Data Controller:

Unavaate Oy
Realparkinkatu 4
37570 Lempäälä
info@unavaate.fi
Business ID 3277672-7
Contact person: Anu Hannula

Register Name:

Unavaate Oy's online store customer register.

Purpose of Personal Data Processing:

Personal data may be processed for the following purposes:

• Processing, delivery and returns of online store orders
• Payment processing
• Customer service and communication
• Marketing
• Online store analytics and development
• Prevention of misuse

Data Content of the Register:

The register may store information provided by the user, such as: customer account details, name, address, phone number, email, language, website usage data (cookies), order and purchase information, payment data (through payment intermediary), possible data related to purchasing behavior and preferences, as well as reviews you provide.

Regular Data Sources:

Information provided by the customer when registering or ordering in the online store, customer service, cookies and analytics.

Data Users and Disclosure:

Personal data is processed only by persons authorized by the data controller whose job duties require processing such data. All persons processing data are bound by confidentiality obligations.
Our online store platform Shopify Inc. processes personal data on our behalf for appropriate functions, such as improving customer experience and service through review programs.

Data may also be processed by payment service providers (Klarna, Paytrail), delivery services (Matkahuolto, Posti, PostNord), email service (Klaviyo), and analytics and marketing tools (Google Analytics, Meta).

Data may be disclosed in connection with technical administration of the online store (e.g. server or online store platform administration), for order delivery, in case of payment problems, and to authorities when required and permitted by law.

Data Retention:

Order information is retained according to accounting law for at least 6 years. Browser and server-based tracking data is retained according to cookies accepted by the customer. Personal data is retained as long as the customer or contractual relationship is active and approximately two years after its termination for the purposes described in this privacy policy, such as relationship management, business development and marketing.

Use of Cookies:

We use cookies to track visitor traffic and improve service quality, which are stored on the user's computer. Cookie validity is limited and they cause no harm to the user's computer.

Register Protection Principles:

The customer register is processed confidentially. The register is properly protected from outsiders with firewalls and other technical security measures. The register is stored only in electronic form and random paper printouts are destroyed immediately and appropriately.

The register is used only by persons whose job description includes its use and who are bound by confidentiality obligations. Each register user has a personal username and password.

Right of Inspection:

According to personal data law, everyone has the right to check what information concerning them has been stored in the personal register.
Additionally, everyone has the right to correct incorrect information, request data deletion, restrict data processing, or withdraw consent.

Inspection/correction requests must be sent in a personally signed or similarly authenticated document or presented personally at our office. Requests should be sent to the above-mentioned contact person, who also responds to any additional information requests.

Data Updates:

Customers can update their name and address information in their online store profile. Additionally, customers can contact the above-mentioned contact person to update their information.

Other Rights Related to Personal Data Processing

Customers have the right to prohibit the processing of their data for marketing purposes. Requests for restricting data processing should be submitted by email to the register's contact person.