EN: Privacy Policy

Privacy Policy
Last updated: 8.10.2026

This privacy policy explains how Studio Bröd collects and uses personal data through this website and in connection with bookings.

Data controller
Johan Ekblom (Studio Bröd)
Mechelininkatu 51, 00250 Helsinki, Finland
mail@brod.studio

What data we collect and why
Booking inquiries and contact forms. When you send a form, we collect your name, email address, your message and any details you choose to share, such as dates, links or a description of your work. We use this to answer your inquiry and plan your booking. Legal basis: steps taken at your request before entering into an agreement, and our legitimate interest in answering messages.

Bookings and invoicing. If you book the space, we process your name, contact details, billing details and the booking information needed to carry out the agreement and invoice it. Legal basis: performance of a contract and our legal obligations under accounting law.

Newsletter. If you subscribe, we store your email address to send news about exhibitions and events. Legal basis: your consent. You can unsubscribe at any time through the link in every email.

Website statistics and cookies. We collect anonymised or pseudonymised information about how the website is used, such as pages visited and the type of device. Non-essential cookies are only used with your consent. More details are in our [Cookie Policy].

Embedded content. Some pages show content from Instagram and YouTube. These services may collect data about you when you view the content, according to their own privacy policies. Such content is only loaded with your consent where required.

Who we share data with
We don’t sell personal data. We use trusted service providers who process data on our behalf: our website host WordPress, Automattic (Jetpack statistics and forms). Some providers may process data outside the EU/EEA, in which case the transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep data
Inquiries that don’t lead to a booking are deleted within 12 months. Booking and invoicing records are kept as long as Finnish accounting law requires, generally six to ten years. Newsletter data is kept until you unsubscribe.

Your rights
You have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time. To use your rights, email mail@brod.studio.

If you think your data has been processed unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes
We may update this policy when our services or the law change. The latest version is always available on this page.