PRIVACY AND COOKIE POLICY

Updated: June 6, 2025

This privacy and cookie policy explains how [Company Name, Business ID] (hereinafter referred to as "the company" or "we") processes personal data in its online store, which operates on the Johku platform. It also describes the cookies and analytics tools we use to support the functionality and development of the website.

1. Data Controller

Haihatuksen Henki ry / Taidelaitos Haihatus

Business ID: 2150947-1

Address: Jousitie 68–70, 19650 Joutsa, Finland

Email: info@haihatus.fi

Phone: +358 40 153 1488

2. Purpose and Legal Basis for Processing Personal Data

We collect and process personal data for the following purposes:

Order processing and delivery

Payment transaction management (MobilePay, Visma)

Customer service and communication

Compliance with legal obligations (e.g. accounting)

Website usage monitoring and development (Google Analytics, Tag Manager)

Processing is based on either the performance of a contract, the customer’s consent, or legal obligations.

3. Data Content of the Register

The register may include the following information:

Name, address, email, phone number

Order and payment details

Delivery information

Customer feedback and inquiries

Cookie-based browsing data (e.g. IP address, device information)

4. Data Sources

The customer, when placing an order or making an inquiry

Website analytics and cookie tools

5. Data Disclosures and Transfers

Personal data may be transferred to the following service providers:

Johku (e-commerce platform and data processor)

MobilePay and Visma Pay (payment services)

Google (Google Tag Manager, Google Analytics – analytics)

Google may transfer cookie-based data outside the EU (e.g. to the United States). This use is based on the user’s consent.

6. Data Retention Periods

Customer Data

We retain personal data only as long as necessary for the purposes specified or as required by law. For example:

Order and customer data is stored for at least the period required by accounting law (6 years + the current year)

Customer feedback and inquiries are retained as needed for customer service purposes

Cookies and Analytics

We use Google Tag Manager and Google Analytics 4 to collect cookie-based data on website usage. This data is stored as follows:

Analytics cookies (GA4): data retained for a maximum of 14 months

Essential cookies: stored only during the session or for a short technical period (e.g. shopping cart functionality)

Cookie-based data does not include a person’s name or contact details, but it may be linkable to a person through other data.

7. Data Subject Rights

You have the right to:

Access your personal data

Request correction or deletion of inaccurate data

Object to or restrict the processing of your data

Withdraw consent (e.g. for cookies)

File a complaint with the supervisory authority (Office of the Data Protection Ombudsman in Finland)

8. Cookies and Tracking

What Are Cookies?

Cookies are small text files that are stored in your browser when you visit a website. They enable features such as the shopping cart and allow analysis of website usage.

Types of Cookies We Use:

Essential cookies – enable the functionality of the online store (e.g. session tracking, shopping cart)

Analytics cookies – collect information about website usage through Google Analytics

Marketing cookies – not used without separate consent

Cookie Consent

The website uses a cookie banner through which the user can give consent for non-essential cookies. Cookie settings can also be changed in the browser settings.

More information about Google’s cookie policies:

https://policies.google.com/technologies/cookies?hl=en

9. Data Security

We use secure connections (SSL) and restricted access rights to protect personal data. The Johku platform and payment services comply with payment transaction security standards.

Questions?

Please contact us at: info@haihatus.fi