Tietosuojakäytäntö

Privacy Policy 

Jasmin Yli-Huhtala Art, located at www.jasminylihuhtala.com, company ID 3161690-8, based in Finland, processes personal data provided by the Customer to fulfill orders, communicate with customers, and ensure compliance with both European Union (EU) General Data Protection Regulation (GDPR) and United States (US) data privacy laws, including the California Consumer Privacy Act (CCPA).

General Provisions

  1. Personal Data Controller: In compliance with GDPR and US data privacy regulations, the personal data controller is Jasmin Yli-Huhtala Art, company ID 3161690-8, located in Finland (hereinafter referred to as the "Controller").
  2. Contact Information:
    Email: jasmin.ylihuhtala@gmail.com     Phone: +358 440106091
  3. Personal Data: Personal data refers to any information that relates to an identified or identifiable natural person, including but not limited to name, contact details, and transaction history.

Source of Personal Data

  1. The Controller processes personal data obtained with the Customer's consent and data collected through the contract to purchase and fulfill orders on the Jasmin Yli-Huhtala Art e-shop.
  2. The Controller processes only the identifying and contact details of the Customer necessary for the fulfillment of the purchase contract.
  3. Personal data is processed for shipping, accounting purposes, and communication between the parties, as required by law. Personal data will not be made public or shared with third parties, except for necessary service providers.

Purpose of Data Processing

The Controller processes personal data for the following purposes:

  1. Registration on the website www.jasminylihuhtala.com in compliance with applicable laws (GDPR and CCPA).
  2. To fulfill the electronic order placed by the Customer (name, address, email, phone number).
  3. To comply with applicable legal obligations arising from the contractual relationship between the Customer and Controller.
  4. Personal data is necessary for the fulfillment of the purchase contract. The contract cannot be concluded without providing certain personal data.

Duration of Personal Data Storage

  1. The Controller will store personal data for the period necessary to fulfill rights and obligations arising from the contractual relationship between the Controller and Customer, and for up to 3 years after the conclusion of the contract.
  2. After this period, the Controller will securely delete or anonymize all personal data, in compliance with legal retention requirements.

Recipients and Processors of Personal Data

Third parties processing personal data of the Customer are subcontractors of the Controller. These services are necessary for the successful fulfillment of the contract and processing of the Customer’s order.

Subcontractors of the Controller include:

  • Shopify (e-shop system)
  • Shipping company (e.g., FedEx, UPS)
  • Payment processors (e.g., PayPal, Stripe)

Note: Some of these subcontractors may be based outside the European Union (e.g., in the United States). The Controller ensures that all data transfers comply with applicable laws, including the Standard Contractual Clauses for EU-US data transfers, where applicable.

Customer Rights

In compliance with GDPR and applicable US laws (e.g., California Consumer Privacy Act (CCPA)), the Customer has the following rights:

  1. The right to access personal data held by the Controller.
  2. The right to correct any inaccurate or incomplete personal data.
  3. The right to delete personal data (subject to certain legal exceptions).
  4. The right to object to the processing of personal data, for example, if the data is used for direct marketing.
  5. The right to data portability, meaning you can request a copy of your data in a structured, commonly used format.
  6. The right to withdraw consent to the processing of personal data, by sending an email to hello@jasminylihuhtala.com.
  7. The right to file a complaint with the relevant data protection authority, such as the EU Data Protection Authority or the Federal Trade Commission (FTC) in the US, in case of any concerns regarding data processing practices.

Security of Personal Data

The Controller implements technical and organizational measures to ensure the security and confidentiality of personal data. These measures include:

  • Secure password protection and access control to systems.
  • Use of antivirus software and encryption.
  • Regular maintenance and monitoring of systems to safeguard data.

Final Provisions

  1. By placing an electronic order, the Customer confirms that they have been informed about and agree to the terms of this Privacy Policy.
  2. The Customer accepts these terms by ticking the checkbox in the order form.
  3. The Controller may update these terms at any time. Significant changes will be communicated via email or clearly posted on the website.

Contact

If you have any questions about our privacy practices or this Privacy Policy, please contact us by email at hello@jasminylihuhtala.com or reach us at Hämeenkatu 19, Hyvinkää, 05800, Finland.

 

This Privacy Policy is effective as of January 1, 2025.