Privacy Policy
Contents
- General
- Data Controller and Contact Information
- What information about me can be processed and where does it come from?
- How is my personal data used and on what basis?
- How is my data stored and protected?
- How long is my data retained?
- What information is processed when paying on credit?
- Is my personal data disclosed to third parties?
- Are cookies used on the store's website and what are they?
- How do we use profiling and segmentation to improve the service experience?
- What rights do I have?
- How can I control the use of my data?
- Can this privacy policy be changed?
- Who can I contact?
General Information
Verkkokauppa.com is committed to protecting customer privacy and provides customers with the ability to control how their personal data is processed. If you want to limit the use of your personal data, you can do so on the account management page and through the cookie settings at the bottom of the page.
This privacy policy explains how we process customer personal data. In this privacy policy, "customer" refers to any individual who uses our services, including our website and the online store at www.verkkokauppa.com (Ulkoinen palvelu) (Avautuu uuteen välilehteen), as well as customers who visit our physical store and want to save their order to a customer account or place a pickup order at a pickup point without a customer account. Customers should carefully review this privacy policy to understand how Verkkokauppa.com processes personal data when using the services mentioned above.
The data we process when you use our services can be divided into:
- Information provided by the customer when using the service or ordering products
- Information observed from service usage
- Information derived through analytics
We use this data for the purposes described in more detail in this privacy policy, including:
- Providing an easy-to-use and secure service
- Delivering a great customer experience
- Improving product recommendations and marketing
- Developing customer service and the online store
- Fulfilling legal obligations
Data Controller and Contact Information
The data controller for the processing of personal data is:
Verkkokauppa.com Oyj (Business ID: 1456344-5)
Tyynenmerenkatu 11
00220 Helsinki
For questions about data protection and the processing of personal data, contact us by email:
tietosuoja@verkkokauppa.com (Ulkoinen palvelu)
What information about me can be processed and where does it come from?
The personal data we process is limited to only the information necessary for each processing purpose. How you use our services and what you do in our service affects which personal data we process. Below, we've organized the personal data we process by context.
Information collected when creating a customer account (core customer information):
We collect the following information from every customer who creates an account in our service.
- Name
- Phone number
- Email address - Customers can choose to use a third-party authentication service, in which case the email address may be the one used for Google, Facebook, or Microsoft login. In this case, we also process a token that allows us to authenticate the user against their chosen login platform.
Information collected when placing an order:
We collect the following information on a case-by-case basis when a customer places an order in our online store.
- Delivery address
- Identification information other than core information:- Personal identity code to identify the customer when entering into a credit agreement.
- Passport information or equivalent information required by Customs when ordering products or services tax-free from outside Finland.
- Payment information, including credit agreements and other credit-related information when paying with credit, as well as other billing information such as transaction identifiers that allow us to link the payment transaction to the order.
- Order information: Customer account identifier (customer number), delivery address identifier, billing address identifier, ordered products and their pricing information, order date.
- Delivery information: Selected delivery method and, where applicable, delivery address.
- Location information with customer consent for delivery time estimation or to display the nearest pickup point.
- Age verification information for 18+ products: When ordering 18+ products, customers are asked for their date of birth.
Information collected during other use of the Verkkokauppa.com website:
- Information collected through cookies. For more information about cookies, see "Are cookies used on the store's pages and what are they?" and cookie settings at the bottom of the page.- Online store usage and browsing data, as well as device identifiers.
- Product recommendation and other information and identifiers used for targeted content.
- Diagnostic information derived from service usage.
- Product reviews: Email address, username, and product review content.
- Logs derived from service usage.
Processing personal data as described in this privacy statement may be a prerequisite for entering into and fulfilling a contract between the customer and Verkkokauppa.com. Except for browsing products and leaving product reviews, you cannot use the functionality of our e-commerce platform without creating a user account—that is, without Verkkokauppa.com processing the information defined as core customer information. Furthermore, if you place an order in our online store, for example, you must provide us with certain personal data in addition to core customer information so we can process and deliver your order. If you don't provide the personal data requested in connection with these functions, we cannot provide you with the requested service, from creating a customer account to placing an order.
The primary source of information is the customer themselves. In addition, we may receive additional information from our partners, such as credit service providers. We notify customers about personal data received from third parties in accordance with the EU General Data Protection Regulation (GDPR) at the first contact with the customer or within one month of receiving the personal data. For corporate sales, we may collect public information about the company and its decision-makers from third parties, such as the Finnish Patent and Registration Office's Business Information System (YTJ) or similar services.