1. Data controller
Elisa Penttilä (“company”)
Business ID: 3150068-1
Kotisaarenkatu 7 B 23, 00560 Helsinki
2. When is personal data collected?
Personal data is collected when customers contacts the company via a contact form found on the company’s website, when they subscribe to the company’s newsletter, when they fill out a survey and when they place an order or make a purchase in the company’s webshop. Personal data is also collected through cookies when customers visits the company’s website and/or the company’s webshop (see 6. Cookies).
3. For which purposes is personal data collected?
Personal data is used to manage and ship the purchases made in the company’s webshop, to fulfil contractual obligations, for maintaining customer relations as well as for bookkeeping/accounting purposes.
Personal data is also used for marketing if the customer has specifically agreed to this, for example by subscribing to the company’s newsletter.
4. What personal data is collected?
When a customer makes a purchase or places and order in the company’s webshop, all the personal data provided at checkout (name, address, e-mail address, phone number, company name, comments) are kept for at least three (3) years. This personal data is not used for marketing, unless the customer has specifically agreed to this, for example by joining the company’s newsletter.
When a customer fills out a contact form on the company’s website, all the data provided in the form (name, e-mail address, phone number, message) are kept for at least three (3) years. This personal data is not used for marketing, unless the customer has specifically agreed to this, for example by subscribing to the company’s newsletter.
When a customer subscribes to the company’s newsletter, the email address provided at the time to subscription is kept until the customer cancels her/his subscription.
5. Who manages the collected personal data?
Personal data is managed by the Data Controller mentioned above. All personal data is handled confidentially. Personal data is only handled electronically; in the event of having to print out information, for example, this information is disposed of immediately and securely.
Cookies are files, which follow a website’s visitor traffic and which collect information about the visits made to the said website. Read more about cookies at: allaboutcookies.org.
When customers visit the company’s website, certain personal data is automatically gathered based on their visit. This data includes geographical location, IP-address, browser type, the date of the visit and its duration. In addition, information is also gathered relating to any products the customer has viewed in the company’s webshop. Cookies are also used in the company’s webshop to track the contents of a customer’s shopping cart.
The company may share the personal data gathered through cookies to third parties for advertising purposes.
If a customer disables cookies in their browser, some features of the company’s website and/or the company’s webshop may cease functioning properly.
7. Customers’ data protection rights
Customers have a right to request a copy of all their personal data saved by the company. If a customers wishing to use this right must send a request to the Data Controller by e-mail to firstname.lastname@example.org. The Data Controller must answer the request within one month. For more information about data protection rights, please visit: https://tietosuoja.fi/en/data-protection.
Payments in the company’s webshop are provided by Checkout Finland Oy. When customers make a purchase in the company’s webshop, Checkout Finland processes the data required to complete the payment.
9. Links to other websites
Customers may contact the Data Protection Ombudsman at https://tietosuoja.fi/en/notification-to-the-data-protection-ombudsman if the Data Controller has not complied with their request to obtain a copy of their data (See 7. Customers’ data protection rights) or if the customer suspects a violation in the processing of personal data.