Privacy Policy

Last updated: March 28, 2026

The purpose of this Privacy Policy is to provide you with information about how Hello Performer Global Oy ("Hello Performer," "we") processes personal data in connection with the use of the Hello Performer platform ("Platform"). This policy applies to all users of the Platform, including customers, service providers, and other individuals using the Platform.

Personal data is processed in accordance with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Finnish Data Protection Act (1050/2018), and other applicable legislation.

Data Controller

Hello Performer Global Oy ("Company")

Business ID: 3605914-3

Address: Malminrinne 2 A 22, 00100 HELSINKI Email:

Data subjects

This Privacy Policy applies to the following groups of data subjects:

• Platform customers (business customers)
• Service providers (performers, speakers, hosts, event venues, production services, etc.)
• Event participants
• Individuals who have created a user account on the Platform
• Individuals participating in communication or providing feedback through the Platform

Personal data processed

We process the following categories of personal data depending on the purpose of use and only to the extent necessary to fulfill each purpose:

Basic and identification data:

• Name
• Email address
• Phone number
• Job title
• Username
• Company name and Business ID

Account and contract information:

• User account details
• Reservation and order details
• Contract-related information
• Pricing and commission details

Payment and billing information:

• Payment transaction details
• Settlement details (e.g., account number)
• Billing information (Note: Payment card information is not stored by the Company)

Transaction and content details:

• Event-related information
• User-generated content (e.g., profile information, photos, descriptions, feedback)
• Messages and communications via the platform

Technical information:

• IP address
• Cookies and log data
• Device and browser information

Automated Processing and Profiling

We may use automated processing, including profiling, to provide recommendations on the Platform.

Profiling refers to the processing of personal data to evaluate aspects relating to a user, such as preferences, interests, or past behavior, in order to suggest relevant performers or services. Recommendations are based, for example, on user-provided information, search criteria, and prior activity on the platform.

This processing may be used for example to:

• recommend suitable performers
• improve and rank search results
• enhance service relevance

Important:

• The Platform provides recommendations only
• Users can always view and choose from all available options without restriction.
• Final decisions are always made by users
• Profiling does not produce legal effects or similarly significant impacts on users

Users have the right to:

• object to profiling
• request additional information about the logic involved
• exercise their rights under data protection legislation

Purposes and legal bases for processing personal data

Personal data is processed for the following purposes on the following legal grounds:

• Creating and managing a user account: Performance of a contract
• Creating a performer profile: Performance of a contract
• Event registration and participation management: Performance of a contract. In the case of a voluntary or marketing-related event, processing may also be based on a legitimate interest or consent.
• Automated processing and profiling: The legal basis for this processing is our legitimate interest in developing and improving our services.
• Reservation and Event Management: Contract Execution
• Payment processing and settlements: Contract performance, legal obligation
• Customer service and communication: Legitimate interest
• Platform development and data security: Legitimate interest
• Marketing: Consent or legitimate interest
• Dispute resolution: Exercising legal rights and remedies, as well as preparing, presenting, and defending claims
• Corporate and commercial purposes: Legitimate interest or legal obligation. If we are involved in a corporate transaction, merger, consolidation, or division, your personal data may be transferred to the other party to the transaction.
• Compliance with legal obligations: Legal obligation

Collection of personal data

We collect the personal data we process directly from you.

We may also collect information from the following sources:

• Public registers (e.g., the Trade Register)
• Business partners in situations where it is necessary to provide the service

Recipients of personal data and disclosures

Only those Company employees or subcontractors who need the data to perform their duties have access to it. Data may be disclosed to service providers involved in organizing the event, such as:

• Payment service providers (PSPs)
• IT and hosting service providers
• Professional advisors
• Accounting and financial management partners
• Authorities based on legal obligations

Companies belonging to the same group as the Company may process personal data on behalf of the Company as data processors to provide services and carry out operational activities. Data processing agreements in accordance with the GDPR have been entered into with these companies.

Data will not be disclosed to third parties for marketing purposes without the data subject's separate consent.

Transfers of personal data outside the EU/EEA

Personal data is primarily processed and stored within the European Union (EU) and the European Economic Area (EEA).

If, in exceptional cases, personal data is transferred outside the EU or EEA, such transfers will be carried out in accordance with applicable legislation and in compliance with appropriate safeguards.

Retention period for personal data

Personal data is retained only for as long as necessary:

• For the duration of the contractual relationship, unless a longer retention period is required by law
• Accounting records are retained for the period required by the Accounting Act
• User account data is deleted or anonymized no later than 12 months after the account is closed, unless retention is necessary due to legal obligations or legal claims.

Rights of the data subject

The data subject has the following rights:

• To verify whether and what information about the data subject has been stored, to obtain information about its content and source, and to request the correction of inaccurate or incomplete information;
• To request the restriction or erasure of data that is inaccurate, unnecessary, incomplete, or outdated for the purposes of processing. If the basis for processing is consent, consent may be withdrawn at any time;
• Object to or request the restriction of the processing of personal data that is processed on the basis of a legitimate interest;
• To the extent that the data subject has provided us with data that is processed on the basis of the data subject's consent or is necessary to fulfill a contractual obligation with the data subject, the data subject has the right to request that we transfer such data to you or to another controller;
• The right to object to direct marketing at any time; and
• To lodge a complaint with the competent supervisory authority if we have not complied with data protection legislation in our operations. The competent supervisory authority for matters related to the processing of personal data is the Office of the Data Protection Ombudsman: www.tietosuoja.fi

Requests should be sent by email to the address mentioned in section 1.

Data Security

Personal data is protected by appropriate technical and organizational measures, such as access control, encryption, and secure systems.

Cookies

The Company uses cookies and similar technologies to improve the Platform's functionality, analytics, and user experience. Further information on the use of cookies is provided in a separate cookie policy.

Changes to this Privacy Policy

We reserve the right to update this Privacy Policy. Any changes will be announced on the Platform or by other appropriate means.