Privacy Policy

1. Controller

 Personal Finance, Kaupinmäenpolku 10 A 10, 00440 Helsinki

 (hereafter ”we”)

2. Point of contact

 privacy (a )

3. Name of register consumer list

4. What is the legal basis for and purpose of the processing of personal data?

The legal basis for processing personal data is the legitimate interest of the company based on a customer relationship and/or the performance of a contract and/or consent. We will process your data because we have a contract with you through providing you with some service you have requested.  We will also use your personal data to send you sales and marketing communications that we believe may be of interest to you if we have your explicit consent for this activity, or if you are an existing customer where we have a legitimate interest in communicating with you.  You can opt out of sales and marketing communications from us at any time.

We use your personal data:

  • To provide an enjoyable website experience that makes buying effortless and helps you to find those products you like best
  • To deliver your purchases to you and to process related payments, returns and customer service
  • To personalize your digital experience and to allow us to deliver the type of content about our products and services most relevant to you
  • To collect payments from you
  • To show you adverts when you browse the Internet and social media
  • To allow us to better service you in responding to your customer service requests
  • To send you newsletters if you subscribe

We use automated decision-making (incl. profiling) to identify your profile, online behaviour, age, consumer habits and to personalize your visit to the website and ensure that content from our site is presented in the most effective manner for you. We want to find out what you and other customers like and wish to develop our services.

5. What data do we process? 

We may collect the following personal data:

  • Basic information: your first name and surname
  • Contact information: email address
  • Payment details: for processing your purchase orders and possible returns
  • Possible direct marketing prohibitions and consents
  • Information regarding the customer relationship and contract: information of past and existing orders and sales, call recordings, correspondence with you and other contacts, cookies and information associated with them, as well as any other information you voluntarily provide
  • Data on your shopping habits and the pages and products you view and interact with upon visiting our website
  • If you register for a account, we collect your name, email address, password, country, day and month of birth and additional information regarding your marketing preferences. 

6. From where do we receive information?

We collect your personal data from you when you place an order, sign up for our marketing communications, browse our website or use any other services offered by our website .

We use “cookies” to collect information. Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from the service and stored on your computer’s hard drive. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

For the purposes described in this privacy notice, personal data may also be collected and updated from publicly available sources and based on information received from authorities or other third parties within the limits of the applicable laws and regulations. Data updating of this kind is performed manually or by automated means.

7. To whom do we disclose data and do we transfer data outside of EU or EEA?

 We do not sell, trade, or otherwise disclose to outside parties your personally identifiable information. However, we use subcontractors that process personal data on behalf of and for us such as service hosting partners and other parties who assist us in operating our service, conducting our business, or servicing you, such as:

  • Payment service providers
  • Professional service providers, such as marketing agencies, marketing platforms & services, advertising partners and website hosts who help us run our business
  • Credit reference agencies, law enforcement and fraud prevention agencies
  • Companies approved by you, such as social media sites.
  • We may also disclose your information when we believe disclosure is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.
  • Some of our subcontractors may be based in non-EU countries.  Where this is the case, we protect your privacy and your rights through the use of the European Commission’s standard data protection clauses.

8. How do we protect the data and how long do we retain it?

The security of your personal information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via Transport Layer Security (TLS) security protocol. Likewise, the entire browsing experience on our webstore is protected by the same security protocol (as indicated by the url beginning with https://). Only those of our employees, who on behalf of their work are entitled to process customer data, are entitled to use a system containing personal data.

We will not retain your personal data for longer than is necessary to fulfil the purposes for which you provided that personal data, unless the law permits or requires that we retain it for longer.  The retention period varies depending on the purpose of the processing.

We regularly assess the need for data retention in light of the applicable legislation. In addition, we take reasonable measures to ensure that the personal data we have is not incompatible, obsolete or inaccurate considering the purpose of the processing. We rectify or delete such information without delay.

9. What are your rights as a data subject?

As a data subject you have the right to:

  • Know what personal data of yours we are processing, where that data came from and how we are using that data
  • Ask us to update, correct or supplement the data we hold about you
  • Withdraw consent for processing for a specified purpose
  • Ask us to delete or erase your data from our systems
  • Limit or oppose our processing of your data
  • Object to processing at any time free of charge, including profiling in so far as it relates to direct marketing

Where processing is based on your consent or commission, ask us to supply the personal data we hold about you in an easily readable electronic format, or transfer that data direct to a third party nominated by you

For specific personal reasons, you also have the right to object to profiling and other processing operations, when the processing of your data is based on our legitimate interest. In connection with your request, you will need to identify the specific situation, based on which you object to the processing. We can refuse the request of objection only on legal grounds.

10. Who can you be in contact with?

All contacts and requests concerning this privacy notice must be submitted in writing or in person to the contact mentioned in section two (2).

11. Changes in the Privacy Policy

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.