Privacy Policy

This Privacy Policy (hereinafter “Policy”) explains how Avec Heli Events Oy collects and processes customers’ personal data. The processing of personal data complies with applicable legislation and follows the data protection principles of the EU General Data Protection Regulation (GDPR).

Data Controller

The data controller under the applicable data protection laws is Avec Heli Events Oy (hereinafter “Avec Heli Events Oy”, “we”, “us”, or “our”). Avec Heli Events Oy is responsible for ensuring that your personal data is processed in accordance with this Policy and applicable data protection laws.

Contact details of the data controller:

Avec Heli Events Oy
Business ID: 3415552-9
Address: Mannerheimintie 91 A 6, 00270 Helsinki, Finland
Email: heli@avechelievents.com

Data Protection Officer:

Address: Mannerheimintie 91 A 6, 00270 Helsinki, Finland
Email: heli@avechelievents.com

1. Collection of Personal Data

Your personal data is collected in various ways, depending on the situation. We collect and process personal data that:

• you provide to us when contacting us or doing business with us, e.g., during a customer relationship, when subscribing to our newsletter, or when requesting a quote or information;

• arises when visiting our website or making purchases in our online store;

• accumulates during the use or maintenance of our systems;

• we receive from our partners;

• we obtain through automated updates.

We collect and process the following categories of personal data:

• Basic information such as name and contact details (email, address, and phone number);

• Customer relationship data, payment details, invoicing information, and marketing consents or prohibitions;

• Customer communications and related correspondence, as well as records of data subject rights;

• Website usage data, such as information collected via cookies or similar technologies (device ID and type, operating system, and application settings);

• Log data.

2. Purpose and Legal Basis for Processing Personal Data

We only collect and process personal data necessary for conducting our business, managing customer relationships, and other legitimate purposes.

We process personal data for the following purposes:

Customer Relationship Management

To maintain and manage the relationship between you (or the company you represent) and us.
Legal basis: Contract.

Marketing

We may contact you to inform you about new products or to market and sell other products. We may also use personal data for market research and customer surveys.
Legal basis: Legitimate interest or consent.

Invoicing

We process personal data for invoicing purposes and to receive payments.
Legal basis: Legal obligation, contract, or legitimate interest.

Service Development, Data Security, and Internal Reporting

We process personal data to ensure the security, quality, and development of our services and website. We may also compile internal reports for business management based on personal data.
Legal basis: Legitimate interest.

Compliance with Laws

We process personal data to fulfill legal obligations, such as bookkeeping requirements or responding to lawful requests from authorities.
Legal basis: Legal obligation.

Other Purposes with Your Consent

We may process your personal data for other purposes if you have given your consent.
Legal basis: Consent.

For processing activities based on legitimate interest, we have conducted a balancing test to ensure that such processing is appropriate.

3. Transfers and Disclosures of Personal Data

We may transfer or disclose personal data to third parties:

• as permitted or required by law, e.g., in response to requests from competent authorities or in connection with legal proceedings;

• when our partners or subcontractors process personal data on our behalf;

• if we are involved in a merger, business arrangement, or sale of business or part thereof;

• when disclosure is necessary to protect our rights, your or others’ safety, to investigate misuse, or to respond to an official request;

• with your consent, to the parties covered by such consent.

We have entered into data processing agreements (DPAs) with our data processors, or data processing has been defined in the relevant contract. We instruct our processors and ensure that personal data is handled properly and appropriately.

4. Transfers of Personal Data Outside the EU or EEA

If data processing requires transferring personal data outside the EU or EEA, we use appropriate safeguards. We may transfer personal data outside the EU or EEA when our partners or their subcontractors are located outside these areas.

Squarespace Data Transfer Mechanisms

5. Retention of Personal Data

Personal data is retained only as long as necessary to fulfill the purposes defined in this Policy.

Personal data is retained for the duration of the customer relationship. After the customer relationship ends, data may be retained as necessary within the limits permitted or required by applicable law — for example, to respond to claims or legal actions. We also retain data as necessary to comply with your direct marketing opt-out requests.

Personal data is deleted when it is no longer necessary to fulfill legal requirements or the rights and obligations of either party.

6. Your Rights as a Data Subject

You have the following rights under the EU General Data Protection Regulation (GDPR):

• The right to be informed about the processing of personal data

• The right of access

• The right to rectification

• The right to erasure (“to be forgotten”)

• The right to restrict processing

• The right to object to processing

• The right to data portability

• The right not to be subject to automated decision-making

The applicability of these rights depends on the legal basis of the processing. Personal data that is necessary for the purposes defined in this Policy, or that must be retained by law, cannot be deleted.

If your data is processed based on consent, you have the right to withdraw your consent at any time. After withdrawal, we will no longer process your personal data unless another legal basis exists.

You can exercise your rights by sending a request to heli@avechelievents.com.

If you believe that your personal data is not being processed appropriately, you have the right to contact the Finnish Data Protection Ombudsman. You can find the Ombudsman’s contact details on their official website.

7. Cookies

We also use cookies and other similar technologies on our website avechelievents.com Cookies are small text files placed on your device to collect and remember useful information, and to improve our website’s functionality and usability. We may also use cookies and similar technologies for statistical purposes — for example, to compile usage statistics, understand how visitors use the site, and enhance the user experience.

You can block, restrict, or delete cookies through your browser settings. Please note that restricting cookies may affect the functionality and usability of our website.