We are on Facebook and Instagram
en

Privacy Policy

The online store Karvaton koira, located at www.karvaton.com, Business ID 3315734-6, processes the personal data provided by the customer, which is necessary for fulfilling and confirming the terms of use, electronic orders and deliveries, and the required information exchange within the time period required by law.

General Provisions

  1. The controller of personal data, compliant with the GDPR regulation, is Karvaton koira (the online store system), Business ID 3315734-6.

  2. The contact information of the controller is as follows: email: kauppa@karvaton.com.

  3. Personal data includes all information related to an identified or identifiable natural person.

Source of Personal Data

  1. The data controller processes personal data obtained with the customer's consent, collected through a contract for the electronic purchase and fulfillment of orders in the online store.
  2. The data controller only processes the customer's identification and contact information necessary for fulfilling the purchase contract.
  3. The data controller processes personal data for shipping and accounting purposes and for transmitting necessary information between parties for the period required by law. Personal data is not disclosed or transferred to other countries.

The purpose of data processing

The data controller processes the customer's personal data for the following purposes:

  1. Registration on the website in accordance with GDPR Chapter 4, Section 2;
  2. Electronic order created by the customer (name, address, email, phone number);
  3. Compliance with the law and regulations arising from the contractual relationship between the customer and the data controller;
  4. Personal data is necessary to fulfill the purchase agreement. The contract cannot be concluded without personal information.

The duration of storing personal data

  1. The data controller will retain personal data for as long as necessary to fulfill the rights and obligations arising from the contractual relationship between the data controller and the customer, and for a period of three years after the termination of the contractual relationship.
  2. The data controller must delete all personal data after the necessary retention period for personal data has elapsed.

Recipients and processors of personal data


The third parties processing customer personal data are subcontractors of the data controller. These subcontractors' services are necessary for the fulfillment of the contract regarding the acquisition and processing of electronic orders between the data controller and the customer.

The subcontractors of the data controller include:

  • Webnode AG (e-commerce platform)

  • Google Analytics (website analytics)

  • Suomen Posti (delivery services)

  • Paytrail Oyj (payment service provider)

Customer rights

In accordance with the regulation, the Customer has the right to:

  1. Access their personal data.
  2. Rectify their personal data if it is inaccurate or incomplete.
  3. Request the erasure of their personal data under certain circumstances.
  4. Object to the processing of their personal data.
  5. Request the transfer of their personal data to another controller.
  6. Withdraw their consent to the processing of personal data in writing or by email to: kauppa@karvaton.com.
  7. Lodge a complaint with the supervisory authority if they suspect a breach of the regulation.

Personal data security

  1. The data controller undertakes to implement all technical and organizational measures necessary to protect personal data.

  2. The data controller has taken technical precautions to secure data storage, particularly by ensuring access to computers through passwords, using antivirus software, and regularly maintaining computers.

Final provisions

  1. By placing an electronic order on the website www.karvaton.fi, the Customer declares to be aware of all the privacy terms and fully accepts them.

  2. The Customer accepts these rules by selecting the checkbox on the order form.

  3. The Data Controller may update these Rules at any time. The new, updated version must be published on this website. 


Updated on 13.05.2024.