Register and Privacy Statement

Register and data protection statement regarding customer and marketing register

This is a combined register statement and information document in accordance with sections 10 and 24 of the Personal Data Act (523/1999) and articles 12 and 13 of the EU General Data Protection Regulation (679/2016) for Lasten Satumetsä customers, potential customers, and website users. Prepared on 22.09.2021.

1. Data Controller

Satumetsä Concept Group Oy

Asemantie 7

33470 Ylöjärvi, Finland

2. Contact person responsible for the register

Satumetsä Concept Group Oy
contact@lastensatumetsa.fi

3. Registered individuals

Customers (contact persons)
Potential customers
Website users

4. Register name

lastensatumetsa.fi customer register

5. Purpose and basis for processing personal data

We collect data from our customers for online order deliveries and customer relationship management. When shopping online, the primary source of information is the user of the online store, i.e., the customer themselves, who provides the data when placing an order. The purpose of processing personal data is to handle, deliver, and return orders, manage and maintain customer relationships, marketing, and enable contacts required for customer service. We may also use personal data for market research and customer surveys. The processing of personal data is based on our legitimate interest in collecting and analyzing relevant information to better understand our customers and develop relevant services.

6. Data stored in the register

The following information is collected from customers purchasing from the online store:

• First and last name
• Address
• Email address and phone number
• Customer number
• Order history
• Delivery tracking information
• Any additional information/requests provided by the customer
• Customer's consent to receive marketing communications, participation in possible competitions or customer satisfaction surveys where contact information is requested.
• Payment information related to clarifying payment transactions, refunds, and possible credit checks.

7. Payment service

For payment processing, we use the services of Klarna Oy, and for deliveries, the services of logistics companies, in which case the customer is directed to a third-party website. In such cases, the terms and privacy policy of the respective service provider apply to the site. Lasten Satumetsä does not store bank or credit card information in its systems.

8. Your rights

Individuals in the register have the right to request the deletion of their personal data from the register ("right to be forgotten"). Likewise, registered individuals have other rights under the EU General Data Protection Regulation, such as restricting the processing of personal data in certain situations.

Right of access

You have the right to review your personal data that we have stored. If you find any inaccuracies or omissions in your data, you can ask us to correct or complete the data to be accurate.

Right to object

You have the right to object to the processing of your personal data at any time if you feel that we have processed your personal data unlawfully or that we do not have the right to process some of your personal data.

Direct marketing prohibition

You have the right at any time to prohibit us from using your data for direct marketing. We do not sell or otherwise transfer your personal data to other parties for them to target direct marketing to you.

We acquire online advertising from companies such as Facebook and Google. However, these companies never receive your personal data, and such advertising is not direct marketing but is based on cookies. See the section on cookies for more details.

Right to erasure

If you feel that the processing of some of your data is not necessary for our tasks, you have the right to ask us to delete such data. We will process your request, after which we will either delete your data or inform you of a justified reason why the data cannot be deleted.

Right to lodge a complaint

You have the right to lodge a complaint with the Data Protection Ombudsman if you feel that we are violating applicable data protection legislation when processing your personal data.

9. Regular disclosures of data and transfer of data outside the EU or EEA

We do not disclose or sell data to third parties for marketing purposes outside the EU or EEA.

In order to process your order completely, we only disclose your information to our necessary e-commerce partners who comply with data protection policies, such as product manufacturers and delivery parties, to deliver the order using the delivery method chosen by the customer. For example, transport is handled by Matkahuolto, UPS, and DHL, GLS, and others, depending on the brand. This data transfer practice applies, among other things, to products shipped directly to the customer from the manufacturer within the EU. These products include: wallpapers, furniture, dolls, etc.

10. Principles of register protection

The register is processed with care, and data processed using information systems is adequately protected. When register data is stored on Internet servers, the physical and digital data security of their hardware is appropriately ensured. The data controller ensures that stored data, server access rights, and other information critical to personal data security are handled confidentially and only by employees whose job description includes it.

11. Cookies

This site uses cookies. You can accept or deny the collection of cookies. The site sends a cookie to the browser – a small text file that is stored on the computer's hard drive. Both temporary session ID cookies, which close when you close your Internet browser, and permanent cookies, which are stored on your computer's hard drive, are used. Cookies allow us to identify your browser and use the information thus obtained, for example, to count the browsers visiting our site and to analyze the use of our site, such as statistical tracking. They also allow us to examine and monitor our users' interests and thus develop our websites. All collected information is anonymous, and online activities cannot be linked to a specific person.

Most Internet browsers automatically accept cookies, but if you wish, you can modify your browser settings and disable cookies at any time. You can avoid cookies by modifying your browser software settings and refusing their use.

Advertising cookies help us select the most suitable and interesting advertisements for you. They also prevent the display of the same advertisements. The information collected by cookies and web beacons does not tell us or third parties any personal information, such as your name or contact details. Third-party advertisers may also use technology to measure the effectiveness of advertisements. For this purpose, they may use a tracker placed on our website to collect anonymous information. After receiving anonymous information about a user's visits to these and other websites, advertisers can design advertisements for products and services that may be of interest to the user.