Privacy policy

This is an English translation of Lauta Oy's privacy policy. In the event of any discrepancy, the Finnish version prevails.

Summary

Lauta Oy is committed to protecting the privacy of its customers.

In this privacy policy we inform our customers about how we process their personal data. Each customer is a data subject as defined in the General Data Protection Regulation (GDPR).

The data we collect can be divided into data provided by the user, data observed from the use of our online services and data derived through analytics.

We use the data to:

• Provide a good customer experience
• Develop our customer service and webshop

Data controller and contact details

The controller of the personal data processed is:

Lauta Oy (Business ID: 0150714-5)
Mäntytie 2
FI-37550 LEMPÄÄLÄ, Finland

You can ask our customer service for more information about data protection and the processing of personal data: salesnospam@lauta.fi

What data may be collected about me?

• Data provided by the user or that personally identifies the user
• Identification data, such as name
• Personal identity code to identify the customer when a credit agreement is made
• Contact details, such as address, email address and phone number
• Payment data, including credit agreements and other invoicing data
• Data observed from the use of our services and derived through analytics
• Purchase history, including ordered products and their prices
• Delivery data, such as the chosen delivery method and delivery address
• Webshop usage and browsing data and device identifiers

The main source of the data is the user, and we may also receive additional data from our partners, for example a credit service provider.

What is my personal data used for?

Personal data is used for

• Maintaining the customer relationship
• Delivering, processing and archiving orders
• Developing Lauta Oy's operations and services
• Improving the customer experience
• Statistical purposes
• Preventing misuse
• Providing better customer service

The data is processed on the basis of the customer relationship between the customer and Lauta Oy or on the basis of the customer's separate explicit consent.

How is my data stored and protected?

All personal data is protected against unauthorised access and against accidental or unlawful destruction, alteration, disclosure, transfer or other unlawful processing.

Lauta Oy stores customer data within the EU. The technical and process security of the data centres and webshop systems is at a very high level. The servers are protected against data breaches and denial-of-service attacks.

In processing personal data and planning the processing, we follow good data protection practices, including consolidation, minimisation, pseudonymisation and anonymisation of data wherever possible. The processing of personal data takes into account the requirements of the EU General Data Protection Regulation, applicable from 25 May 2018.

All access to personal data is monitored in accordance with good practice.

Who processes my personal data?

Only Lauta Oy's own employees have access to customer data, and our staff are trained to use the data securely and ethically. At Lauta Oy, rights to process customer data are assigned based on the needs of each role.

We use trusted contractual partners, in which case data may be transferred to a third party. Our agreements with all partners take into account the requirements of the GDPR and other legislation.

Company responsible for data management:
Lauta Oy (Business ID: 0150714-5)
Mäntytie 2
FI-37550 LEMPÄÄLÄ, Finland

How long is my data stored?

We keep your personal data only as long as necessary to fulfil the purposes described in this policy. In addition, some data may be kept longer to the extent necessary to fulfil statutory obligations, such as obligations relating to accounting and consumer trade, and to demonstrate that they have been properly fulfilled.

At the customer's request, their personal data can be deleted or anonymised from Lauta Oy's systems, after which the data is no longer used for the purposes listed in this policy.

For some data, legislation requires longer storage, for example for the following purposes:

• The Finnish Accounting Act sets longer retention periods for data regardless of whether the material contains personal data
• System log data is collected and stored as required by law so that we can offer our customers lawful and secure business
• Adequate backups of the webshop databases and systems are taken to secure data, correct errors and ensure data security and continuity

What rights do I have?

As a customer, you have the right to:

• Access your personal data, including the right to receive a copy of your personal data
• Request rectification or erasure of your personal data
• Under certain conditions, request restriction of processing or object to the processing of your personal data

In addition, if the processing is based on separate consent, you have the right to withdraw your consent at any time. Please note that this does not affect the lawfulness of processing carried out before the consent was withdrawn.

You can make a request to exercise your rights by contacting our customer service. The request must be specific enough for our customer service to verify your identity. If in some case we cannot fulfil your request in part, for example by deleting all data that we have a statutory obligation (such as credit data) or right to keep, we will let you know.

If you notice that the processing is deficient or unlawful, you have the right to lodge a complaint with the data protection authority.

How do I get the data stored about me?

You can request the data stored about you in our systems by contacting our customer service: salesnospam@lauta.fi

See the section “What data may be collected about me?” for more detailed information about the personal data we collect.

How can I influence the use of my data?

Lauta Oy is committed to offering its customers ways to influence the collection and use of their data.

You can also close your customer account at any time and ask Lauta Oy to delete your data by contacting us by phone or email.

Please note: in some cases not all data can be deleted, and legislation may require us to keep some data relating to the customer.

Is my personal data disclosed to third parties?

We disclose some necessary data to third parties to ensure delivery and for marketing. Your data is also passed on to the party monitoring the credit in connection with a credit decision.

We may use customer data with third parties for analysis and personalisation purposes. We may disclose purchasing behaviour and browsing data to partners so that we can offer you products and offers that interest you. Data used for analysis and personalisation is anonymised or pseudonymised whenever possible. Only we can link the pseudonymised data used to your name.

Where necessary, we also disclose data at the request of the authorities based on applicable legislation.

Does our website use cookies, and what are they?

Lauta.fi uses cookies and other similar technologies, such as the browser's local storage. Cookies are small text files exchanged between the browser on your device and the server. We use cookies to identify the customer, keep you logged in and run the shopping cart. For these functions, the use of cookies and accepting their use is mandatory. Visiting the site sets the cookies again if your browser allows it.

We also use other technologies, such as pixel tags (including Google Analytics) and trackers. These technologies help us better understand how our customers behave and tell us which products interest our customers and which functions and services are most useful to them.

Data used for analysis is anonymised whenever possible. Otherwise we process the data as personal data to the extent that the identifier contains data that can be linked to the customer, such as an IP address. Identifiers that have been linked to the customer in some way are also processed as personal data.

Can this privacy policy be changed?

We reserve the right to change this privacy policy as our services develop and legislation changes.

Who can I contact?

You can contact our customer service with questions about this privacy policy and marketing: salesnospam@lauta.fi or by post at Lauta Oy, Mäntytie 2, FI-37550 Lempäälä, Finland.