Privacy policy
CONTROLLER
Kinbaku Studio Kanslia
Business ID 3452246-4
Nilsiänkatu 10 A
00510 Helsinki
CONTACT PERSON
Jouni Rajala
PURPOSE AND LEGAL BASIS
We process personal data to book studio time, to handle membership applications and memberships, and for related customer communication. Legal bases are contract (booking or membership) and legitimate interest (service security and abuse prevention).
DATA WE PROCESS
Customer details: email address, Finnish mobile phone number, real name and nickname.
Reservations: studio, date, start and end time, and contact details given with the booking.
Memberships: membership product, application or membership status, and customer reference.
Sign-in: SMS or email verification challenge metadata (destination and code hash, not the code itself) and a hashed session token.
Technical cookies and storage: language preference (sk_locale), signed-in session.
SOURCES OF DATA
Data is obtained directly from you via booking and membership forms and when you sign in.
RECIPIENTS AND PROCESSORS
We do not sell personal data. We use processors: Vercel (site hosting), Vercel BotID (bot check), Neon (database), Twilio (SMS verification) and Resend (email). They process data only on our instructions.
TRANSFERS OUTSIDE THE EU/EEA
Some processors may process data outside the EU/EEA. Where that happens we rely on appropriate safeguards under our service agreements, such as the European Commission’s Standard Contractual Clauses (SCCs).
RETENTION
We keep data as long as the customer relationship, bookings or membership require, and as required by law. Expired verification challenges are removed automatically. You may request erasure under the rights below.
YOUR RIGHTS
You have the right to access your data, request rectification or erasure, restrict processing, object to processing, request data portability, and lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto). Requests: rehtori@studiokanslia.fi.
UPDATES
This policy was last updated on 28 September 2026.