PRIVACY POLICY FINN-SAVOTTA OY
GENERAL

Controller

Name: Finn-Savotta Oy
Business ID: 2728312-7
Address: Onnelantie 2
Postal code: 43500
Municipality: KARSTULA
Telephone number: +358 40 685 1172
E-mail address: store [at] savotta.fi

The primary purpose of the register is to serve as the customer and marketing register of Finn-Savotta Oy.

In order to serve you in the best way possible, we need to collect and process some information about you. However, we always respect your privacy and are committed to protecting it. This privacy policy describes the personal data we collect, the principles we use to process it, and the rights and opportunities of influence you have with regard to your data.

Finn-Savotta Oy processes your personal data in accordance with this privacy policy and the applicable legislation, so we request that you read this document carefully. We may also update this privacy policy as our operations develop or the legislation changes, which is why we ask you to visit this site from time to time to stay up to date.

By using our services or website or by contacting us, you accept our processing of your personal data in accordance with this privacy policy.

WHAT ARE THE PURPOSES FOR WHICH MY PERSONAL DATA IS COLLECTED AND PROCESSED?
We collect, store and process your personal data for predefined purposes only. The primary purposes of use are as follows:

• fulfilling the agreement involving order processing, delivery, archiving and bookkeeping

• fulfilling our contractual obligations

• fulfilling our legal obligations and requirements

• maintaining customer relationships and contact requests

• business development

• targeting services and marketing

WHICH OF MY PERSONAL DETAILS ARE COLLECTED AND STORED?
To put it simply, Finn-Savotta saves and stores three types of information: data on the use of online services, information provided by the users themselves and data derived from analytics.

1. Information provided by the user

o Identifying details, such as name

o Contact details, such as telephone number, e-mail address and postal address

o Payment details, such as invoicing and payment instrument information

o Location information for localization purposes (currencies, delivery methods)

o Product reviews

o Marketing message permissions

2. Usage data on services

o Delivery details, such as delivery address and payment method

o Purchase history, such as ordered products, returns and payments

o Online shop’s browsing and usage data

o Terminal device’s identification data

o Online shop session events, such as additions to the shopping cart

3. Data derived from analytics

o Product recommendations concluded from browsing and purchasing data

o Customer groupings and interests derived from purchasing data

Generally speaking, the source of the information is the website user / customer. In addition to this, we may obtain additional information from our partners (from credit providers for invoicing services, for example). You can view your information through your customer account. If you wish, you can also have all of your identifying details erased by contacting our customer service.

WHAT IS THE BASIS FOR PROCESSING PERSONAL DATA?
We always ensure that we have a legal basis, or possibly several bases, for processing your personal data. We process your data to fulfill the agreement and our legal obligations. We also process your personal details based on our legitimate interest, which is to provide services and to engage in and develop our business activities. We may also process some personal details by virtue of your consent.

WHO PROCESSES MY DETAILS AND ARE THEY DISCLOSED TO THIRD PARTIES?
Primarily, your personal data is processed by our personnel in the performance of their duties. We may also outsource some processing activities, such as information the systems used for the storage and processing of personal data. In these cases, we establish agreements, among other measures, to ensure that your data remains confidential and is otherwise processed in a lawful manner. We may also disclose information in other contexts to fulfill contractual obligations or if required to do so by a competent authority. Furthermore, your information may be disclosed if we are involved in a corporate acquisition or asset deal.

Some necessary details are provided to third parties in order to enable the payment transaction, delivery or market messages. For example, in order to enable deliveries, your address and contact details are disclosed to the parties handling logistics and, in connection to the payment transaction, your payment details are relayed by a trusted payment service provider.

IS MY PERSONAL DATA DISCLOSED OUTSIDE THE EU?
Your personal data may be transferred outside the EU or EEC area in compliance with the protective measures laid down in the European Union’s General Data Protection Legislation (2016/679). The protective measures include agreements based on the European Commission’s standard contractual clauses, which can be found here.

FOR HOW LONG IS MY PERSONAL DATA RETAINED?
We do not retain your personal details for any longer than is necessary for their purpose of use or the fulfillment of contractual or legal requirements. However, the retaining periods of personal data may vary depending on purpose of use and situation. We also strive to update your data periodically.

HOW IS MY DATA STORED AND PROTECTED?
Your data is stored on our service provider’s servers which are protected in accordance with the general practices of the field. We keep the personal details we collect and process confidential and do not disclose them to anyone other than those who need them in their work. Personal details may also be disclosed to our customers confidentially and to a limited extent based on service agreements. Access to your personal data is restricted by means of personal identifiers, passwords and access rights.

AM I REQUIRED TO PROVIDE PERSONAL DATA AND WHAT HAPPENS IF I REFUSE?
If you do not provide personal details or permit their processing, we will most likely not be able to serve you and fulfill the purpose of our operations. Therefore, if you do not want us to process your data in accordance with this privacy policy, we request that you no longer provide us with any information.

WHAT ARE COOKIES AND DOES THE WEBSITE USE THEM?
Our website uses cookies so that we can provide the best possible user experience to all visitors. Cookies are short text files that the web server stores on the user’s device. They provide us with data on how people use our site. We may use cookies to develop our services and website, analyze the use of the site, and target and optimize marketing. Website users can consent to or disable the use of cookies through their web browser’s settings. Most browsers permit cookies automatically. Please note that preventing cookies may limit the functionality of our website.

WHAT OTHER TYPES OF MONITORING DO WE USE ON OUR WEBSITE?
Our website was built on the Shopify e-commerce platform. Here you can read more about how Shopify uses your information.

We also use Google Analytics and Facebook Pixel on our site. You can read about Google’s ways of using your personal data here and about Facebook’s privacy policy here.

WHAT ARE MY RIGHTS AND OPPORTUNITIES REGARDING THE PROCESSING OF MY DATA?
Withdrawing consent

In the event that we process your data based on consent, you can withdraw your consent at any time by notifying us in any number of ways, such as sending e-mail to store [at] savotta.fi.

Access to data

You have the right to receive confirmation from us as to whether or not we are processing your personal data and which of your details we are processing. Furthermore, you have the right to receive supplementary information on the bases of the processing of your data.

Right to rectification

You have the right to request us to rectify any erroneous, obsolete or otherwise lacking personal data we may have on you.

Right to prohibit direct marketing

You may prohibit the processing of your personal data for direct marketing purposes by sending e-mail to store [at] savotta.fi.

Right to object to the processing

In the event that we are processing your personal data on the basis of public interest or legitimate interest, you have the right to object to this insofar as there is no substantial reason that would override your rights or the processing is not necessary for handling a legal claim. Please note that, in these cases, it is likely that we will no longer be able to serve you.

Right to limit the processing

In certain situations, you are entitled to demand that we limit the processing of your personal data.

Right to have your data transferred

If we have processed your data based on your consent or to fulfill an agreement, you have the right to receive the electronically disclosed data in a commonly used format for the purpose of transferring it to another service provider.

HOW DO I EXERCISE MY RIGHTS?
You can exercise the rights listed above by sending e-mail to store [at] savotta.fi or contacting us by other means. In this context, we will ask you to provide your name, address and telephone number and attach a copy of your passport, driving license or other personal identification to the message so that we can verify your identity. If you feel that your personal data has not been processed lawfully, you can also lodge a complaint with a competent supervisory authority.

CAN THIS PRIVACY POLICY BE UPDATED?
We may update this privacy policy if any changes to our operations or data protection principles occur. Updates may also be necessary if the legislation changes. The changes will enter into force immediately upon our releasing an updated privacy policy. For this reason, we request that you study the content of this privacy policy at regular intervals.

WHO DO I CONTACT IN DATA PROTECTION MATTERS?
You can contact our customer service: store [at] savotta.fi

Updated 25 August 2021