Privacy policy

Privacy Policy

1. Data Controller

Tilkkunen Oy
Höyläämötie 11 B, 2. krs v.32
00380 Helsinki
Finland

Business ID: 3572684-8
VAT number: FI35726848
Email: sales@tilkkunen.com
Phone: +358 45 183 0803

2. Contact person for privacy matters

Pinar Pir Söderlund
sales@tilkkunen.com

3. Personal data we collect

We may process the following data:

  • name
  • address
  • phone number
  • email address
  • order information and order history
  • payment-related data to the extent it is transmitted to us
  • customer service messages
  • technical data related to the use of the website, such as IP address, cookie data, and log files

4. Purposes of processing personal data

We process personal data for the following purposes:

  • receiving, processing, and delivering orders
  • payment processing
  • customer service and communication
  • handling complaints, returns, and other customer-related matters
  • accounting and fulfilment of statutory obligations
  • development of the webshop's operations, information security, and services
  • marketing only when there is a lawful basis, such as consent or an existing customer relationship

5. Legal basis for processing personal data

The processing of personal data is based on the following legal grounds:

  • performance of a contract
  • legal obligation, such as accounting and tax legislation
  • legitimate interest, such as the development of customer service, information security, and services
  • consent, where processing is based on consent, for example for certain cookies or newsletter subscriptions

6. Recipients of data

Personal data may be processed by the following service providers to the extent necessary for providing the service:

  • webshop platform and related application providers
  • payment service providers, such as intermediaries for card, online, and PayPal payments
  • transport and logistics services
  • accounting and financial management services
  • customer service, communication, and email services
  • analytics and web development services
  • information security, maintenance, and technical support services

Service providers process personal data on our behalf only to the extent necessary for providing the service. We do not sell personal data to third parties.

7. Transfers of data outside the EU/EEA

The webshop, payment, analytics, and other technical service providers we use may process personal data outside the EU or EEA. In such cases, we ensure that the transfer is carried out in accordance with applicable data protection legislation and that appropriate safeguards are in place.

8. Data retention periods

We retain personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with statutory obligations.

For example:

  • order information is retained for the period required by accounting legislation
  • customer service messages are retained for as long as required for handling the matter and any subsequent follow-up
  • analytics and cookie-related data is retained in accordance with the settings and retention periods of each service provider
  • marketing consent data is retained until the consent is withdrawn

9. Rights of the data subject

Under applicable data protection legislation, the data subject has the right to:

  • be informed about the processing of their personal data
  • access data concerning them
  • request rectification of inaccurate or incomplete data
  • request erasure of data where permitted by law
  • request restriction of processing where permitted by law
  • object to the processing of personal data where permitted by law
  • data portability where the right applies
  • withdraw consent at any time where processing is based on consent
  • lodge a complaint with the Office of the Data Protection Ombudsman

10. Information security

We protect personal data with appropriate technical and organisational measures. Access to data is restricted to those persons who need it for their work duties.

11. Cookies

The website uses cookies and similar technologies to ensure the website's functionality, improve the user experience, collect visitor statistics, and develop the service. We may also use analytics or other tools related to the webshop's operations provided by third parties.

Users can manage their cookie preferences via the cookie banner or cookie settings on the website. Essential cookies are used to enable the website's functionality and cannot be disabled without compromising the website's operation.

12. Changes to the privacy policy

We reserve the right to update this privacy policy when legislation, services, or practices change. The current version is always available on our website.