Home › Privacy policy
This is a translation. If there is any difference, the Finnish version applies.
Processing of personal data · updated 17 October 2026
Privacy policy
On this page we explain what information is collected from sign-ups and enquiries, what it is used for and how long it is kept.
The form does not store any data on the website's server. The information you send reaches us by email, and we use it only to handle your sign-up or enquiry.
Data controller
Roihupellon Bändikoulu (Matti Suvela, sole trader)
Business ID 1513328-7
Laippatie 9, 00880 Helsinki
info@roihupellonbandikoulu.fi
Contact person for data protection matters: Matti Suvela.
What data we collect
- Weekly lessons and band camp: the student's name and age, the name of the guardian of a student under 18, phone numbers, email, the chosen lesson or camp, and any optional additional information.
- Band camp: in addition, optional information on preferred instrument, playing experience and food allergies. We use allergy information only to arrange meals and safety at the camp, and we do not pass it on.
- Experiences, venue hire, gift cards and other enquiries: name, email, optional phone number and message.
The data is obtained from the person signing up or, for a minor, from the student's guardian.
What the data is used for
- processing sign-ups, arranging groups and lesson times, and keeping in touch
- invoicing and bookkeeping
- replying to enquiries and preparing quotes
- newsletters about courses, band camp and events – only if you have given permission on the form
Legal basis for processing
- Contract: the data is needed to arrange teaching, the camp or a service, and for the steps leading up to them (enquiries).
- Legal obligation: invoices and accounting records are kept as required by the Finnish Accounting Act.
- Consent: email newsletters and band camp food allergy information. You can withdraw your consent at any time.
Processing and retention
Who processes the data
- The data is processed only by Sara and Matti.
- We use the Netvisor invoicing software for invoicing. The website and email are on Zoner Oy's servers in Finland.
- If you contact us via WhatsApp, your message is also processed by the WhatsApp (Meta) service.
- Single lessons are booked through Google's appointment booking calendar.
- The data is not disclosed or sold to anyone else.
How long the data is kept
- A student's data is kept for as long as they attend the band school, and for no more than two years after that.
- Invoices and accounting records are kept for the period required by the Finnish Accounting Act (6–10 years).
- Band camp food allergy information is deleted after the camp.
- Enquiries and quote requests are deleted once the matter has been dealt with, at the latest after one year.
- Permission for newsletters is valid until you withdraw it.
Data security
- The form works only over a secure connection (https).
- The form does not store submitted data on the server; it is forwarded by email.
- To prevent spam, an identifier calculated from the IP address and the time of submission are stored on the server for one hour – not the IP address itself.
Cookies
- The site does not use analytics or advertising cookies.
- The Spotify player and the video on the home page load only when you click them. After that, Spotify or YouTube may set their own cookies.
Your rights
You can ask us to
- tell you what data has been stored about you or your child
- correct inaccurate data
- delete the data when it is no longer needed (except for accounting records that must be kept by law)
- restrict or object to processing
- transfer the data you have provided to another service
- stop sending you newsletters
How to contact us
Send your request by email to info@roihupellonbandikoulu.fi. We will reply within one month.
If you believe your data is being processed unlawfully, you can lodge a complaint with the Data Protection Ombudsman: tietosuoja.fi ↗.