Suomen Lanka's Privacy Policy

This privacy policy explains how Suomen Lanka processes the personal data of e-commerce customers and website users.

1. Data controller

Data Controller: Suomen Lanka
Business ID: 0473990-2
Address: Länsirannantie 833, 62630 KARVALA
Email: info@suomenlanka.fi
Phone: 0400 260 077

Data protection contact person: saila.saariaho@suomenlanka.fi

2. What personal data do we process

We can process the following personal data, for example:

• name
• address information
• email address
• phone number
• Information on orders, delivery, and returns
• information regarding the main event to the extent it is communicated to us
• Customer service messages and contacts
• Website usage technical information, such as IP address, device information, log data, and cookie-based data
• possible newsletter subscription details and marketing consents

We do not store payment card details ourselves by default; payments are processed through an external payment service provider.

3. Where is personal data obtained from

Personal data is obtained:

• when placing an order, creating a customer account, subscribing to a newsletter, or contacting us, from the customer themselves
• in connection with the use of the online store automatically through cookies and other similar technologies
• from payment service providers, shipping partners, and other service providers to fulfill the order
• of possible marketing and analytics tools in accordance with user consents

4. Purposes of personal data processing

We process personal data for the following purposes:

• to receive, process, and deliver orders
• for payment processing and returns
• customer service and communication
• handling of complaints and legal claims
• for handling accounting and other statutory obligations
• for e-commerce and service development
• for the prevention of misuse and the assurance of information security
• for direct marketing and newsletters, if there is a legal basis for it

5. Legal bases for processing personal data

The processing of personal data is based, depending on the situation:

• execution of the agreement
• compliance with a statutory obligation
• the data controller's legitimate interest, such as customer relationship management, service development, and prevention of misuse
• register my consent for example to newsletters or non-essential cookies

6. Data disclosures and processors

We may disclose or transfer personal data to partners and service providers who process data on our behalf or as independent data controllers to the extent necessary to provide the service. Such entities may include, for example:

• Service providers
• Transportation and logistics companies
• E-commerce platform and hosting service providers
• Accounting and financial management services
• customer service, newsletter, and marketing systems
• Analytics and advertising services

Personal data may also be disclosed to authorities in situations required by law.

7. Data transfer outside the EU or EEA

Personal data may also be processed on servers or by providers located outside the European Union or the European Economic Area, if the service we use requires it. In such cases, we will ensure appropriate safeguards are in place in accordance with applicable data protection legislation, such as standard contractual clauses approved by the European Commission or other legally permissible grounds.

8. Data retention period

We retain personal data only as long as necessary to fulfill the purposes described in this privacy policy or to comply with legal obligations.

Information can be stored, for example, as follows:

• customer and order information for the duration of the customer relationship
• Bookkeeping information for the period required by accounting legislation
• customer service messages for a reasonable time after handling the matter
• marketing information until the person withdraws their consent or objects to marketing
• technical log and analytics data according to system and service-specific needs

9. Registered person's rights

Under applicable data protection legislation, the registered person has the right to:

• to receive information about the processing of their personal data
• check one's own information
• request correction of incorrect or incomplete information
• request their data to be deleted, if there are legal grounds for deletion
• request restriction of processing
• object to the processing of their personal data in certain situations
• withdraw their consent at any time for processing that is based on consent
• transfer information from one system to another if the conditions required by law are met
• File a complaint with the Data Protection Ombudsman's Office

10. Information security

We process personal data with appropriate technical and organizational safeguards. Access to personal data is restricted to those individuals who need it for their work. We use reasonable means to protect personal data from unauthorized access, loss, misuse, and alteration.

11. Contact Information

Requests and questions regarding the processing of personal data can be sent to: saila.saariaho@suomenlanka.fi

12. Changes to the privacy policy

We reserve the right to update this privacy policy, for example, due to changes in legislation, service development, or changes in operating procedures. The version in effect at any given time will be available in the online store.