Privacy
Your privacy
This notice explains how Blackoak Oy processes personal data when you use the Snadi Pub Kallio website or contact us through it.
Data controller
Blackoak Oy, Business ID 3630937-6, is the data controller. Registered address: Konalantie 7 D 34, 00370 Helsinki, Finland. Blackoak Oy trades as Snadi Pub Kallio. The venue is at Kolmas linja 6, Helsinki, Finland. Privacy contact: snadi.pub@gmail.com.
Data we process and its sources
We receive information directly from you when you browse the website, use a form or contact us. Depending on your interaction, this can include connection and security information such as IP address and requested page; your selected language; your name, email address and optional phone number; and the message, event or lost-item details that you choose to provide. We do not obtain this information from data brokers.
Private Event enquiries
We process the name, email address, optional phone number and event details you submit to review and answer a potential booking request. Our legal basis is steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). The enquiry is delivered through Resend to Snadi's Gmail inbox.
Lost & Found enquiries
We process the contact details and item and visit details you submit to check for a matching item and contact you if needed. Our legal basis is our legitimate interest in handling lost property and responding to visitors (GDPR Article 6(1)(f)). The report is delivered through Resend to Snadi's Gmail inbox.
Website operation, language and security
We process technical connection data to provide, protect and troubleshoot the website, based on our legitimate interest in operating a secure service (GDPR Article 6(1)(f)). We use the snadi_locale cookie only to remember a manually selected FI/EN language preference. Its use is necessary for that preference and it remains for one year. We do not use analytics, advertising or behavioural marketing cookies, localStorage or sessionStorage.
Recipients, processors and international transfers
We use Vercel to host the website, Resend to deliver form emails, Google/Gmail to receive and store our business email, and Google Maps only when you actively load the interactive map. These providers may process personal data outside the EEA, primarily in the United States. Vercel and Resend each incorporate the EU Standard Contractual Clauses (Commission Decision (EU) 2021/914) into their data processing addenda. Google states that it operates servers worldwide and relies on transfer mechanisms including adequacy decisions, Standard Contractual Clauses and its EU–US Data Privacy Framework certification as applicable. Google acts as an independent controller under its own privacy policy, both for the Gmail mailbox that receives our email and when you load the interactive map.
Retention and security
We retain Private Event enquiries until the enquiry and any resulting booking arrangements are completed, then only as long as needed for follow-up, legal claims or legal obligations. We retain Lost & Found enquiries until the item matter is resolved and any reasonable follow-up period has ended. We retain technical and security information only for the period necessary to operate, secure and investigate the website, subject to our providers' operational retention. Access is limited to people and providers who need it, and we use reasonable technical and organisational safeguards.
Your GDPR rights
Subject to the conditions in data protection law, you may ask us for access to, rectification or erasure of your personal data; restriction of processing; or object to processing based on legitimate interests. You may request data portability where applicable and withdraw consent where processing is based on consent. To exercise a right, email snadi.pub@gmail.com.
Supervisory authority
You may lodge a complaint with the Finnish supervisory authority, the Office of the Data Protection Ombudsman.
Office of the Data Protection OmbudsmanSensitive information, third parties and changes
Please do not send passwords, PIN codes, full payment-card numbers, health information or other unnecessary sensitive information in a form or email. Links to Instagram, Facebook, email, directions and an actively loaded Google map lead to third-party services governed by their own notices. We may update this notice when our processing or legal obligations change. Last updated: 13 September 2026.