Privacy Policy

1. Data Controller

Son of a Punch Oy (3300094-7)

Salomonkatu 17 A

00100 Helsinki

2. Contact Person for Register Matters

Name: Julia Kokki

Email: julia@sonofapunch.com

3. Name of the Register

Son of a Punch Oy Customer Register

4. Legal Basis for Processing Personal Data

The processing of personal data in the customer register is based on the customer relationship between Son of a Punch Oy and its consumer and business customers (legitimate interest). The data controller also processes customer data based on the agreement between the data controller and the data subject. The legal basis includes:

• Consent from the data subject
• Necessity for contract performance
• Legitimate interests of the data controller or a third party

5. Purposes of Processing Personal Data

Collected personal data is used to maintain and manage customer relationships, facilitate necessary contacts, reservations, sales, service delivery, payments, invoicing, and related control and collection matters.

6. Register Data Content

The data controller processes the following personal data of customers:

• First and last name, phone number, email address
• Reservation details
• Billing information
• Direct marketing preferences
• Service usage or purchases
• Customer feedback or complaints
• Company name and contact’s details for business customers

7. Sources of Personal Data

Data is collected from the Dinner Booking reservation system, our online shop's order system, direct interactions with the data subject, and contacts received by Son of a Punch Oy.

8. Recipients or Recipient Groups of Personal Data

Customer register data is not disclosed to external parties, except to authorities based on their legal information requests.

9. Regular Disclosures and Transfers of Data Outside the EU or EEA

Customer register data is not disclosed to external parties, except to authorities based on their legal information requests.

10. Register Security

Access to the customer register data is restricted to employees who need it for their work. Data processors include the booking system DinnerBooking APS and gift card shop Givito by We are Planet.

11. Data Retention Period

Personal data is retained only as long as necessary and according to statutory retention periods. The data controller regularly evaluates the necessity of retaining data and ensures that inaccurate, incorrect, or outdated personal data is erased or corrected without delay.

12. Data Subject Rights

Customers have rights to access, correct, delete, and restrict their data. Requests should be made to julia@sonofapunch.com.

13. Right to Lodge a Complaint with a Supervisory Authority

The data subject has the right to lodge a complaint with a competent supervisory authority if they believe their data is not handled according to regulations.

14. Requests Related to Data Subject Rights

Requests related to data subject rights should be addressed in writing to the contact person mentioned in section 2.

15. Updating the Privacy Policy

This policy was last updated on 14.8.2024. Son of a Punch Oy reserves the right to modify these data protection practices and update this policy accordingly.