Controller
Korttikulma
Hämeentie 5, 00530 Helsinki, Suomi
What data we process
- Order data: name, email address, phone number, delivery address, the products ordered and the status of the order.
- Payment data: payment method, payment status and the identifier of the payment transaction. We do not see or store card details; they are processed by the payment service provider.
- Newsletter: email address and the time and content of your consent.
- Contact requests: the messages and contact details you send through the form.
- Technical data: necessary cookies and server log data. Analytics are used only with your consent.
Purposes and legal bases
- Processing and delivering orders and customer service: performance of a contract.
- Accounting and other statutory obligations: legal obligation.
- Newsletter and analytics: consent, which you can withdraw at any time.
- Preventing misuse and keeping the service secure: legitimate interest.
Recipients of data
We use service providers who process data on our behalf: website and database hosting, payment processing, email delivery, and carriers for delivering orders. We do not sell personal data.
Transfers outside the EU and EEA
Some service providers may process data outside the EU and EEA. In that case the transfers are protected by the European Commission's standard contractual clauses or by another method permitted by the General Data Protection Regulation.
Retention periods
- Order and accounting records: for the period required by the Finnish Accounting Act.
- Newsletter subscriber data: until you unsubscribe.
- Contact requests: no more than two years after the matter has been handled.
Right to lodge a complaint
If you believe that your personal data is processed unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman (www.tietosuoja.fi).