Privacy policy

Controller

Controller and contact for data protection:

What we process and why

• Email address: to send sign-in links and recognise your account. Basis: providing the service you asked for (GDPR Article 6(1)(b), contract).
• Name or nickname, if you give one: shown with your public reviews. Basis: the service (6(1)(b)).
• Your diary: shows you saw, dates, ratings, tags and the reviews you write. Basis: the service (6(1)(b)). A review you leave public appears on the show's page with your name. Ratings and tags are only shown to others as totals, without names.
• The weekly email about closing shows, if you sign up: your email address and the fact that you signed up. Basis: consent (6(1)(a)), which you can withdraw at any time from the link in the email or in your settings.
• Reports about reviews: who reported and why, so the same review can't be reported twice by one person. Basis: legitimate interest in keeping the service civil (6(1)(f)).
• Technical data: your sign-in session stores your IP address and browser identifier, and rate limiting keeps IP and email addresses for a short time. Basis: legitimate interest in security and preventing abuse (6(1)(f)).

Your year in review and badges are calculated from your own entries each time you open the page, and only you can see them. We make no automated decisions and do no profiling.

Cookies

We only use cookies needed for signing in (their names start with aitio.). They don't need separate consent. We use no analytics, advertising or tracking cookies, and fonts are served from Aitio's own server.

People in the credits

The names and roles of creators and performers on show pages come from the theatres' own websites (GDPR Article 14). The purpose is to tell who made a show. Basis: legitimate interest in compiling cultural information (6(1)(f)). We store only the name and role. If you want your name removed, contact us at the address below.

How long we keep data

• Account, diary and reviews: until you delete your account. Deleting it in the settings removes everything at once, public reviews included.
• Sign-in sessions: at most 90 days; expired ones are deleted daily.
• Sign-in links: valid for 20 minutes; expired ones are deleted daily.
• Rate-limiting data: at most 2 days.
• Database backups: deleted data is gone from them within 7 days.
• Server logs: the hosting provider's short retention, a few days at most.

Who processes data for us

Only these providers process data on our behalf:

• Vercel Inc.: web hosting. US company; the site runs in Frankfurt. Transfers under the EU–US Data Privacy Framework and the EU Standard Contractual Clauses.
• Neon Inc.: database. US company; data is stored in Frankfurt. Transfers under the DPF and the Standard Contractual Clauses.
• Sendinblue SAS (Brevo): sending email. France, EU.

Your rights

• You can download all your data in the settings (a JSON file). This covers your rights of access and portability.
• You can correct your name and entries yourself.
• You can delete your account and all your data in the settings.
• You can withdraw consent to the weekly email at any time.
• You can object to processing based on legitimate interest by contacting us.
• You can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

Changes

We'll describe significant changes on this page and update the date.