Privacy policy

Use of Cookies

The Hyljewear.fi website collects some user data through cookies. A cookie is a small text file sent to a visitor’s browser, typically containing an anonymous identifier. Cookies do not reveal a visitor’s identity, and the information collected remains anonymous.

Cookies are used on the website for purposes such as analyzing visitor traffic, statistical tracking, and website development.

If you do not wish to accept cookies, you can adjust your browser settings. Please note that users visiting the website are considered to have accepted the use of cookies unless they disable them.

HYLJE Wear Customer and Marketing Register

Privacy statement in accordance with data protection laws (EU General Data Protection Regulation 2016/679 and Finnish Personal Data Act 523/1999).
Issued on July 1, 2022.

Data Controller

Hylje Wear, 3296849-7
Palttankatu 11 B 4, 21100 Naantali, Finland
+358 500 829 029
www.hyljewear.fi

Register Contact Person

Mia Ruusumo
myynti@hyljewear.fi

Purpose of the Register

The register is used for customer relationship management and maintenance, as well as marketing and order processing.

The Register May Contain the Following Personal Data:

• Customer name
• Address
• Email address
• Phone number
• Order history
• Communication log
• Data collected through cookies and analytics
• Information provided by the individual, publicly available internet sources, and other public sources such as social media platforms

Regular Data Sources

Contact and order details are stored when a customer places an order or subscribes to the newsletter. Only the email address is stored when subscribing to the newsletter.
Hylje Wear does not disclose collected data to third parties.

Register Security Principles

The data system and files are protected using firewalls, passwords, and other widely accepted technical measures in accordance with good practices. Manually maintained records are stored in locked premises, accessible only to authorized personnel.

Only the data controller and authorized personnel acting on behalf of the data controller have access to the register. Access requires a personal username and password, granted only to employees whose job role necessitates it. All users are bound by confidentiality agreements.

Register data is securely backed up and can be restored in case of a system failure.

Purpose of Personal Data Processing

The processing of personal data is carried out for the following purposes:

• Managing customer relationships
• Fulfilling the rights and obligations of both the customer and the data controller
• Processing personal data for online services, customer surveys, and marketing
• Direct marketing based on customer data through the data controller’s own communication channels and services
• Personal data is not shared with third parties
  
  

Categories of Personal Data Processed

The personal data processed may belong to the following groups:

• Individuals who are current or past customers of the data controller
• Individuals who have contacted the data controller
• Individuals who have submitted their information via contact forms
• Individuals who have given marketing consent
• Individuals who have placed an order through the online store

Rights of the Data Subject and Data Retention

Individuals whose data is stored in the register have the right to:

• Request access to their personal data
• Request correction of incorrect or incomplete information
• Withdraw consent if data processing is based on consent (e.g., withdrawal of marketing consent)
• Request data deletion, provided there are no legal obligations requiring continued processing
• File a complaint with the supervisory authority if they suspect unlawful processing

The data controller deletes the stored data when there is no longer a business need for processing, or if the individual requests data deletion based on data protection laws.

Requests related to these rights can be made via email to the register’s contact person. The request must be sufficiently specific to verify the identity of the individual making the request.