchased or to perform another contract. As a general rule, we will ask you for your consent to process your data.

Online shops

You can order tickets through our online shop. We process your data to fulfil the contract and manage the customer relationship. In order to provide the service, we collect information when you place an order, such as your name and contact details, your customer relationship information, change information and your identification information to enable the delivery of your order.

When you place an order in an online shop, you usually also provide your data to the payment service provider and system administrator that enable the online payment, which may act as independent controllers of the personal data necessary to process the payment. The partners used by the online shop are indicated in the online shop concerned. We invite you to consult the privacy policies of such third parties. If you wish to review your data stored by a payment service provider, please contact the relevant party.

Booking systems and registration forms

Our booking systems allow you to make group bookings or book events or experiences. In order to fulfil your contract, we ask for information such as your name and contact details and your customer relationship details at the time of booking, so that we can make a booking under your name, confirm your booking and contact you, for example in the event of cancellations. The information stored in our reservation system is also passed on to the restaurant operator. We may also ask you for other information necessary to process your reservation. This may include, for example, food preferences, any mobility restrictions or, in the case of birthday invitations, the name and age of the birthday person. We also collect interest and change information based on the customer relationship.

Donations for conservation projects

Through our digital donation platform, you can make a one-off donation to a conservation project of your choice or become a monthly donor. To provide this service, we collect information when you make a donation, such as your name and contact details, and your chosen donation target.

When you make a donation through the Platform, you will usually also provide your information to the online payment service provider and system administrator, who may act as independent data controllers of the personal data necessary to process the payment. The partners used by the donation platform are indicated on the platform’s privacy page. We encourage you to consult the privacy policies of such third parties. If you would like to review your data stored by a payment service provider, please contact that provider.

Processing of personal data of customers, businesses and other stakeholders

In the course of our activities, we process data of customers, partners, suppliers and subcontractors and other stakeholders. We process your personal data in such contexts when you deal with us as a representative of a company, other entity or stakeholder group that you represent. We typically process data in this context for the performance of a contract or for legitimate interests. We may also ask for your consent to process your personal data, for example, where applicable law requires consent to send marketing communications related to your job or area of responsibility.

We process your data for the purposes of your visit, the performance of a contract or our services, customer communication and service, and the analysis, statistics, reporting and development of our activities. We also use your information to market our products and services and, for example, based on the information you provide about your interests in your work, we may target marketing to you in a way that is most useful to you in your work. If you receive such marketing communications related to your job or area of responsibility, you can opt out at any time by using the link at the end of the communication you receive.

When you deal with us as a representative of a company or other entity or stakeholder group, we collect, among other things, your name, contact details, position, function and/or title within the company or other entity you represent. We also collect information from publicly available sources, such as company websites, social media services and directories and contact databases maintained by public authorities or service providers.

Social media pages maintained by Korkeasaari Zoo (e.g. Facebook, Instagram)

If you have given feedback or made a complaint on our social media pages, we may redirect the processing of the feedback or complaint outside the channel in question, in which case we will process your data in the same way as we would in other customer service situations.

We also receive visitor data from our social media sites that is collected by the application in question when users visit Korkeasaari Zoo’s profile or interact with the site or its content. Such aggregated statistics help us understand how users interact with our social media pages. We process the information on the basis of legitimate interest.

Social media services are primarily responsible for complying with data protection legislation and enforcing data security and data subject rights.

5. How long will you keep my data?

We will not keep your data for longer than is necessary to fulfil the purposes described in this Privacy Policy and to comply with any other mandatory legislation, such as accounting legislation. The context in which your data is collected and the purpose for which it is collected will also affect the length of time we keep your data.

6. Who can process my data and do you disclose it to third parties?

Your data will be processed within Korkeasaari Zoo. We may disclose your data to authorities, for example, if we are required to do so by law. In addition, we may disclose your data in connection with a potential sale of a business or other business transaction to the buyer of the business or other relevant party in connection with the transaction.

We may disclose personal data to third parties in order to perform a contract. Such parties include, for example, our partners who provide payment facilitation services in our online stores or at our points of sale, who may act as data controllers of the personal data necessary for the payment facilitation and transportation. The partners used by a particular online store will be identified on that online store. We invite you to consult the privacy policies of such third parties.

For purposes related to camera surveillance and access control, data may be disclosed to public authorities where required by law.

We use services provided by third parties to process your personal data, but in such cases we will generally not disclose your data to them in such a way that they can use it for purposes other than those specified by Korkeasaari Zoo.

7. Will my data be transferred outside the EU or EEA, to a so-called third country?

If we use your data for electronic communications such as sending you a newsletter or collecting personalised customer feedback in the form of surveys, your data may be transferred outside the EU, for example the United States.

We may also transfer your data outside the EU or EEA in other situations where this is necessary for the purposes of the processing of personal data or for the technical maintenance of the data, provided that the conditions set out in the EU Personal Data Regulation are met, such as by carrying out the transfer using model clauses approved by the European Commission. We may also transfer your data to other third countries provided that the conditions set out in the EU Personal Data Regulation are met.

8. Who can I contact about the processing of my data?

The keeper of the register is Korkeasaaren eläintarhan säätiö sr. You can contact us via our customer service or feedback channel.

If you believe that, despite the principles set out in this Privacy Notice, we have violated your rights under personal data legislation, you can lodge a complaint with your local data protection authority. However, we recommend that you first contact the Korkeasaari Zoo’s customer service to resolve the matter.