Your Cart

Register Description

1. Register Description

Date of preparation 23.3.2023

1.1. Register holder

Looperintie 51
23360 Kustavi

1.2. Person responsible for registry matters

Tuomas Sandroos / Kangaspalatsi
Looperintie 51
23360 Kustavi

1.3. Register name user register for online store.

1.4. Purpose of processing personal data (the purpose of the register)

Personal data stored in the online store user register is used for managing customer relationships, handling contacts, marketing purposes, and other purposes related to online services.

1.5. Contents of the register

The register collects basic information about registered users, such as:
- name
- address
- phone number
- email
- IP address

1.6. Regular sources of information

The register holder registers the information about the Kangaspalatsi online store user that the user provides when using the website.

1.7. Regular disclosures of data and transfers of data outside the EU or the European Economic Area

Our online store uses Hostdime service to maintain the website, which implements privacy protection in accordance with GDPR. You can read about Hostdime's commitment to GDPR compliance here. Payments are processed by Stripe and Klarna. You can read about Stripe's commitment to GDPR compliance here. The information about Klarna's privacy settings can be found here.

1.8. Principles of register protection

The information of Kangaspalatsi's online store user register is stored in a database maintained by Hostdime and in Kangaspalatsi's system, which is protected by the operating system's security software. Access to the system requires the input of a username and password. The system is also protected by firewalls and other technical means. Only certain pre-defined employees of the register holder are authorized to access the information contained in the register. The information in the register is located in locked premises. In addition to this, purchase receipts are stored as paper copies in an accounting firm and in locked premises at our company's home office for the statutory period after which the receipts are destroyed.

We use the services of Posti, Pakettikauppa, and other shipping companies for the delivery of online store orders, in which case your personal information regarding deliveries can also be found in the registers of these operators and selected shipping companies. This includes, among other things, your name, address, phone number, and email address. Please note that if you order a product as a gift for someone else, their information will also be transferred to these registers, depending on which delivery service you are using. In payment transactions, your information is transferred to the registers of Stripe or Klarna, depending on which payment service you are using.

1.9. Right to prohibit processing of personal data

The data subject has the right to prohibit the register holder from processing data related to them for direct marketing, distance selling, and other direct marketing purposes, as well as for market and opinion research, as well as for personal registers and genealogy purposes. The prohibition must be made in writing and addressed to the persons responsible for register matters.

1.10. Right to inspect personal data

The data subject has the right to inspect the personal data stored in the register and to receive copies of them. The inspection request must be made in writing and addressed to the persons responsible for register matters.

1.11. Correction of data

The data controller corrects, deletes, or completes the personal data in the register, which is incorrect, unnecessary, incomplete, or outdated from the processing purpose on their own initiative or at the request of the data subject. The data subject must contact the person in charge of registry affairs at the data controller to correct the information.

1.2. Privacy Statement

Privacy Statement 23.3.2023

Data Controller:

Looperintie 51
23360 Kustavi

We collect personal data for the purpose of managing customer relationships. The legal basis for the processing of personal data is the contract between us and the statutory obligations arising from it. Providing personal data is a requirement for entering into the contract. In other words, you cannot order goods from our online store if you do not provide your personal data.

We also collect personal data for marketing purposes. The legal basis for the processing of personal data is consent.

We do not make profiling or automatic decisions about you.

In order to offer you Klarna payment methods, we may pass on your personal data in the form of contact and order information to Klarna during the purchase transaction, so that Klarna can assess whether you are eligible for their payment methods and customize these payment methods for you. The personal data transferred is processed according to Klarna's own privacy notice. 

The following parties receive your personal data:
- our company and its employees
- payment intermediary, who receives payment from you

- transport company, who delivers the goods to you
- accounting firm, who records the order in our accounting
- auditor, who audits our accounting
- IT company, who maintains our website

We keep your personal data for:
- five years in the online store
- seven years in the email archive
- seven years in the accounting material

You have the following rights:
- the right to access personal data concerning yourself
- the right to rectify data
- the right to restrict processing (you can, for example, prohibit marketing) - the right to object to processing - the right to withdraw consent (you can, for example, withdraw your consent to marketing) - the right to lodge a complaint with a supervisory authority

We use cookies on our website. By using our site, you agree to our use of cookies.