Privacy policy
Updated 8 Oct 2026
Data controller
NOVANIGHTZ (business ID 3303383-7), Vaasa, Finland. Contact: info@novanightz.fi
What we process
When you join the SMS list we store your phone number, chosen language, the time of consent and a hashed identifier derived from your IP address to prevent abuse. Through the contact form we process name, email and message.
Purpose and legal basis
The number is used only to send information about events, ticket drops and discount codes. The legal basis is your consent (GDPR Art. 6(1)(a)). We never sell or rent the data.
Retention
Your number is deleted automatically no later than 24 months after you joined. If you withdraw consent (reply STOP), the data is deleted within 30 days. Deletion runs automatically every night.
Recipients
We use Twilio Ireland Limited (EU) for sending messages and Supabase (EU) for storage. Both act as processors under contract.
Buying tickets
When you buy tickets we process your name, email, phone number (if you give it), the order and how the tickets are used at the door. We need this to deliver the tickets, check them at the door, help you and keep the books (contract and legal obligation, GDPR 6(1)(b) and (c)). Payments are handled by Paytrail Oyj; we never see your card details. Receipts are kept as long as the Accounting Act requires (6 years), other order details at most 2 years after the event. Joining the SMS list at checkout is always your own choice and does not affect your purchase.
The city vote (novanightz.com/city)
When you vote we store the town you picked, your age group (under 18 / 18+), language and an identifier derived from your IP address to prevent abuse. A random identifier is kept in your browser so one person votes once; we only store a protected hash of it. You can vote without a phone number. If you give your number and press the button, you join the SMS list (consent, GDPR 6(1)(a)) and the number is handled like every other number on the list. Only vote counts per town are shown publicly.
Event requests and artist wishes
What you send in an event request (name, email, phone, organisation, place, time and message) is stored and emailed to info@novanightz.fi so we can answer. Artist wishes can be left anonymously. Requests are kept for at most 2 years.
Ambassadors
For people who sign up as ambassadors we store name, email, phone number, social media handles, their own code, the agreement they accepted and the tickets sold with the code, to work out rewards. If the ambassador is under 18, a guardian gets a copy of the agreement. The details are kept while we work together and as long as bookkeeping requires.
Contact form and ambassador applications
What you send through the contact form or the ambassador application is emailed to info@novanightz.fi through our email provider. We use what you include (such as name, email, phone number, city or school and social media handles) only to reply to you and to review your application. Messages are kept as long as needed to handle the matter, and at most 2 years. If your ambassador application isn’t selected, we delete it within 6 months.
Buying caps on Instagram
NOVA caps are sold by direct message on Instagram. That conversation happens on Instagram (Meta), whose own privacy policy applies to it. We use the details only to arrange the sale and pickup or delivery.
Your rights
You have the right to access, rectify or erase your data, restrict or object to processing, receive your data in a portable format, and withdraw consent at any time. Send requests to info@novanightz.fi — we respond within one month. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Cookies and browser storage
We use no advertising or tracking cookies. If you pick a language, it is saved in a cookie (nn_lang) so the site opens in that language next time. Browser storage keeps technical values, such as whether the SMS window has been shown and the city vote’s random identifier.