Privacy Policy
Data controller
Aneken-Kristiin Aavik tmi / KRISH
Business ID: 3013112-4
Yöviläntie 44
03150 Huhmari, Finland
Email: krishlashshop@gmail.com
What personal data do we process?
In connection with the use of the KRISH online store and placing orders, KRISH may process personal data such as your name, email address, telephone number, delivery and billing address, order details, customer-service communications, and information required for payment and delivery.
Technical information relating to the use of the website may also be collected, and cookies and similar technologies may be used to collect information about how visitors use the website.
How is personal data used?
Personal data may be processed for receiving and handling orders, delivering products, processing payments, providing customer service, maintaining and securing the online store, and fulfilling statutory obligations such as accounting requirements.
Newsletter and marketing
Electronic direct marketing and KRISH newsletters are sent where there is an appropriate legal basis, such as the customer's consent.
You can unsubscribe from the newsletter at any time using the unsubscribe link included in the newsletter.
Disclosure of data and service providers
Personal data may be shared with service providers whose services are necessary for operating the online store, processing payments and delivering orders.
These may include, for example
Wix - online store and website service
Maksekeskus AS (MakeCommerce) - payment service provider
Transport and logistics service providers - delivery of orders
Personal data required to process payments is transmitted to Maksekeskus AS (MakeCommerce). Data may also be disclosed to public authorities where required by law.
Retention of data
Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable legislation. For example, accounting-related information is retained in accordance with statutory retention periods.
Protection of personal data
Personal data is processed appropriately and protected against unauthorised access, alteration, disclosure and other unlawful processing using appropriate technical and organisational measures.
Rights of the data subject
In accordance with applicable data-protection legislation, the data subject may have the right to:
-
receive information about the processing of their personal data;
-
request access to their personal data;
-
request correction of inaccurate or incomplete personal data;
-
request deletion of personal data where there is no longer a lawful basis for retaining it;
-
request restriction of the processing of personal data in certain situations;
-
object to the processing of personal data in certain situations;and
-
withdraw consent at any time where the processing is based on consent.
The data subject also has the right to lodge a complaint with the competent data-protection supervisory authority if they consider that their personal data has been processed in violation of data-protection legislation.
Privacy enquiries
For questions concerning personal data or this Privacy Policy, please contact: krishlashshop@gmail.com