Privacy Notice Processing of personal data, Sports and Exercise Unit, boat space booking system
Date of publication: 21 February 2025, updated 18.3.2026
1. Purpose of and grounds for processing personal data
Personal data is generally used in Espoo for the provision, planning and assessment of activities and services and for statistical purposes. In this service, personal data is processed by the Sports and Exercise Unit for the purpose of maintaining customer information stored in the boat space booking system. In addition, personal data is used for service-related reporting, such as access control at the Ämmäsmäki boat storage area, sending booking confirmations including season stickers to customers, and various invoicing-related reports.
In this service, personal data is processed on the following legal grounds:
- For the performance of a contract. The data subject is a party to the contract, or the processing is necessary in order to carry out preparatory measures at the request of the data subject prior to entering into a contract.
2. What data is processed and what are the sources of data?
In order to provide the service, we must process the following data:
Private customer or organisation’s contact person:
- name
- trade name or business id
- personal identity code
- address
- municipality of residence
- telephone number
- email
- boat and trailer registration number
Information needed for access control at the Ämmäsmäki boat storage area:
- name
We obtain the person’s name, personal identity code, address, and municipality of residence either through the Suomi.fi e-identification service or from information provided directly to an official by the customer. In customer service-related matters, data is obtained directly from the customer.
3. How long is data stored?
Personal data is stored for as long as it is necessary for the provision of the service or required by legislation. In terms of this service, data is deleted as follows:
Customer data is stored in the boat space booking system for two years after the customer relationship has ended.
4. Parties processing or receiving data
4.1 Parties processing data on behalf of the City of Espoo
Personal data is processed by the City of Espoo’s office-holders and employees as well as external operators from whom the City of Espoo purchases services or with whom the City of Espoo carries out cooperation projects. We only select contracting partners who comply with good personal data processing practices and meet the requirements of the General Data Protection Regulation. Compliance with data protection requirements is ensured through written agreements.
We use the following external operators for this service: supplier Reaktor and sub-processor Amazon EU.
4.2 Disclosure of data to other organisations
Data is disclosed to the person requesting it in accordance with the Act on the Openness of Government Activities.
5. Will data be transferred outside the EU/EEA?
The City of Espoo aims to ensure, by default, that your personal data is processed within the EU/EEA. However, some services and functions may involve the use of service providers, services, or servers located outside this area. Processors may transfer data from the register outside the European Union or the European Economic Area only if the transfer meets the applicable statutory requirements and if the transfer and appropriate protection measures have been agreed upon between the controller and the processor as required by data protection legislation. Amazon EU acts as a sub-processor for Reaktor. Amazon is a U.S.-based company. Under specific circumstances, U.S. law may require Amazon to disclose data it processes to authorities.
6. Rights of the data subject
The General Data Protection Regulation of the European Union (GDPR) grants data subjects various rights related to the processing of their personal data. You can read more about your rights and how to exercise these rights on our website.
7. Data controller
City of Espoo.
7.1 Contact person of the register
If you have questions or need more detailed information on the processing of personal data, you can contact the contact person of the register:
Pia Martin, Liaison Manager
Sports and Exercise Unit, P.O. Box 34, 02070 City of Espoo
Email: firstname.m.lastname@espoo.fi
Change history
2.0 Date of publication