Note: Testikauppa is a test store and is not intended for actual sales. This privacy policy is a general-purpose GDPR template and is not intended to be used as-is as a legal document — please fill in the missing information and have it reviewed by a lawyer before publishing it for a real business.
1. Data Controller
Testikauppa
Business ID: [Business ID]
Address: [Street address, postal code and city]
Email: [Email address]
Phone: [Phone number]
Data protection contact person: [Name and contact details]
2. Personal Data We Process
We process the following categories of personal data about our customers and website users:
- Contact information: name, address, email address, phone number
- Order and payment information: ordered products, order history, payment method and billing details
- Delivery information: delivery address and any related delivery instructions
- Customer service inquiries and related correspondence
- Technical data about the use of our website, such as IP address, cookies and browser information
- Newsletter subscriptions and marketing consents, where applicable
3. Purposes and Legal Bases for Processing
- Processing and delivering orders – performance of a contract with the customer
- Customer service and handling complaints – performance of a contract and the controller's legitimate interest
- Invoicing and accounting – compliance with a legal obligation
- Marketing communications – consent or the controller's legitimate interest (e.g. direct marketing to existing customers, which can be opted out of)
- Developing the online store, security and fraud prevention – the controller's legitimate interest
4. Recipients of Personal Data
Personal data may be disclosed to the following parties to the extent necessary to provide our services:
- Payment service providers and banks for processing payments
- Shipping and logistics companies for delivering orders
- Providers of our e-commerce platform and other IT systems (e.g. the Finqu platform and its integrated services)
- Accounting and auditing service providers
- Authorities, where required by law
We have entered into the necessary data protection agreements (such as data processing agreements) with our service providers.
5. Transfers Outside the EU/EEA
Some of the service providers we use may be located outside the EU/EEA. In such cases, we ensure that any transfer of personal data complies with applicable data protection law, for example by using the European Commission's Standard Contractual Clauses or another approved transfer mechanism. [Add details here of any specific services and transfer safeguards that apply, if transfers occur.]
6. Retention Period
We retain personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with legal obligations (such as accounting legislation). For example:
- Order and invoicing data is retained for the period required by accounting legislation (generally at least 6 years from the end of the financial year)
- Customer relationship data is retained for the duration of the customer relationship and for a reasonable period thereafter
- Data collected based on marketing consent is retained until the consent is withdrawn
7. Your Rights
Under the EU General Data Protection Regulation (GDPR), you have, among others, the following rights:
- The right to access your personal data
- The right to request correction of inaccurate data
- The right to request erasure of your data ("right to be forgotten")
- The right to restrict the processing of your data
- The right to data portability
- The right to object to the processing of your data, including for direct marketing purposes
- The right to withdraw consent at any time
You can exercise your rights by contacting us using the details above. We will respond to your request within the time frame required by law.
8. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Finland, the competent authority is the Office of the Data Protection Ombudsman (www.tietosuoja.fi).
9. Cookies
Our online store may use cookies and similar technologies to enable the site to function, improve the user experience and provide visitor analytics. You can manage cookie settings through your browser settings or through any cookie preference tool provided on the website.
10. Changes to This Privacy Policy
We continuously develop our services and reserve the right to update this privacy policy as needed. We will inform you of any significant changes on our website. We recommend reviewing this policy periodically.
This privacy policy was last updated: [Date]
