Updated 04/07/2026
This Privacy Policy and Cookie Policy were originally prepared in Finnish. This English translation is provided to make the information accessible to English-speaking visitors. If you notice any discrepancy between the Finnish and English versions, please contact us at contact[ at ]crypticcargo.com so that we can clarify and correct the information. Nothing in this translation limits your rights under applicable data protection legislation.
Cryptic Cargo Ltd
Business ID: 2853646-4
Address: Vetehisenkuja 5 B 29, 00530 Helsinki, Finland
Email: contact[ at ]crypticcargo.com
Data protection contact: Laura Wolff
Email: contact[ at ]crypticcargo.com
This privacy policy explains how Cryptic Cargo Ltd processes the personal data of our customers, website users, newsletter subscribers, event attendees, corporate contact persons, and partners.
Personal data is processed only for predefined purposes and strictly to the extent necessary to provide Cryptic Cargo services, process orders, manage customer relationships, carry out marketing, organize events, deliver games and materials, and fulfill legal obligations.
Cryptic Cargo processes personal data based on the following grounds:
If the processing of personal data is based on consent, you may withdraw your consent at any time by contacting Cryptic Cargo or by using the unsubscribe link provided in the message, if available.
Register name: CC email register
The email list is used to send newsletters and other email communications. Messages may include news about Cryptic Cargo, information about our services, discounts, event and party ideas, surveys, and opportunities to influence future games.
The register may contain the following information:
Data is collected via newsletter signup forms, at events, through prize draws or campaigns, or when ordering services, provided that the individual has specifically joined the mailing list or given their consent to receive marketing communications.
Subscribing to our newsletter is optional. You can unsubscribe at any time using the link provided in the newsletter or by contacting Cryptic Cargo directly.
The primary legal basis for processing is consent. In certain B2B communication scenarios, processing may be based on Cryptic Cargo’s legitimate interest in informing corporate clients and partners about services relevant to their professional roles or organizational operations.
Register name: CC customer register
Customer registry data is used to provide Cryptic Cargo services, prepare quotes, process orders, organize events, deliver or facilitate the pickup of games and materials, handle billing, provide customer support, resolve issues, manage potential additional invoicing, handle claims, and fulfill legal obligations.
Data may also be used when Cryptic Cargo arranges the transport, delivery, or collection of games, materials, or other order-related content for a customer using, for example, a courier, taxi, parcel service, Uber Delivery, or other similar transport or delivery service.
The register may contain the following information:
We collect information from customers through website forms, email, phone, personal contact, quotes, orders, payments, deliveries, pickups, and event organization.
If the client provides Cryptic Cargo with information regarding event participants, delivery recipients, contact persons, or other individuals, the client is responsible for ensuring that they have the right to provide such information to Cryptic Cargo and that the relevant individuals have been informed about the processing of their data.
The processing is based on the conclusion and performance of a contract, pre-contractual measures requested by the customer, Cryptic Cargo's legitimate interest in managing the customer relationship and organizing the event, and legal obligations such as those related to accounting and invoicing.
When personal data is processed for the delivery, collection, or transport of games, materials, or other content related to an order, the primary legal basis for processing is the performance of a contract or Cryptic Cargo’s legitimate interest in fulfilling the service requested by the customer.
Register name: CC B2B marketing register
The B2B marketing database is used for communication and marketing directed at corporate clients and their contact persons. Messages may include news, information about Cryptic Cargo's services, discounts, event ideas, invitations, surveys, and other content relevant to the business operations of our corporate clients.
The register may contain the following information:
Data may be collected via website forms, service subscriptions, events, trade fairs, conferences, prize draws or campaigns, as well as from publicly available business information sources.
You can unsubscribe from B2B marketing communications at any time by notifying Cryptic Cargo or by using the unsubscribe link provided in the message, if available.
The processing is based on consent or Cryptic Cargo’s legitimate interest in marketing its services to corporate clients and their contact persons regarding matters related to their professional duties or the operations of their organization.
Register name: CC event partner register
The register is used to communicate with event partners, event organizers, and potential collaborators, to maintain partnerships, to provide information about services, and to arrange potential test games or collaborative events.
The register may contain the following information:
Data may be collected via website forms, during conferences, trade fairs, events, prize draws, campaigns, or when scheduling free trial games, as well as directly from partners or publicly available sources.
You can unsubscribe from the list at any time by contacting Cryptic Cargo or by using the unsubscribe link provided in the message, if available.
The processing is based on consent, the preparation of a contract, or Cryptic Cargo’s legitimate interest in maintaining and developing partnerships and marketing its services to professionals in the events industry.
Cryptic Cargo may take photographs or other visual media at events to document the atmosphere, activities, services, and for marketing purposes.
The visual material may be used in Cryptic Cargo's marketing, social media channels, website, presentation materials, and other corporate communications.
The image material to be processed may include:
The processing of general event and atmosphere photos is based on Cryptic Cargo's legitimate interest in documenting and marketing its services.
If an individual participant does not wish to appear in photos published by Cryptic Cargo, they must notify Cryptic Cargo no later than the start of the event or as soon as photography is announced. In such cases, Cryptic Cargo will endeavor to ensure that the person in question is not identifiable in the published imagery.
The subscriber is responsible for ensuring that event participants are aware that photos may be taken at the event for the aforementioned purposes.
Published imagery may be stored and used for as long as it is necessary for Cryptic Cargo's marketing, communication, and service presentation. If an individual requests the removal of their identifiable image, Cryptic Cargo will evaluate the request on a case-by-case basis and remove the image within a reasonable timeframe from channels over which Cryptic Cargo has administrative control, unless there is another justified reason for retaining the material.
Cryptic Cargo does not sell personal data to third parties.
Personal data may be disclosed or provided for processing to third-party service providers when necessary to carry out Cryptic Cargo's services, maintain websites, manage customer communications, process payments, handle billing and accounting, conduct marketing, generate analytics, organize deliveries or transport, or fulfill legal obligations.
Such service providers may include, for example:
Transport and delivery services may only be provided with the information necessary to carry out the delivery or pickup, such as the recipient’s or contact person’s name, phone number, delivery or pickup address, event location address, delivery time, delivery instructions, and necessary order-related identification data.
Service providers process personal data on behalf of Cryptic Cargo and in accordance with its instructions, unless they act as independent controllers for their own services. For example, certain payment, transport, delivery, analytics, or marketing services may also process personal data as independent controllers in accordance with their own legal obligations, terms of service, or privacy policies.
Data may be disclosed to authorities if required by law or an official order.
In some situations, personal data may be processed outside the European Union or the European Economic Area if the service provider, system, or technical service used by Cryptic Cargo is located outside the EU or EEA or uses subcontractors located there.
In such situations, Cryptic Cargo strives to ensure that personal data transfers are carried out in accordance with applicable data protection legislation, for example, by using the European Commission’s standard contractual clauses, an adequacy decision by the European Commission, or another legal basis for transfer.
Personal data is stored only for as long as necessary to fulfill the purposes described in this privacy policy or to comply with legal obligations.
Customer and billing data is stored at least for the duration required by accounting and tax legislation.
Data related to quote requests, customer communications, orders, deliveries, pickups, and complaints is stored for as long as necessary to fulfill the customer relationship, contractual obligations, potential claims, or legitimate interests.
Marketing registry data is stored as long as the individual is on the marketing list or until they opt out of marketing, withdraw their consent, or request the deletion of their data, unless there is another legitimate reason for storage.
Visual materials are stored for as long as necessary for Cryptic Cargo’s marketing, communications, service presentation, or documentation purposes, unless the individual exercises their data protection rights or there is another legitimate reason for storage.
Personal data is protected by appropriate technical and organizational measures.
Personal data is processed only by individuals whose job duties require such processing. Data is stored in systems protected by usernames, passwords, and access rights. Other security measures are used as necessary, such as two-factor authentication, access restrictions, and service provider security policies.
In accordance with applicable data protection legislation, the data subject has the right to:
Requests regarding the exercise of rights should be sent via email to contact[ at ]crypticcargo.com.
Cryptic Cargo may request additional information if necessary to verify the identity of the person making the request.
If a data subject believes that their personal data is being processed in violation of data protection legislation, they have the right to lodge a complaint with the Office of the Data Protection Ombudsman.
Office of the Data Protection Ombudsman
www.tietosuoja.fi
Cryptic Cargo may update this privacy policy if our services, personal data processing, systems, or legislation change.
The current privacy policy is available on the Cryptic Cargo website.
Updated 04.07.2026
Cryptic Cargo Ltd
Business ID: 2853646-4
Email: contact[ at ]crypticcargo.com
Data Protection Contact: Laura Aaltonen
Email: contact[ at ]crypticcargo.com
Cryptic Cargo uses cookies and similar technologies on its website to enable site functionality, improve user experience, analyze site usage, and measure marketing and advertising.
A cookie is a small text file stored on your device when you visit a website. Cookies allow a website to remember your preferences, measure site usage, and help improve our services.
Cryptic Cargo may use cookies and similar technologies on its website for the following purposes:
Necessary cookies are required for the technical operation of the website, security, form functionality, saving cookie preferences, and other basic features.
These cookies can be used without separate consent because they are necessary for the website to function.
Analytics cookies are used to measure website usage and develop our services. They allow us to track, for example, the number of visitors, which pages are visited, and how users navigate the site.
Analytics cookies are used only with the user's consent.
Marketing and advertising cookies may be used for ad targeting, measuring advertising effectiveness, remarketing, and developing Cryptic Cargo's marketing services.
Marketing and advertising cookies are used only with the user's consent.
The Cryptic Cargo website may use services such as:
The services in use may change if the website's analytics, marketing, or technical implementation is updated.
Cryptic Cargo uses Google Consent Mode v2 or another similar solution to support consent management on its website.
Google Consent Mode v2 allows the operation of Google services, such as Google Analytics, Google Ads, and Google Tag Manager, to be adjusted based on the cookie consent provided by the user.
Consent Mode v2 can process the following consent states, for example:
analytics_storage: consent for analytics-related storagead_storage: consent for advertising-related storagead_user_data: consent for the use of user data for advertising purposesad_personalization: consent for personalized advertisingIf a user does not consent to analytics or marketing cookies, those cookies will not be set for purposes requiring consent. In such cases, Google services may operate in a limited mode in accordance with the user's consent choices.
When a user visits the Cryptic Cargo website, they may be presented with a cookie banner or another consent management tool.
Users can choose to accept all cookies, reject cookies that require consent, or adjust their cookie settings based on specific purposes.
Users can change or withdraw their cookie consent at any time via the website's cookie settings, if available, or through their browser settings.
Blocking or deleting cookies may affect the functionality of the website, the user experience, and how effectively Cryptic Cargo can measure and improve its website.
The retention period for cookies varies depending on the purpose of the cookie and the service provider.
Some cookies are session-based and are deleted when the user closes their browser. Other cookies remain on the user's device for a longer period or until the user deletes them via their browser settings.
Consent information may be stored so that the website remembers the user's cookie preferences and does not ask for the same choices on every page load.
Information collected through cookies and similar technologies may be processed by the analytics, advertising, technology, and marketing services used by Cryptic Cargo.
Such service providers may include, for example, Google and Meta, as well as providers related to website technical maintenance, analytics, marketing, or consent management.
Service providers may process data in accordance with their own privacy policies and terms of service. In some cases, data may be transferred or processed outside the European Union or the European Economic Area, as permitted by applicable data protection legislation.
Cryptic Cargo does not sell personal data collected through cookies to third parties.
If information collected via cookies or similar technologies constitutes personal data, the Cryptic Cargo privacy policy also applies to its processing.
Our privacy policy provides further details on matters such as the purposes of personal data processing, legal bases for processing, retention periods, data subject rights, and contact information.