Privacy Statement rokuaskincare.com

 

This privacy statement aims to describe, as transparently as possible, how we process your personal data in the context of the online store rokuaskincare.com. If you nevertheless feel unsure about something in this respect, or if you have any questions in your capacity as a data subject, please contact us by sending an email to info@rokuaskincare.com.

 

We may update this privacy statement due to changes in our processing procedures or in the applicable legislation. You can always find the up-to-date privacy statement on our website.

 

Who are we?

 

Hygge Nordic Oy

2905963-9

P.O. Box 136, 00101 Helsinki, Finland

info@rokuaskincare.com

 

Why do we process your personal data?

 

When you visit our website:

When you visit our website, we automatically process and save the server’s log data, including your IP address, various time stamps and other data of the device you use.

 

We use this data to allow access to our website and also to analyse, report and improve the quality of our website. Different web browsers, for instance, display websites in different ways. Because of this, we process data concerning the browser you use so that we can ensure that the website is displayed to you correctly. In addition to the above, we use the data to diagnose any technical problems on our website. For example, if your browser tries to connect to our website but fails, we investigate what causes an error of this kind and try to fix it.

 

The data’s storage period: 1 year

Legal basis for the processing: legitimate interest

 

When you contact us:

When you contact us or request an offer from us, we naturally process your personal data, such as your email address, name and the content of your message. We process this data to respond to your questions and to manage the customer relationship.

 

The data’s storage period: 1 year

Legal basis for the processing: consent

 

Delivery, processing and archiving of orders

To process orders and deliver the products you have ordered, we process certain personal data of yours, including your contact details and information on the products you have ordered. We also use external payment service providers which process your personal data in connection to the payment of the products you have ordered.

 

We store your personal data only for as long as is necessary in terms of their purpose or for as long as an agreement or the law requires.

 

We aim to update data and erase any unnecessary data on a regular basis. As a rule, we erase any data that has not been used for more than two years, provided that there is no other basis – related to ensuring the security of our services, for example, or a statutory basis – for storing the data.

 

Please note that the Accounting Act, for one, requires us to store accounting records for a minimum of six (6) years as of the end of an accounting period.

 

 

How do we keep your data safe?

 

We do our best to keep all your data secure. We employ the appropriate technical and organisational means to protect your data against accidental or illegal destruction, loss, adaptation, and unauthorised transfer, disclosure or access.

 

Do we disclose your data to third parties?

 

We rely on the help of service providers when processing your data. We have made contractual arrangements with these service providers to ensure that they process the personal data only on our behalf. The following third parties are involved in the processing of your data:

 

Service provider	Purpose	Location
LevelUp Oy	LevelUp Oy maintains our website	Finland
Zoner Oy	Zoner Oy supplies us with the servers on which your personal data is stored	Finland
Paytrail Oy	Paytrail Oy is our payment service provider	Finland
OGOship Oy	OGOship Oy manages the logistics of our online store	Finland

 

 

In addition, we use Google Analytics for the analysis of our website. Some of your data related to the use of our website, such as your IP address, are conveyed to Google, which saves them on its own servers. You can find further information on Google’s personal data processing at: http://www.google.com/policies/privacy/

 

We also rely on external service providers in the payment of orders. These service providers process your personal data in the context of payments in accordance with their own data protection policies. For further information, go to www.paytrail.com.

 

What are your rights as a data subject?

 

In accordance with the General Data Protection Regulation, you can exercise the following rights in terms of the processing of your personal data:

 

Right of access

You have the right, at any time, to request confirmation on whether or not we process your data. If we process your data, you have the right to gain access to and receive a copy of your data.

 

Right to rectification

If you think that the data we store on you is inaccurate or outdated, you can contact us and ask us to rectify the data in question.

 

Right to be forgotten

You have the right to ask us to erase your data and we will do so, unless we are obligated by law to store the said data or have other legitimate grounds for storing them – if we still need some data to confirm a business transaction, for example, or if we are defending ourselves against or preparing for a legal claim.

 

Right to restriction of processing

In some situations, you have the right to ask us to interrupt the processing of your data. For example, if you need your data to initiate or execute legal action or for defence and you do not want us to erase related data in accordance with our storage periods.

 

Right to data portability

You have the right to receive some of your data in a commonly used and machine-readable format so that you can transfer those to another company.

 

Right to object

In certain situations, you also have the right to object to the processing of your data and, in such cases, we will stop all such processing, unless we believe that we have legitimate grounds to continue the processing. You can also, at any time, object to processing we carry out for the purpose of direct marketing.

 

Right to lodge a complaint

If you feel that your rights have been infringed, you always have the right to lodge a complaint with the supervisory authority at https://tietosuoja.fi/en/home.

 

Questions?

 

If you have any questions and/or information regarding this privacy statement or your rights as a data subject, please get in touch with us by sending an email to info@rokuaskincare.com.