Privacy
What personal data Roasberg collects when you visit roasberg.fi, send us an event enquiry or get in touch, why we collect it, and the choices you have.
Last updated 24 October 2026
Roasberg is run by Nordic Barista Oy (Business ID 2674187-8), Mikonkatu 13, 00100 Helsinki, Finland. Nordic Barista Oy is the data controller for the personal data described in this policy.
Questions about your data: info@roasberg.fi or +358 45 649 6080. Write “Privacy” in the subject line and your message will reach the right person.
In short
We only collect what we need to answer you, plan your event and keep the website running.
We never sell your data, and we don’t use it for advertising.
Website statistics only run if you accept them in the cookie banner.
You can ask to see, correct or delete your data at any time.
Everything we collect, grouped by situation. For each one you’ll find the purpose, the legal basis under the EU General Data Protection Regulation (GDPR) and how long we keep it.
What: your name, email address and phone number, the number of guests, venue, type of event, date and start time, food and drink preferences, your message, and a record that you ticked the consent box.
Why: to check availability, send you menus and a price, plan the event with you and invoice it if you book.
Legal basis: taking steps at your request before entering into a contract, and performing that contract if you book (GDPR Art. 6(1)(b)).
How long: 365 days after our last contact with you. If you book, the invoice and related correspondence are kept as long as the Finnish Accounting Act requires, usually six years after the end of the financial year.
Each enquiry is emailed to our events team and saved in the website’s database, and a copy is emailed to you.
What: your name, contact details and whatever you tell us when you email info@, 3linja@ or art@roasberg.fi, or call us.
Why: to answer your question, handle feedback and consider artists for our gallery wall.
Legal basis: our legitimate interest in answering the people who contact us (Art. 6(1)(f)), or steps before a contract when you ask to book or exhibit (Art. 6(1)(b)).
How long: 365 days after our last contact, unless the matter becomes part of a booking or exhibition agreement.
What: your CV, cover letter and anything else you send to rekry@roasberg.fi, plus our notes from any interview.
Why: to assess your application and contact you about the role.
Legal basis: steps at your request before an employment contract (Art. 6(1)(b)).
How long: 365 days after the recruitment closes, so we can answer any questions about it. With your permission, we keep it longer for future openings.
What: the pages you visit, how you arrived, your approximate location (city level), and your device and browser type, collected by Google Analytics using cookies.
Why: to see which pages people use and improve the website.
Legal basis: your consent (Art. 6(1)(a)), which you give or decline in the cookie banner and can withdraw at any time.
How long: Google Analytics keeps this data for 14 months.
If you decline, Google Analytics sets no cookies. Google may still receive basic signals without cookies or identifiers, such as that a page was viewed, which it uses only to estimate overall visitor numbers.
What: your IP address, browser type, the page requested and the time, recorded automatically by our web server.
Why: to deliver the website, keep it secure and investigate faults or attacks.
Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f)).
How long: server logs are deleted automatically after 90 days.
Your cookie choice is saved in a cookie on your own device for 12 months, so we don’t have to ask on every visit.
If you tell us about allergies or dietary needs for your guests, we use that information only to prepare the food for your event, share it only with the kitchen team working on it, and delete it together with the enquiry. Health information is a special category of data under the GDPR. We process it with your explicit consent (Art. 9(2)(a)), which you give by sending it to us, so please share only what we need to cater safely.
We don’t sell personal data or share it for marketing. We share it only with service providers who handle it on our behalf and under our instructions:
Atelier Hosting, a service of Varsani Media SIA (registration number 40203638846, Brīvības bulvāris 19-22, Rīga LV-1050, Latvia), hosts our website, its database and our roasberg.fi email. Backup copies of the website are stored with Dropbox, which Atelier Hosting uses for this.
Google (Google Ireland Limited) provides Google Analytics, only if you accept statistics cookies.
Our accountant receives invoicing details when you book an event.
We may also disclose data where the law requires it, for example to the authorities.
Our Instagram and Facebook links are plain links. We don’t embed social media content or tracking pixels on this website. When you visit those platforms, their own privacy policies apply.
Our website and email servers are currently located in the United States, and we are moving them to a data centre in Frankfurt, Germany. Website backups are stored with Dropbox, and Google may process Analytics data in the United States. When personal data leaves the EU and EEA, we rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the Commission’s Standard Contractual Clauses. You can ask us for a copy of the safeguards that apply.
Under the GDPR you have the right to:
Access the personal data we hold about you and get a copy of it.
Have data that is wrong or incomplete corrected.
Have your data deleted when we no longer need it or have no legal reason to keep it.
Restrict how we use your data, or object to processing based on our legitimate interests.
Receive the data you gave us in a machine-readable format, or have it sent to another organisation.
Withdraw your consent at any time. This doesn’t affect anything we did before you withdrew it.
To use any of these rights, email info@roasberg.fi. We’ll reply within one month and may ask you to confirm your identity first.
If you think we’ve handled your data wrongly, please tell us so we can put it right. You can also complain to the Office of the Data Protection Ombudsman in Finland at tietosuoja.fi.
We use the cookies the website needs to work, plus statistics cookies only if you accept them. Our Cookie Policy lists every cookie, what it does and how long it lasts. You can change your choice at any time with the “Manage consent” tab at the bottom of every page.
The website runs over an encrypted connection (HTTPS). Access to enquiries, email and the website’s admin area is limited to the people who need it, and our service providers are bound by data processing agreements.
We’ll update this page when our services or the law change. The date at the top shows when it was last updated, and we’ll point out any significant changes here.
