Updated 14.9.2026
Tavata Global Oy
privacy notice
Privacy notice in accordance with the EU General Data Protection Regulation (GDPR) 2016/679. We reserve the right to update this privacy notice as necessary.
1. Data controller
Tavata Global Oy
c/o Eventilla Oy
Vanhantullinkatu 2
90100 Oulu
Business ID: 2886688-5
2. Contact person for data protection matters
Tavata Global Oy
Markus Haataja
privacy (at) eventilla.com
3. Purpose and legal basis of processing personal data
Personal data is collected, processed, and used for the management of Tavata Global Oy’s customer relationships, communication, marketing, and to enable the use of the Tavata service.
Legal basis for processing: The legal basis for processing personal data for Tavata Global Oy’s marketing is the controller’s legitimate interest. For the use of the Tavata service, the legal basis is the fulfillment of a contract between Tavata Global Oy’s corporate customers and registered users, or the consent given by individual users.
4. Recipients of personal data
Tavata Global Oy may disclose the data of Tavata service users to event organizers and community administrators whose events the user has registered for or been invited to.
No personal data is disclosed to other third parties.
5. Transfer of personal data to third countries
Personal data is not transferred outside the EU or EEA.
6. Retention period of personal data
In the Tavata service, personal data is stored for 10 years after the creation of the data or the user’s last login.
7. Rights of the data subject
The data subject has the following rights under applicable legislation:
- The right to access their own personal data.
- The right to request the rectification of their personal data.
- The right to request the erasure of their personal data to the extent that the law does not require the data to be retained.
- The right to request restriction of processing under the conditions set out in Article 18 of the EU General Data Protection Regulation.
- The right to object to the processing of their personal data under the conditions set out in Article 21 of the EU General Data Protection Regulation.
- The right to have their personal data transferred to another system (data portability).
- The right to withdraw consent to the processing of their personal data at any time, to the extent that the processing is based on consent.
- The right to lodge a complaint with the supervisory authority regarding the processing of personal data.
8. Contractual requirement
For the use of the Tavata service, providing personal data is a contractual requirement. Failure to provide the required data will prevent the use of the service.
9. Information on the source of personal data when not obtained from the data subject
In some cases, a data subject’s personal data may be obtained from a customer of Tavata Global Oy. This applies, for example, to situations where event registrations obtained via a customer’s separate registration system or similar tool have been uploaded directly into the service.
In such cases, the customer of Tavata Global Oy has requested permission from the data subjects to transfer their data to the Tavata service.