Controller and contact information
The controller responsible for processing personal data is:
CoNiko Holding Oy AB
00130 Helsinki, Finland
What personal data do we collect and why?
We collect and process your personal data when you place an order in our online store, subscribe to a newsletter, take part in competitions we organize or contact our customer service. We also collect information about your visit to our website using cookies.
We collect the following information about you: name, social security number, address, e-mail address, telephone number, order history and processing/shipping information, IP address, and information that you provide to our customer service.
We are looking for your official address from the Population Register.
This is how we process your personal data
We process your personal data in the following cases as permitted by law:
We process personal data when processing the order so that we can send you information about the status of the order.
The processing is necessary so that we can fulfill the contract with the customer.
We process personal data when dealing with issues related to customer service, such as questions, complaints and warranty issues.
Data processing is necessary so that we can help you as best as possible in legal matters related to customer service, such as complaints and refunds.
We process personal data so that we can send you offers and marketing material by e-mail, post or text messages. We recommend products to you on our website, send personal offers and reminders about the product content left in the shopping cart. This processing may require profiling.
Processing requires your consent to direct marketing.
We process personal data in order to complete the contests we organize.
The processing is based on our justified interest in organizing contests in which consumers participate.
Improvement and development
We process personal data in order to improve and develop our services, products and technical systems.
The processing is based on our justified interest in updating, improving and developing our service, products and technical systems.
Compliance with legal obligations
We process personal data in order to comply with accounting, tax and product safety laws.
We process data to fulfill our legal obligations.
Prevention of abuses and crime
We process personal data in order to prevent abuse of our services and crimes such as fraud.
Processing is based on our justified interest in preventing and preventing misuse and illegal use of services.
Who processes your personal data
We can share your personal data with other parties only when permitted by law. Such parties can be, for example, authorities, Bygghemma Group companies, logistics companies, marketing companies and suppliers. We have entered into a personal data agreement with suppliers so that they can process data on our behalf if necessary.
Transfer of personal data to countries outside the EU/EEA
In some cases, we may transfer personal data to legal entities in countries outside the EU/EEA. In such cases, the transfer takes place to countries for which the European Commission has decided that the contract clauses and other protective measures approved by the EU Commission are sufficient. Transfers to the United States may also be made in accordance with the Privacy Shield regulations.
How long personal data is stored
We keep personal data as long as necessary or as long as required by law.
Purchase and order history is stored as long as our legal obligations are valid.
Contact with customer service related to purchases and complaints will be kept as long as we are bound by the statutory requirements regarding the trade. Other contact with customer service is deleted after six months of communication.
Marketing-related information is stored until you yourself request its deletion or when you have not used the services for three years.
Information used in connection with abuses and crimes is stored for the time necessary to prevent abuses, report them and investigate possible crimes (e.g. fraud).
We will respond to your contact regarding your rights as soon as possible, but within a month at the latest.
Where permitted by law, we may charge you a processing fee to fulfill your request in relation to the points below.
You have the right to check what information about you is stored in our system. In addition, you have the right to receive a copy of the stored data.
You have the right to request the correction of incorrect information.
You have the right to request that your data be deleted in the following cases:
There are no longer grounds for retaining personal data for the purpose for which they were originally collected;
The customer has withdrawn his consent to the storage of data and there is no legal obligation to store it;
The customer has objected to the processing of his personal data, which was done on the basis of a legitimate interest and the customer's interest exceeds ours;
We have processed data illegally;
Personal data must be deleted based on a legal obligation.
Restriction of processing
You have the right to request the restriction of the processing of your data in the following cases:
You deny the correctness of the personal data for a period of time so that we have the opportunity to verify the correctness of the personal data;
We have used your data illegally and you object to the deletion of the data, requesting the restriction of their processing;
You need to process your personal data to handle a claim or other matter required by law, but the data is no longer needed for the purpose for which it was initially collected;
You have objected to the processing of your personal data, and we will assess whose interest comes first.
Objection to processing
You have the right to object to the processing of your personal data based on a legitimate interest. Processing ends if we do not have a legitimate interest that overrides your interest or if we need to continue processing legal claims.
You have the right to prohibit the use of your personal data in direct marketing. You can make a direct marketing ban to our customer service. In this case, we will not use your personal data for direct marketing.
You have the right to transfer data from one system to another. This means that the data subject has the right to receive his personal data in a structured and machine-readable form, which makes it possible to transfer them to another data controller.
If you are dissatisfied with the way we have processed your personal data, you have the right to file a complaint with the competent supervisory authority.
A cookie is a short text file that the web server requests to be saved on the computer (including mobile devices) to identify the visitor on the website. With the help of cookies, the service provider can develop its service to be even more customer-friendly, analyze the use of its site and offer its customers targeted product recommendations, offers and other benefits.
You can not accept third-party cookies. By following the instructions in the following links, you can make the necessary settings to deny these cookies:
Google uses the information it receives to evaluate the use of the website, collects reports on website activities and offers other services related to website activities and internet use.
If you do not want your visits to the site to appear in Google Analytics statistics, you can install an add-on in your browser by following this link: https://tools.google.com/dlpage/gaoptout