Privacy policy

Carpet Care online shop on karva-apuri.fi and karva-apuri.com, business ID 1968972-5

Processes personal data provided by the customer who fulfils and confirms the terms of use, the processing of electronic orders and deliveries and the necessary communication within the time required by law.

General provisions
1. The controller of personal data that complies with the GDPR Regulation is Lemmikkihotelli Tassu&Tassu Oy Business ID 1968972-5

karva-apuri.fi and karva-apuri.com online shop

2. The contact details of the controller are: e-mail: susanna.paavilainen@gmail.com tel.: +358 44 50 444 64

3. Personal data is any information relating to an identified or identifiable natural person.

Source of personal data
1. The controller processes personal data obtained with the consent of the customer and collected by contract for the purpose of acquiring and fulfilling an e-commerce order.

2. The controller only processes the customer's identification and contact data necessary for the fulfilment of the purchase contract;

3. The controller processes personal data for shipping and accounting purposes and for the transmission of information required by the contracting parties for the time required by law. The personal data will not be disclosed or transferred to other countries.

Purpose of processing
The Controller processes the Customer's personal data for the following purposes:

1. website registration in accordance with Chapter 4, Section 2 of the GDPR of Webnode AG;

2. Electronic order created by the customer (name, address, email, phone number);

3. to comply with the law and regulations arising from the contractual relationship between the Customer and the Data Controller;

4. The personal data are necessary for the performance of the purchase contract. The contract cannot be concluded without the personal data.

Duration of storage of personal data
The controller shall store personal data for as long as necessary to fulfil the rights and obligations arising from the contractual relationship between the controller and the customer and for three years after the termination of the contractual relationship;

2. The Controller shall delete all personal data after the period necessary for the storage of the personal data.

Recipients and processors of personal data
Third parties processing the Customer's personal data are subcontractors of the Controller. The services of these subcontractors are necessary for the performance of the contract for the acquisition and processing of the electronic order in the contract between the Controller and the Customer.

The subcontractors of the Controller are:

Shopify (e-commerce system);
Freight forwarder; Travel Services
Google Analytics (website analytics);
Customer rights (e.g. Google Analytics (Google Analytics)
Google Analytics (mobile analytics):

1. the right of access to personal data;

2. the right to rectification of personal data

3. the right to have personal data erased;

4. the right to object to the processing of personal data;

5. the right to data portability;

6. the right to withdraw their consent to the processing of personal data in writing or by email to: susanna.paavilainen@gmail.com

7. the right to lodge a complaint with a supervisory authority in case of suspected breach of the Regulation.

If you wish to exercise your right to object to the processing of your personal data, you may contact the Data Protection Authority
1. The controller undertakes to take all technical and organisational precautions necessary to protect personal data.

2. The controller has taken technical precautions to secure the data storage facilities, in particular by ensuring password-protected access to the computer, using anti-virus software and regularly maintaining the computers.

Final provisions
1. By placing an online order in the online shop karva-apuri.fi or karva-apuri.com. The customer declares to be aware of all the personal data protection conditions and accepts them in full;

2. The customer accepts these rules by ticking the checkbox on the order form.

3. The Controller may update these Terms at any time. The new, updated version must be published on this website.

These Rules will enter into force on 14.11.2023.