Privacy
Policy

Privacy Policy

1. Data Controller

Kuoppa Oy

Business ID: 2109974-0

Address: Mari Rounaja – Karjaportintie 7, 90140 Oulu

Email: mari@kuopantila.fi

Phone: +358503753114

Kuoppa Oy is responsible for the processing of personal data and ensures that all personal data is handled in accordance with applicable data protection legislation (GDPR).

⸻

2. Name of the Register

Kuoppa Oy’s customer, marketing, and online store register.

⸻

3. Purpose of Processing Personal Data

Personal data is processed for the following purposes:

• Receiving, processing, and delivering orders

• Maintaining and developing the customer relationship

• Customer communication and service

• Processing payments and bookkeeping

• Newsletters, marketing, and campaign communications (with consent)

• Developing the website and services

⸻

4. Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• Contract: handling and delivery of customer orders

• Legal obligation: bookkeeping and tax-related requirements

• Consent: newsletters and marketing

• Legitimate interest: maintaining customer relationships and developing business operations

⸻

5. Data Content of the Register

The register may include, among others, the following information:

• Customer’s name

• Address

• Phone number

• Email address

• Order and payment details

• Delivery address

• Possible complaints or contact details

• Newsletter and marketing permissions

• Technical information collected via cookies (e.g. IP address, browser data)

⸻

6. Regular Sources of Information

Data is obtained from:

• The customer themselves when placing an order, contacting the company, or subscribing to a newsletter

• Cookies and analytics tools (e.g. Google Analytics, Meta Pixel, etc.)

⸻

7. Regular Disclosure of Data

Data may be disclosed only to the following parties:

• Payment service providers (e.g. Paytrail, Klarna, etc.)

• Transport and logistics partners (e.g. Posti, Matkahuolto)

• Authorities when required by law

Data is not disclosed to third parties for marketing purposes without the customer’s explicit consent.

⸻

8. Transfer of Data Outside the EU or EEA

Data is primarily stored within the EU/EEA area.

If a service provider (e.g. cloud service) is located outside the EU/EEA, we ensure that the data transfer is protected according to GDPR requirements (e.g. by using the EU’s Standard Contractual Clauses).

⸻

9. Data Retention Period

Personal data is retained for as long as it is necessary for:

• Maintaining the customer relationship

• Fulfilling legal obligations (e.g. bookkeeping, warranty)

When the data is no longer needed, it will be securely deleted or anonymized.

⸻

10. Rights of the Data Subject

The data subject has the right to:

• Access their personal data

• Request correction of inaccurate data

• Request deletion of data (“right to be forgotten”)

• Restrict data processing

• Object to processing for direct marketing

• Withdraw consent at any time

• Lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman in Finland)

All requests should be made in writing to: mari@kuopantila.fi

⸻

11. Cookies

Kuoppa Oy uses cookies to improve user experience and to analyze website usage.

Cookies are small text files stored on the user’s device.

The user can disable cookies in their browser settings, but this may affect the functionality of the website.

⸻

12. Data Security

All data is stored in secure systems and can only be accessed by authorized personnel who need the data for their work.

Data security is ensured through passwords, access restrictions, and technical safeguards.

⸻

13. Changes to the Privacy Policy

Kuoppa Oy reserves the right to update this Privacy Policy as needed, for example due to changes in legislation or in the company’s services.

The latest version of this Privacy Policy is always available on our website.

⸻

📅 Last updated: [e.g. October 17, 2025]

📍 Data Controller: Kuoppa Oy