Privacy Policy

Date of preparation: 02/06/2025Last updated: 02/06/2025

1. Data Controller

Fimarin
Business ID: 3527754-4
Address: Haukilahdenranta 19 A 7 02170 Espoo
Email: jarno@fimarin.fi
Phone: 0405442903

2. Contact Person for Data Protection Matters

Jarno Mustonen
Email: jarno@fimarin.fi
Phone: 0405442903

3. Name of the Register

Fimarin customer register and website user register

4. Purpose and Legal Basis for Processing Personal Data

Personal data is processed for the following purposes:

Managing and maintaining customer relationships
Processing, delivery, and invoicing of orders
Electronic direct marketing (with consent only)
Analyzing and developing website usage (via cookies)

The legal bases for processing are:

Performance of a contract (GDPR 6.1.b)
Legal obligation (GDPR 6.1.c)
Legitimate interest of the controller (GDPR 6.1.f)
Consent (GDPR 6.1.a) – e.g. newsletters or cookies

5. Personal Data Processed

Name
Contact details (address, phone number, email address)
Order information and payment details
Customer feedback and contacts
Cookie data and behavioral data on the website (IP address, browser, browsing history)

6. Data Sources

Data is obtained from:

From the data subject themselves (e.g. when placing an order)
Via cookies and analytics tools
From public registers when necessary (e.g. company information)

7. Retention Period for Personal Data

Data is retained only as long as necessary:

To fulfill contractual obligations (e.g. in accordance with accounting law, 6 years)
To maintain the customer relationship
Data based on consent is deleted upon request or after withdrawal of consent

8. Data Disclosures and Transfers

Data may be disclosed to the following parties:

Data may be disclosed to the following parties:
Delivery service companies (e.g. Posti, Matkahuolto)
Accounting firm and auditor

Data is not transferred outside the EU/EEA without an appropriate level of protection (e.g. standard contractual clauses approved by the European Commission).

9. Rights of the Data Subject

The data subject has the following rights:

Right of access to personal data
Right to request correction of inaccurate data
Oikeus pyytää tietojen poistamista (”oikeus tulla unohdetuksi”)
Right to restrict or object to processing
Right to data portability
Right to withdraw consent
Right to lodge a complaint with the supervisory authority (Data Protection Ombudsman)

10. Data Security

Personal data is handled confidentially and protected by technical and organizational measures. We use SSL encryption, firewalls, and access control.

11. Cookies and Tracking

Our website uses cookies and analytics (e.g. Google Analytics) to improve user experience. Consent for cookie use is requested in the manner required by law.

More information about cookies can be found in the cookie policy.