Privacy policy
The controller is required by the GDPR to inform data subjects clearly. This notice fulfils that obligation.
Name of the register
Customer register of the hob.fi booking system
Controller
Solute Oy
2067981-5
Hirsitie 6
16300 Orimattila
+358447671369
info(at)solute.fi
Purpose of processing personal data
We process data in the register based on the customer relationship to manage customer relationships, direct marketing and other communication. The customer register data may be used for our own or partner marketing unless the customer has prohibited direct marketing.
Data content of the register
The register may contain the following data: customer’s name and contact details (email and phone number), information provided by the customer, data related to the customer relationship and contracts, and technical data about the use of the system.
Rights of the data subject
The data subject has the following rights, and requests to exercise them must be sent to the controller. We may ask the data subject to clarify the request in writing and verify identity before handling it.
Right of access
The data subject may request a copy of their personal data.
Right to rectification
The data subject may request correction of inaccurate or incomplete data.
Right to object
The data subject may object to the processing of personal data if they believe it is unlawful.
Right to object to direct marketing
The data subject has the right to prohibit the use of data for direct marketing.
Right to erasure
The data subject has the right to request deletion of data when processing is no longer necessary. We will process the request and either delete the data or provide a justified reason why it cannot be deleted. The controller may have a legal or contractual obligation to retain certain data.
Right to lodge a complaint
The data subject has the right to lodge a complaint with the data protection authority if they consider that we are infringing data protection laws when processing personal data.
Regular sources of data
We obtain the data primarily from the customer when the customer relationship is created.
Regular disclosures of data
We do not sell or disclose customer data to third parties. Personal data may be disclosed to our subcontractors insofar as they participate in the purposes of use described in this notice. A partner responsible for technical maintenance may transfer data in accordance with applicable data protection law and this privacy policy.
Duration of processing
Personal data is generally processed for as long as the customer relationship is valid. Data may also be stored longer if required by applicable law or contractual obligations towards third parties.
Processors of personal data
The controller and its employees process personal data. We may also partially outsource processing to third parties insofar as they participate in the purposes described in this notice. Organisers of hobby activities and their officers process data as part of enabling the activities.
Principles of register protection
Customer data is stored in our information system. Only named persons who need the data to perform their duties and who have personal user credentials may access the register. Persons processing the data are bound by confidentiality. Any disclosure of personal data involves risks and no technique or process is entirely secure. We strive to use appropriate technical and organisational measures to protect personal data.
Transfer of data outside the EU
Servers are located within the EU. Data is currently not transferred outside the EU. However, data may be transferred outside the EU if this is technically necessary.
Automated decision-making and profiling
We do not use personal data for automated decision-making or profiling.
Changes to this privacy policy
This privacy policy may be updated from time to time for example due to changes in legislation. This notice was last updated on 7.8.2025.