Privacy notice

Via Arkadia Oy, Arkadiankatu 23, 00100 Helsinki. For any privacy matter, write to the email address below.

Through the quote form: your name and email address (required), plus company, phone number, date and time of the event, address or venue, number of guests, type of service and a free-text message, if you provide them.

Through the pikkujoulu questionnaire, additionally: the menu you choose, a range for the number of guests, whether you need a venue and the type of service.

Fonts, images and video are served from our own domain. Cookies and visitor measurement are covered in their own section below.

The site itself runs without cookies. We do use two optional tools that set them: Google Analytics (visitor measurement) and Google Ads (measuring and targeting advertising). Neither loads before you consent — if you refuse, or simply do not answer, your browser makes no contact with Google at all.

The legal basis is your consent (GDPR Art. 6(1)(a) and section 205 of the Finnish Act on Electronic Communications Services). You can withdraw or change it at any time through the "Cookie settings" link at the foot of the page. Withdrawal does not affect the lawfulness of processing carried out before it.

Your choice is stored in a cookie set by our own domain (va_consent) for 180 days. That cookie is strictly necessary: without it we could not remember that you declined.

If you do consent, Google Ireland Limited processes the data on our behalf and may transfer it to the United States. That transfer relies on the EU–US Data Privacy Framework and on standard contractual clauses. IP addresses are truncated in Google Analytics. We do not combine measurement data with the contact details you give on the quote form.

We use a Consent Mode v2 implementation in which every signal defaults to "denied" and changes only after your choice.

We process this data solely to answer your request and to run the event. The legal basis is taking steps at your request prior to a contract (GDPR Art. 6(1)(b)) and our legitimate interest in replying to enquiries (GDPR Art. 6(1)(f)).

We do not use your details for marketing, and we do not sell or pass them on.

Quote requests are stored in a Supabase database in the EU (Ireland). The site runs on Vercel. If you tell us about diets or allergies, we process those only as part of running the event.

We keep a quote request for 24 months from the last contact, then delete it. For events that went ahead, accounting records are kept for the period Finnish accounting law requires.