Privacy Policy
How we collect, use and protect your personal information
Introduction
minikauppa.fi ('we', 'our', 'us') is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services. We are based in Finland and comply with the General Data Protection Regulation (GDPR) and Finnish data protection laws.
Information We Collect
Personal Information
- •Full name and contact details
- •Email address for communication and orders
- •Phone number for order updates and customer service
- •Delivery address for shipping purposes
Order Information
- •Products ordered and quantities
- •Order preferences and special requests
- •Shipping and delivery information
- •Communication history and customer service interactions
How We Use Your Information
- •Process and fulfill your orders and purchases
- •Communicate with you about your orders and provide customer support
- •Arrange shipping and delivery of your products
- •Provide customer service and resolve any issues
- •Improve our services and website functionality
Lawful Basis for Processing
We process your personal data only when we have a valid legal basis under GDPR Article 6. The table below lists each processing activity and its corresponding legal basis.
Data Protection & Security
We implement appropriate technical and organizational measures to ensure the security of your personal information. Your data is stored securely and access is limited to authorized personnel only.
Security measures include:
- •SSL encryption for all data transmission
- •Secure servers and databases with regular backups
- •Limited access controls and staff training
- •Regular security audits and updates
Data Retention
We retain personal data only as long as necessary for the purpose it was collected, or as required by law. Deletion is performed securely after the retention period expires.
Order & Payment Records
7 years
Required by the Finnish Accounting Act (Kirjanpitolaki)
Customer Communications
2 years
Customer service and dispute resolution
Delivery Information
6 months after delivery
Shipment tracking and claim resolution
Analytics Data (Google Analytics)
26 months
Standard GA retention period; deleted immediately if consent is withdrawn
Cookie Consent Records
1 year
GDPR compliance record-keeping
Third Party Sharing
We do not sell, trade, or otherwise transfer your personal information to third parties except as described below. We may share your information with trusted service providers who assist us in operating our business.
Service partners include: Shipping services, payment processors, and email service providers
Your Rights (GDPR)
Right to Access
Request a copy of your personal data we hold
Right to Correction
Request correction of inaccurate personal data
Right to Deletion
Request deletion of your personal data
Right to Object
Object to processing of your personal data
Right to Complain
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu).
Contact Us About Privacy
Data Controller
Privacy Questions?
If you have any questions about this Privacy Policy or how we handle your personal information, please don't hesitate to contact us.
Contact Us