1. Company Information

2. Data We Collect

When you use our services, we may collect the following personal information:

• Contact Information: Name, email address, phone number, delivery address
• Order Information: Products ordered, order preferences, special instructions
• Payment Information: Payment method details (processed securely through third-party providers)
• Technical Information: IP address, browser type, device information, cookies
• Communication: Messages sent through our contact forms or email

3. How We Use Your Data

We use your personal information for the following purposes:

• Order Processing: To fulfill your orders, arrange delivery, and communicate order status
• Customer Service: To respond to inquiries, provide support, and resolve issues
• Service Improvement: To improve our products, services, and website functionality
• Marketing: To send promotional emails and updates (with your consent)
• Legal Compliance: To comply with legal obligations and protect our rights

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Contract Performance: Processing necessary to fulfill your order
• Consent: For marketing communications and cookies
• Legitimate Interest: For business operations, fraud prevention, and service improvement
• Legal Obligation: For tax records and compliance requirements

5. Data Sharing and Third Parties

We may share your information with:

• Payment Processors: To process payments securely
• Delivery Services: To deliver your orders
• Email Services: To send order confirmations and updates
• Analytics Providers: To understand website usage (anonymized data)
• Legal Authorities: When required by law or to protect our rights

We do not sell your personal information to third parties.

6. Cookies and Tracking

Our website uses cookies to:

• Essential Cookies: Required for website functionality (shopping cart, authentication)
• Analytics Cookies: To understand how visitors use our site
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. However, disabling essential cookies may affect website functionality.

7. Data Retention

We retain your personal data for:

• Order Data: 6 years (required for accounting and tax purposes)
• Marketing Data: Until you withdraw consent
• Account Data: Until account deletion or 2 years of inactivity
• Contact Form Data: 2 years after last contact

8. Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or cookies
• Right to Lodge a Complaint: Contact the Data Protection Ombudsman in Finland

To exercise your rights, contact us at info@kakkupuisto.fi

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for data transmission
• Secure password hashing and authentication
• Regular security updates and monitoring
• Access controls and employee training
• Secure backup systems

10. International Data Transfers

Your data is primarily processed within the EU/EEA. If data is transferred outside the EU/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via email.

13. Contact Information

For questions about this privacy policy or to exercise your rights, contact us:

14. Data Protection Authority

If you have concerns about how we handle your data, you can contact the Finnish Data Protection Ombudsman: