Including social media and analytical tools

1) Contact details of the controller and data protection officer
This privacy notice concerns the processing of data by.

Controller: All Things Live Finland Oy (hereinafter “Hellsinki Metal Festival”), Pursimiehenkatu 29E, 00150 Helsinki, Finland

E-mail: info(at)helsinkimetalfestival.fi

2) Collection and storage of personal data and the nature and purpose of their use
a) During your visit to the website
When you visit our website www.wknd.fi, your terminal server automatically sends data to our website server. This data is temporarily stored in a so-called log file. The following data is stored without any action by the user and is kept until it is deleted:

– IP address of the visiting computer
– date and time of the visit
– the name and URL of the file downloaded – the website from which the page was accessed (referring URL)
– the browser used and sometimes the operating system of your computer and the name of your service provider

We process the above information for the following purposes:

– to ensure a pleasant use of our website
– assessing the safety and stability of the system
– for administrative purposes

The legal grounds for processing data are set out in Article 6(1)(1)(a) and (b) of the General Data Protection Regulation (GDPR). Our legitimate interest in processing your data arises from the purposes listed above. Under no circumstances will we use the information collected to identify individuals.

In addition, we use cookies and analytical services on our website. For more detailed explanations, please refer to sections 4 and 5 of this Privacy Policy.

b) When you register to receive our newsletter

If you have expressly given your consent in accordance with Article 6(1)(1)(a) of the GDPR, we will use your email address to send you our newsletter on a regular basis. To receive the newsletter, all you need to do is provide an email address. You can unsubscribe from the newsletter at any time, for example by clicking on the link at the end of each newsletter. You can also cancel your subscription at any time by sending an email to info (at) wknd.fi.

c) When filling in our contact form

You can contact us for any queries using the contact form on our website. This requires a valid email address so that we know where the enquiry is coming from and can respond to it. Other information is provided on a voluntary basis. The processing of data for the purpose of contacting you is based on your voluntary consent in accordance with Article 6(1)(1)(a) of the GDPR.

We will delete the personal data we collect through the contact form once you have received a response to your enquiry.

3) Transfer of data

We do not transfer personal data to third parties for purposes other than those mentioned above. We will only disclose your personal data to a third party if- if you have given your consent in accordance with Article 6(1)(1)(a) and/or (b) of the GDPR for the performance of a contractual relationship and/or if this is necessary for the performance of pre-contractual measures and there is no reason to believe that, you have a prevailing legitimate interest in preventing the transfer of the data- the transfer is required by a legal obligation in accordance with Article 6(1)(1)(c) of the GDPR; and- this is legally permissible and necessary for the performance of our contractual relationship in accordance with Article 6(1)(1)(c) of the GDPR.

4) Cookies

We use cookies on our website. They are small files that are automatically generated by your browser and stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not harm your terminal equipment and do not contain viruses, Trojans or other malware.

The cookie stores information that in each case relates to the specific terminal device used. However, this does not mean that we have any information directly related to your identity.On the other hand, cookies make it easier for you to use our services. To do this, we use so-called session cookies to see whether you have already visited different pages on our website. These cookies are automatically deleted when you leave our website.

In addition, we also use temporary cookies, which are stored on your terminal for a certain period of time and are used to optimise your user experience. When you visit our site again to use our services, we automatically recognise your previous visits to our site and which features and settings you have used, so you do not have to re-enter them.

We also use cookies to keep records, to evaluate your use of our website and to optimise the range of services we offer you (see section 5). These cookies allow us to automatically recognise during your visit whether you have visited our website before. These cookies are automatically deleted after a specified period of time in each case.

The data processed by cookies are necessary for certain purposes and to protect our legitimate interests and the legitimate interests of third parties in accordance with Article 6(1)(1)(b) of the GDPR.

Most browsers automatically accept cookies.

However, you can configure your browser so that cookies are not stored on your computer or that you are notified each time a new cookie is attempted to be installed on your computer. However, disabling cookies altogether may mean that you cannot use all the features of our website.

5) Analytical tools

a) Monitoring tools

We use the monitoring methods set out below in accordance with Article 6(1)(1)(b) of the GDPR. By using tracking methods, we want to ensure that our websites are designed to meet your needs and are optimised step by step. We also use tracking methods to keep records and evaluate the use of our website and to optimise the range of services we offer you. These advantages must be considered as a legitimate interest within the meaning of the above-mentioned Regulation.

Explanations of the purposes of data processing and the categories of data can be found in the corresponding monitoring tools.

b) Google Analytics

To design our website according to your needs and to continuously optimise our website, we use Google Analytics, a service provided by Google Inc. -(https://www.google.de/inrl/de/about) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, user profiles are created where the names have been changed. Cookies are also used (see section 4 below). Information generated by cookies about your use of the website, such as- the type/version of your browser- the operating system you are using- the referring URL (previously visited website)- the host name of the host computer (IP address)- the time of the server query is transferred to a Google server in the United States, where it is also stored. The information is used to evaluate the use of the website, to report on website activities, to create additional services related to the use of the website and the Internet for market research purposes and to design this website according to your needs. Where appropriate, this information is also transmitted to third parties, provided that this is provided for by law or to the extent that such third parties process this information for payment purposes. Under no circumstances will your IP address be used in connection with other Google data. IP address names are changed so that no connection is possible (IP address hiding)You can prevent the installation of cookies by adjusting your browser software settings appropriately. In this case, however, it should be noted that not all functions of the website may be fully available.

You can also prevent the storage of data generated by cookies and data relating to your use of the website (including your IP address) and prevent Google from processing this data by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptot?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also block Google Analytics from storing data in your browser settings. An opt-out cookie will be installed, which will prevent the storage of your data when you visit this website in the future. The opt-out cookie only applies to this browser and only to our website. It will be stored on your device. If you disable cookies in your browser, you will need to set the opt-out cookie again.For more information about privacy in Google Analytics, please visit the Google Analytics help page.

c) Google Adwords conversion tracking and remarketing

In order to statistically evaluate the use of our website and to optimise the evaluation of your data on our website, we also use Google conversion tracking. In this case, Google Adwords will place a cookie on your computer (see section 4) if you have reached our website through a Google ad.These cookies are valid for 30 days and are not used for personal identification. If a user visits a particular Adwords client page and the cookies are still in place, Google and the client can detect that the user clicked on an ad and was then redirected to that page.

Each Adwords customer receives a different cookie. Cookies can therefore not be tracked on Adwords customers’ websites. The data collected by conversion cookies provides conversion statistics for Adwords customers who have opted in to conversion tracking. Adwords customers are told the total number of users who have clicked on their ads and have been directed to a page containing a conversion tracking tag. However, they do not contain any information that could be used to identify users personally.If you do not wish to participate in the tracking process, you can also opt out of the installation of the necessary cookies, for example by changing your browser settings, which will disable the automatic installation of cookies. You can also disable conversion tracking cookies by changing your browser settings to block cookies sent by the domain www.googleadservices.com. For more information about Google’s privacy policy on conversion tracking, please click here: (https://services.google.com/sitestats/de.html).

For more information on Google Adwords’ privacy policy, please refer to the respective privacy policy:
Google Adwords: https://policies.google.com/privacy?hl=en&gl=uk

When you use Google Adwords, your personal data is transferred to the United States. In the case of the US, the EU Commission has not made a decision on whether personal data are adequately or sufficiently protected in relation to the GDPR, so there is no adequacy decision (Article 45 of the GDPR). Google LLC. -However, the EU-US Privacy Shield applies to the company. However, adequate protection of your personal data is ensured. You can read the full text of the US Privacy Shield procedure here.

We use Google Adwords on our website. Google AdWords is an online advertising program owned by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In this context, we use the remarketing function. This allows us to use cookies to show our website users advertisements that interest them. User interaction on our website is analysed, so we know which advertisements interested the user. This allows us to show targeted advertising to the same user on other websites after their visit. The cookies used for this purpose are clearly only used to identify a specific computer browser, not to identify the user, as no personal data is stored. You can disable cookies used by Google by following this link and downloading and installing the plug-in available on the website: https://www.google.com/settings/ads/plugin.Saat for more information about Google’s remarketing and Google’s privacy policy, click here: http://www.google.com/privacy/ads/.

We also use Google AdWords for so-called conversion tracking. When you click on a Google ad, a conversion tracking cookie is installed on your terminal. These cookies are valid for 30 days. They do not contain any personal information and are not used for personal identification. The data collected by conversion cookies provides conversion statistics for Adwords customers who have opted in to conversion tracking.

You can prevent cookies from being stored by adjusting your browser’s software settings accordingly. In this case, however, it should be noted that not all functions of the website may be fully available at that time. You can also disable all Google ads related to a specific topic in your browser, and all ads related to a specific topic online (within the Google network), by selecting the Off icon on the http://www.google.de/settings/ads website or by disabling them at http://www.aboutads.info/choices/. For more information on the relevant settings options and Google’s privacy policy, please visit https://www.google.de/intl/de/policies/privacy/?fg=1.

d) Facebook Pixel

When you visit our website, we monitor and document your behaviour as a user so that we can use this information to make personalised recommendations to you on our website. We process the following personal data for this purpose:

– IP address – UUID ID
– domain- device identification information
– browser identifiers – cookies (add a reference to cookies)
– geographic IP location.

We process your personal data for our legitimate interests in order to make product recommendations and marketing measures in accordance with Article 6(1)(1)(f) of the GDPR.

We use the Facebook Pixel service for processing. In this context, we only use standard functions. For more information on Facebook Pixel privacy, please visit the Facebook Pixel Privacy Policy: https://www.facebook.com/privacy/explanation

When you use Facebook Pixel, your personal data is transferred to the United States. In the case of the US, the EU Commission has not made a decision on whether personal data are adequately or sufficiently protected in relation to the GDPR, so there is no adequacy decision (Article 45 of the GDPR). Facebook, Inc. -However, the EU-US Privacy Shield applies to the company.

However, adequate protection of your personal data is ensured. You can read the full text of the US Privacy Shield procedure here .

e) Facebook Custom Audiences

(1) The Website also makes use of the Facebook Inc. -(“Facebook”) Custom Audiences service. In this case, when visiting the Facebook social network or other websites using the same method, users may be shown advertisements related to their interests (“Facebook Ads”). This is how we try to show you ads that interest you, which also makes our website more interesting.

(2) Due to the marketing tools used, your browser automatically connects to the Facebook server. We have no control over the scope or subsequent use of the information collected by Facebook through this tool, so we can only tell you what we know. By integrating Facebook Custom Audiences targeting services, Facebook receives information that you have seen on the corresponding website of our internet presentation or learns that you have clicked on an advertisement presented by us. If you are registered with Facebook, Facebook can link the visit to your account. Even if you are not registered or logged in to the Facebook service, it is possible that your IP address and other characteristics may be known and stored by the service provider.

(3) Facebook Custom Audiences can be deactivated here and logged in users can be deactivated at https://www.facebook.com/settings/?tab=ads#_Oikeudellinen The basis for processing your data is Article 6(1)(1)(f) of the GDPR. For more information about Facebook’s processing of your data, please visit https://www.facebook.com/about/privacy

6) Social media extensions

On our website, we make use of social extensions to social networks such as Facebook, Twitter and Instagram, in accordance with Article 6(1)(1)(b) of the GDPR, as a means to improve the visibility of our company. The underlying advertising purpose is seen as a legitimate interest in the context of the GDPR regulation. The responsibility for data protection compliance lies with the service providers of these services. The integration of these plug-ins is done using a so-called two-click method, which aims to protect users visiting our website as much as possible.

a) Facebook

Facebook social media plugins are used on our website to make it more personal. We use the UP and DOWN buttons to do this. This is a Facebook SERVICE:

If you go from our website to a page with this extension, your browser will connect directly to Facebook’s servers. In this case, the content of the extension is sent directly from Facebook to your browser and integrated into your website.

Because of the integration of extensions, Facebook will know that your browser has downloaded the corresponding page from our website, even if you do not have a Facebook account or are not logged in to Facebook. Your browser transfers this information (including your IP address) directly to a Facebook server in the United States and stores it there.

If you are logged in to Facebook, Facebook can link your visit to our website directly to your Facebook account. If you interact with the extension, for example by clicking on the CLICK or SHARE buttons, the corresponding information is also sent directly to the Facebook server and stored there. This information will also be published on Facebook and shown to your Facebook friends.

Facebook may use this information for marketing and marketing research purposes and to tailor the design of the Facebook Pages to your needs. To do this, Facebook creates interest and relationship profiles so that we can, for example, evaluate your use of our website through the ads we offer on Facebook, share information with other Facebook users about your activity on our website and provide other services related to your use of Facebook.

If you do not want Facebook to link information collected about you through our website to your Facebook account, you must log out of your Facebook account before visiting our website.

To learn more about the purpose and scope of data collection, further processing and use of your data by Facebook, your rights in this regard, and the various options available to protect your privacy, please read the Facebook Privacy Policy (https://www.facebook.com/about/privacy/).

b) Instagram

We also use the Instagram social media extension on our website, which is owned by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

These plug-ins with the Instagram logo, for example in the form of an Instagram camera.If you load a webpage on our website that contains this plug-in, a direct connection is established between your browser and the Instagram server. In this case, the content of the extension is sent directly from Instagram to your browser and integrated into your website. Because of the integration of extensions, Instagram will know that your browser has downloaded the corresponding page from our website, even if you do not have an Instagram account or are not logged in to Instagram.

Your browser transfers this information (including your IP address) directly to an Instagram server in the United States and stores it there. If you are logged in to Instagram, Instagram can link your visit to our website directly to your Instagram account. If you interact with the extension, for example by clicking on the Instagram button, this information is also sent directly to the Instagram server and stored there.

This information will also be published on your Instagram account and displayed there to your followers.If you do not want Instagram to link information collected about you through our website to your Instagram account, you must log out of your Instagram account before visiting our website.For more information, please see the Instagram Privacy Policy (https://help.instagram.com/155833707900388).

c) YouTube

aa) We have added Youtube videos stored on http://www.YouTube.com to our online offer, which can be played directly from our website. The videos are integrated into our website in an extended privacy mode, meaning that none of your user data is transferred to YouTube if you do not play the videos. The data mentioned in section 2 will only be transferred if you play videos. We have no control over this data transfer.

bb) When you visit the website, YouTube will be informed that you have downloaded the corresponding sub-page on our website. In addition, the information mentioned in section 2 of this report is transferred. This happens regardless of whether Youtube makes available the user account you are logged in to or whether a user account exists. If you are signed in to your Google Account, your data will be linked directly to your account. If you do not want your data to be associated with your Youtube profile, you must log out of your account before using the button. YouTube stores your information in your user profile and uses it for marketing and marketing research purposes and/or to design its website to meet your needs. This assessment is carried out (including for non-logged-in users) in particular to provide advertising that meets your requirements and to inform other users about your activities on our website. You have the right to object to the creation of such user profiles, but you must first contact YouTube to exercise this right.

cc) For more information about the purpose and scope of the data collection and how YouTube processes it, please see YouTube’s Privacy Policy. You can also learn more about your rights and options to protect your privacy at: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and is subject to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

7) Mobile apps

a) In addition to our online offer, you can download our mobile app on your mobile device. Next, we provide information about the collection of personal data in our mobile application. Personal data is information that is personally identifiable to you, such as your name, address, email address and your behaviour as a user.

(b) The controllers are identified in accordance with Article 4(7) of the General Data Protection Regulation (GDPR) at the beginning of this privacy statement in section 1. They are also responsible for mobile applications.

c) If we need to use subscription service companies for individual activities we offer or if we want to use your personal data for advertising purposes, we will explain the procedures in detail below. We also provide information on the criteria defined for the storage period.

d) When you download a mobile application, the necessary information is transferred to the App Store, in particular your username, email address and account number, the time of download, your payment details and your unique device identification number. We have no control over and are not responsible for the collection of this information. We only process the data necessary to download the mobile application to your mobile device.

e) When you use the mobile application, we collect the personal data mentioned below to make the use of the functions more convenient. When you choose to use our mobile application, we collect the following information that is technically necessary for us to provide you with the functionality of our mobile application and to ensure its stability and security. The legal basis is Article 6(1)(1)(f) of the GDPR.

– IP address- Date and time of visit
– Time zone difference from Greenwich Mean Time (GMT time)
– Survey content (specific page)
– Access Status / HTTP Status Code
– The amount of data transmitted in each case
– The website from which the survey arrives
– Browser- Operating system and its interface
– Browser software language and version.

f) We also process your device ID, your unique device identifier (IMEI), your unique network user identifier (IMSI), your mobile phone number (MSISDN), the unique MAC address of your network device for WLAN access, the name of your mobile terminal and your email address.

g) The mobile app does not use cookies

8) Rights against persons

You have the following rights:
– In accordance with Article 15 of the GDPR, request information about your personal data that we process. In particular, you may request information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged retention period, the right to rectify, erase, restrict or oppose processing, the sources of the data where the data are not collected by us, the existence of automated decision-making, including profiling and, where applicable, the relevant details of the relevant data.
– in accordance with Article 16 of the GDPR, to request the immediate correction or completion of inaccurate personal data concerning you.
– In accordance with Article 17 of the GDPR, request the erasure of our personal data concerning you where the processing is not necessary for the exercise of freedom of expression and information, for compliance with a legal obligation in the public interest or for the establishment, exercise or defence of legal rights.
– In accordance with Article 18 of the GDPR, request restriction of the processing of your personal data if you have contested the accuracy of the data, if the processing is unlawful but you object to its erasure, we no longer need the data but you need it to establish, exercise or defend your legal rights, or if you have objected to the processing in accordance with Article 21 of the GDPR.
– In accordance with Article 20 of the GDPR, to require us to send your personal data that we process to you in a structured, standardised and machine-readable format or to require their transfer to another controller.- In accordance with Article 7(3) of the GDPR, to withdraw your previously given consent at any time. As a result, we are no longer entitled to process data that depend on this consent.
– In accordance with Article 77 of the GDPR, lodge a complaint with a supervisory authority. As a general rule, you can do this to the supervisory authority of your main place of residence or workplace or to the authority of the place where your registered office is located.

9) Right to object to processing

If your personal data is processed on the basis of legitimate interest in accordance with Article 6(1)(1)(f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, provided that there are reasons relating to your particular situation or the objection is directed to direct marketing. In the latter case, you have a general right to object, so you do not need to invoke the details of your specific situation.If you wish to exercise your rights of withdrawal or objection, you only need to write to: info (at) wknd.fi.

10) Information security

During your online visit, we use the widely used SSL security together with the highest level of encryption supported by your browser. This is usually done using 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. The key or lock symbol in the lower status bar of your browser indicates whether an individual page of our website is transmitted in encrypted form.Otherwise, we use appropriate technical and organisational security measures to protect your information from accidental or intentional manipulation, partial or total loss or unauthorised access by third parties. Our security measures are constantly being improved as technology advances.

11) Validity and changes to this Privacy Policy

We may change this Privacy Policy as our website evolves, as offers on our website evolve, as legal requirements change, or as official definitions change.

12) Data Protection Supervisory Authority
Office of the Data Protection Ombudsman
Visiting address: Ratapihantie 9, 6. krs, 00520 Helsinki
Postal address: P.O. Box 800, 00521 Helsinki
E-mail: tietosuoja(at)om.fi
Tel: 029 566 6700