The privacy statement is a document designed for the data provider (in this case Emmsalabim online store’s customer), on the basis of which the customer understands why and how their personal data is processed.

What data we process

We process the following personal data related to customers:

• First and last name

• Street address, postal code, post office and country

• Telephone number

• Email address

• Language

• Transaction currency

• Online store order information, such as the product content of the order, payment method and delivery method

• Information related to providing customer service, such as customer messages and customer feedback and information related to responding to it

• Information related to customer surveys, such as information related to sending and receiving surveys and answers given by the customer

• For business customers, the company's name, business ID and VAT number

How do we get access to the data

We store information sent by the customer about the order, contact form, email messages and other communication channels (for example Instagram), contracts, survey responses, customer meetings and other situations where the customer discloses their information.

What is the data collected for

Customers' personal data is processed for the following purposes:

• for customer relationship maintenance

• for order processing, delivery and archiving

• for statistical purposes

How long the data is stored

Data is stored as long as is necessary to fulfill the purposes for which the specific data was collected. In addition, some data can be kept longer to the extent that it is necessary to fulfill the obligations set by law, such as accounting and consumer trade responsibilities.

Disclosure of data to third parties

Data is not regularly disclosed to other parties. Personal data is transferred to third parties only to guarantee the functionality of the online store. Data will only be disclosed to the following parties:

• for logistics partners (Posti)

• to the payment intermediary (Stripe)

• to third parties, for example authorities, within the limits permitted and required by the applicable legislation.

• to HotJar for analytics purposes

HotJar analytics

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.

For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.

Protection of the data

Emmsalabim's customer data is handled confidentially only by those employees whose job description it is. Care is taken when handling the data. The physical and digital data security of the servers storing the data is the responsibility of Squarespace, our website hosting provider. Here you can read more about Squarespace’s commitment to GDPR regulations and the transfer of data to outside the EU.

Customer rights

Please contact Emmsalabim’s customer service if you want to use your rights mentioned below:

• The customer has the right at any time to view their own data, to demand corrections to it and to request its deletion.

• The customer has the right to withdraw their consent to data processing at any time without affecting the legality of the processing carried out prior to the consent being withdrawn.

• The customer has the right to submit their case to the data protection authority if they consider that the processing of their personal data violates the applicable legislation.