Privacy and cookies

Privacy statement for Finnkino web services


1. Controller

Finnkino Ltd (hereinafter referred to as “Finnkino” or “we”) collects, stores and handles personal data as a controller in order to provide the Finnkino website, mobile app and associated services (hereinafter also referred to as “services”). Finnkino is committed to compliance with applicable legislation in its operations. This privacy statement describes our policy regarding the handling of personal data. Finnkino shall collect, store and otherwise handle personal data in accordance with this privacy statement and the register descriptions of separate registers.  

We are committed to protecting your privacy. We respect the confidentiality and security of your personal information. The primary reason for handling personal data is a customer relationship or other pertinent connection, or the consent of the data subject.

Please do not use the Finnkino website, mobile app or services if you do not agree with this privacy policy.

2. What personal data do we collect?

We may collect your personal data when you visit the Finnkino website or mobile app, for example, IP address, date and time of browsing, which website you came from, which website you go to next, what links or ads you click on and what ads or other content you have watched, how long the session lasts, your browser or application type, and other similar data. We may also handle data that is profiled or derived through website analytics.

We handle data that you provide yourself, for example, through customer feedback. We also handle data provided when purchasing products or services, such as your account information, credit card information, as well as data on your language selections and other similar choices. We may also obtain personal data from direct marketing companies and other similar public sources.

If you join our customer programme, we will handle data related to the customer programme, such as data on customer type, your purchases, downloads as well as the data you provide us. We also handle delivery information about products and services, payment information, data about your contact with us, and other similar data describing the interactions between Finnkino and a customer, such as data on customer communications and direct marketing. Further information on the handling of customer-related data is available in the register description for the person register of Finnkino’s customer programme.

Finnkino’s products and services are typically intended for all audiences. However, Finnkino does not knowingly collect the personal data of children under the age of 15 without the consent of their parents or guardians.

3. Why do we handle personal data?

We only handle your personal data for predefined purposes. We may handle your personal data to manage your bookings and purchases, as well as to fulfil other similar obligations.  

Joining Finnkino’s customer programme requires you to create a customer profile. More information on the handling of personal data related to your customer profile is available in the register description for our customer programme.

We may handle your personal data to develop and manage Finnkino products and services, as well as sales and marketing, and to develop user experiences. We may combine data collected in connection with different services insofar as the data has been collected for the same purpose, and we may produce statistics to the extent required for the development of products and services. We may also handle your personal data to prevent and investigate misuse.

4. Customer communications and marketing

We may handle your personal data to receive and respond to customer feedback. Your personal data may be handled for the purpose of customer communications; for example, we may send you notifications about our products.

We may handle your personal data as permitted by law to market the products and services of Finnkino and its partners, as well as for market research and customer satisfaction surveys. We may handle your personal data to make our products and services more personal and more targeted, for example, by making recommendations and showing you targeted content in our services. We may also target you with marketing based on location data.

Even if you prohibit direct marketing, we may still send you notifications regarding Finnkino and our services; for example, notify you of fault situations and disruptions in services, as well as contact you for this purpose.

5. Do we disclose or transfer personal data?

We do not sell or otherwise disclose your personal data to third parties without your consent, with the exception of situations described in this privacy statement or Finnkino register descriptions. We may disclose your personal data to third parties for direct marketing purposes, as well as for opinion and market research and other similar surveys.  We may also transfer your personal data to our service providers.

In addition, we may disclose your personal data based on currently applicable law or a mandatory stipulation from the authorities. Further, we may disclose or otherwise handle your personal data in accordance with applicable law to defend Finnkino’s legitimate interests.

We may also disclose your personal data to a prospective buyer or their adviser in connection with mergers and acquisitions.

As a rule, we do not transfer data outside of the EU or the EEA. If we transfer data outside of the EU or the EEA, we will ensure that the level of protection for the handling of personal data is sufficient in accordance with applicable law.

6. What do we do to protect your personal data?

We produce and design all our services with privacy and information security in mind. Databases are protected by firewalls, passwords and other technical means against external data breaches. We take proper care of telecommunications security and the risks related to handling personal data, taking into account the likelihood of the risk and the nature of the protected data. We restrict access to databases containing personal data strictly to authorised persons with a legitimate need to handle the personal data in question.

Our services may include links to third-party websites or services with their own applicable privacy policies. We recommend that you carefully review the privacy policies of such third parties separately. Finnkino is not responsible for the privacy policies or personal data handling of such third parties.

7. Cookies and location data

We use cookies and other similar technologies on our website to serve our customers to the best of our ability. A cookie is a small text file that can be delivered to the user’s terminal device via the service. Cookies are used, for example, to enable the functionalities of our web service, such as logging in, the shopping cart feature and the “Invite Your Friends” function.

Cookies are used to collect data about, for example, the terminal devices used by visitors and their behaviour in the service, including information on the website from which the user has arrived at the service, the browser used by the user and what section of the service the user has browsed. This data is used, for example, to develop the user comfort of our web service, to analyse user data, for customer research, to personalise content, as well as for advertising management and targeting communications and marketing.

With our permission, third parties may place cookies on our website in order to provide us with data or to provide a customised user experience. Third-party cookies are used, for example, to implement the “Invite Your Friends” function. 

You have the option of preventing the use of cookies in whole or in part at any time by changing your browser settings. You can also choose to delete previously stored cookies. However, please note that preventing the use of cookies may affect the use of some parts or functions of our website and services, or even block them altogether.

Finnkino’s services and features that are based on location data utilise network-based location data. We will handle your location data if you have given us your express consent to handle it. If you have not consented to the handling of your location data, you cannot use any Finnkino services that are based on location data. Finnkino does not use this data to identify you personally. When you use our services that are based on location data, such as location-based searches, we may handle your location data to provide the correct content.

8. Right to inspect, rectify and prohibit

You have the right to inspect what data we have collected about you in accordance with the Personal Data Act. The inspection request should be addressed personally or in writing, signed and then sent to the contact person mentioned at the end of this privacy statement.

We strive, by reasonable means, to update outdated personal data and remove unnecessary personal data. You can partially manage your personal data yourself in our services. We urge our customers to review their personal data from time to time as far as possible, because it is the customer’s responsibility to report changes.

You have the right, within the limits permitted by law, to demand that incorrect, unnecessary, incomplete or outdated personal data be rectified or removed. We also try to rectify incorrect or outdated data on our own initiative if we find shortcomings in the data or its up-to-dateness.

You may prohibit us from handling your data for the purposes of direct advertising, remote sales or other direct marketing, as well as market and opinion research.

9. Changes to this privacy statement

Finnkino may periodically make changes to this privacy statement. We recommend that you review the privacy statement regularly so that you may be informed of any changes made.

10. Contact us

You may also contact us on matters related to privacy:

Finnkino Ltd

Business ID: 0647239-1

Address: Mannerheimintie 113, 00280 Helsinki, Finland

Tel.: +358 (0)9 131 191 


Person responsible for register issues:

Sina Aalto, CRM Specialist


Register description in accordance with Section 10 of the Personal Data Act (523/99)


1. Controller

Finnkino Ltd (“Finnkino”)
Business ID: 0647239-1
Address: Mannerheimintie 113, 00280 Helsinki, Finland
Tel.: +358 (0)9 131 191

2. Person responsible for register issues or contact person

Sina Aalto, CRM Specialist


3. Name of register

Person register of Finnkino’s customer programme

4. Purpose of handling personal data

The data in our customer programme’s person register may be used to produce services related to Finnkino’s customer programme, to manage and maintain the customer relationship, for invoicing, remote sales, service usage research and further development of the service, direct marketing, as well as opinion and market research.

The data may also be used to target the advertising of a partner of a company belonging to the same group as Finnkino, although without disclosing the customer’s personal data.

5. Data content of the register

The following personal data and associated changes may be handled in the customer programme’s person register:

  • Name
  • Contact details, such as phone number, e-mail address and home address
  • Age/date of birth
  • Customer language
  • Gender
  • E-mail address
  • Start and end date and method of the customer relationship and/or pertinent connection
  • Information related to communications, the management of the customer relationship and other pertinent connections (e.g. user name and password to the controller’s electronic services, ordering and purchasing behaviour data, feedback, complaints)
  • Username and password
  • Ordering and purchasing behaviour data
  • Information on customer type (e.g. pensioner, conscript or student)
  • Information on S-Etukortti or K-Plussa card
  • Invoicing and collection information
  • Profiling and customer feedback information provided by the customer
  • Information on the use of electronic services and content (e.g. newsletter subscription), technical data sent by a registered browser to the controller’s server (e.g. IP address, browser, browser version, the website from which the data subject has visited our site), as well as the cookies sent to the browser of the data subject if personal data is connected to the cookies
  • Information related to marketing and sales promotion, such as marketing measures targeted at the data subject and participation in them (e.g. participation in marketing raffles, competitions and events), as well as direct marketing permissions and direct marketing prohibitions
  • Location data

6. Regular sources of data

Data is primarily collected from the data subject. Data may also be collected from Finnkino’s systems that store data handled in the register. Personal data may also be collected and updated from the registers of companies belonging to the same group as Finnkino, registers of Finnkino’s partners, as well as authorities and companies providing services related to personal data.

Finnkino may also collect personal data from other sources with the consent of the data subject.

7. Regular data disclosure and data transfer

At the discretion of Finnkino, data may be disclosed within the limits permitted and required by prevailing law, for example, for the marketing purposes of Finnkino’s partners, unless the data subject has prohibited the disclosure of said data. In principle, disclosure of data may only take place for purposes that support the business concept of Finnkino’s customer register and where the purpose of the data is not incompatible with the purposes of Finnkino.

Data may also be disclosed as required by competent authorities or other parties based on prevailing law.

Data may be transferred to partners selected by Finnkino that handle data on behalf of Finnkino based on the cooperation agreement between the parties. In such cases, data handlers have no right to handle the transferred data for their own purposes in their own person registers.

As a rule, data is not transferred outside of the member states of the European Union or the European Economic Area unless it is necessary for the above-listed personal data handling purposes or the technical implementation of data handling, in which case the requirements of the Personal Data Act shall be complied with in the transfer of data.

8. Principles of register protection

Databases related to the register are protected by firewalls, passwords and other technical means against external data breaches. The databases and their backups are located in locked premises where unauthorised access is prohibited. Only specified individuals appointed by Finnkino have access to the data contained in the register. The persons handling the data may not disclose this data to third parties during the employment relationship or after it has ended.

9. Right to inspect and rectify

The data subject has the right to inspect information about him/her that has been stored in the register in accordance with the Personal Data Act. The inspection request should be addressed personally or in writing, signed and then sent to the contact person of the person register.

Finnkino will correct, remove or supplement personal data in the register that is incorrect, unnecessary, incomplete or outdated in terms of the purpose of handling on its own initiative or at the request of the data subject. The data subject should contact the contact person of the person register to rectify the data.