1. Data Controller

[Company name]

Business ID: [1234567-8]

Address: [Street address, postal code, city]

Email: [info@company.fi]

Phone: [number]

2. Contact person for data protection matters

Name: [Name]

Email: [email]

Phone: [number]

3. Name of the register

Online store customer and marketing register

What personal data we collect

We collect the following customer data:

• Name
  
• Address
  
• Email address
  
• Phone number
  
• Order information
  
• Payment information (via payment service provider)
  
• Customer service messages
  
• IP address and information related to website usage
  
• Possible newsletter subscription information

For what purposes the data is used

Personal data is used for the following purposes:

• Processing and delivery of orders
  
• Payment processing
  
• Customer service
  
• Handling returns and complaints
  
• Maintaining customer relationships
  
• Marketing and newsletters (with consent or within legal limits)
  
• E-commerce development and analytics
  
• Fulfilling legal obligations

6. Legal basis for data processing

Data is processed on the following grounds:

• Performance of a contract (order)
  
• Legal obligation (accounting etc.)
  
• Legitimate interest of the data controller (customer relationship, service development)
  
• Consent (newsletters, cookies where necessary)

7. Data retention period

Data is retained only as long as necessary:

• Order information in accordance with accounting law
  
• Customer data for the duration of the customer relationship
  
• Marketing lists until consent is revoked
  
• Analytics data specific to each service

8. Disclosure of data to third parties

Data may be disclosed to the following service providers:

• Payment service providers such as Klarna, Paytrail or similar
  
• Shipping companies such as Posti, Matkahuolto, DHL
  
• E-commerce platform provider
  
• Accounting and financial administration services
  
• Analytics and marketing services
  

Data is not sold to external parties.

9. Transfer of data outside the EU/EEA area

Data may be transferred outside the EU/EEA area if required by the service providers used. In such cases, appropriate safeguards, such as the European Commission's standard contractual clauses, are ensured.

10. Cookies

The website uses cookies to improve user experience, enable website functionality, and for analytics and marketing.

Users can manage cookie settings in their browser or via the cookie banner.

11. Data Subject Rights

The customer has the right to:

• Access their data
  
• Request correction of inaccurate data
  
• Request erasure of data
  
• Restrict processing
  
• Object to processing
  
• Data portability
  
• Withdraw consent
  
• Lodge a complaint with a supervisory authority
  

The supervisory authority in Finland is the Office of the Data Protection Ombudsman.

12. Data protection

Data is processed confidentially. The register is protected by technical and organizational means, such as:

• Encrypted connections (SSL)
  
• Restriction of access rights
  
• Firewalls
  
• Backups

13. Changes to the privacy policy

We reserve the right to update this privacy policy as legislation or operations change.

14. Last updated

25.4.2026