Ayna Atelje Oy (“AYNA” or “we”) recognizes the importance of protecting the privacy of your personal data. We process personal data under this privacy policy (“Privacy Policy”) and in accordance with the applicable legislation, including the General Data Protection Regulation (2016/679; “GDPR”) and other applicable national data protection laws in Finland.

In this Privacy Policy we provide information about the processing of personal data, what personal data we process, how we use your data and what rights you have regarding the processing of your data.

1. PERSONAL DATA PROCESSED AND SOURCES OF PERSONAL DATA

Personal data is usually collected directly from you, or it is obtained from the use of our website or other services. In addition, personal data may be collected and updated from publicly available sources, such as public search engines, public websites, social media platforms and public registers. We may also receive information from companies belonging to the same financial consortium with which we co-operate.

We collect your personal data when you: 

• visit or shop on our website or in our store
• subscribe our newsletter or register to our community
• participate our marketing campaigns, opinion polls, or other events organized by us
• communicate with us through social media channels or our customer service
• give us a permission for direct marketing
• share, publish or comment on content on our social media channels

The personal data collected and processed by us in accordance with this Privacy Policy can be divided into two categories: a) Basic Data, and b) Analytics Data. 

We may process the following personal data relating to you:

a)     Basic Data

• name and contact information
• date of birth
• language and country
• payment methods
• account credentials and registration date
• information about your interests
• contact with our customer service and communications with us
• participation and the data provided in our marketing campaigns and events
• participation and information in market surveys and opinion polls
• direct marketing consents and other permissions given by you
• public information available on your social media profile (if you have connected to our website, social media channel or other service using your social media profile)

b)     Analytics Data

We may automatically collect the following information relating to the technical device when using our Website:

• IP address
• device and device identification number
• country
• browser type and version
• operating system
• time spent on our website
• time and date of your visits to our website
• sections of the website you visited

2. PURPOSES AND LEGITIMATE GROUNDS

We process personal data mainly to pursue our legitimate interest to provide our products and services, run and develop our business, maintain and develop our customer and business relationships as well as marketing our services.

We may process personal data for the following purposes:

Product and service orders

We will use your data to process your reservation or purchase order and in case of possible returns or claims.

Community program

If you have registered for our community program, we will use your data to manage the community program and provide services related to the program.

Customer service, communication and marketing

We process your data for customer communications and to provide customer service, including responding to your feedback, messages or claims. We may process your personal data in order to correspond with you via different communication channels.

We also process personal data to market our products and services. In addition, we may process your personal data in order to optimize our website and product recommendations to better match your preferences. If you participate in one of our market surveys, we process your data in order to better understand our customers and to offer better products and services to you.

Events, campaigns and social media

We may use your data to organize events and promotions to identify and ensure your participation. If you participate in a competition organized by us, we may process the data you provide for the purpose of organizing and managing the competition.

Legal obligations 

We may process personal data to enable us to fulfill our obligations under the law.

3. PERSONAL DATA RECIPIENTS AND THIRD PARTIES

Personal data can be disclosed outside of AYNA when this is allowed or required by legislation. Information may be disclosed to, for example:

• the authorities
• in connection with a possible sale of business or other corporate transaction the buyer of the business or other relevant party related to the transaction
• the authorized service providers who perform services for us (including data storage, legal, accounting, sales and marketing services). We oblige such service providers contractually to ensure a sufficient level of data security to protect your personal data and to comply with applicable laws.
• companies belonging to the same financial consortium

Transfer to countries outside of EU/ETA

In some cases, we can also transfer personal data to organizations operating outside the EU/European Economic Area. Such data transfers we will ensure that there is an appropriate legal basis for the transfer and that the data processing and data security comply with the requirements of applicable laws.

 
4. STORAGE PERIOD

We will only retain personal data as long as is necessary for the performance of the contract and as long as required by the provisions laid down by laws and regulations concerning the
retention of the data. If we retain your data for purposes other than the performance of a contract, we will retain the data only if it is necessary for that purpose and/or provided for by law and regulations, or if we have legitimate interests such as bookkeeping, internal reporting and/or direct marketing.

5. YOUR RIGHTS

You have, for example, the right to access your data and the right to have your incomplete or inaccurate data rectified as described in further detail below. However, our operations entail statutory obligations to retain the data, and we may have the obligation to process your personal data even if you request the restriction of processing or erasure of the data.

You can influence the processing of your personal data in the following ways:

Right to access
You have the right to receive information from us of whether we process your personal data and to request a copy of your personal data.

Right to withdraw consent
In case the data processing is based on your consent, you may withdraw the consent at any time. If you withdraw your consent, we may still process your personal data on other legal grounds, for example to comply with applicable laws. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to rectification
You have the right to request us to rectify ny inaccurate personal data and to complete any incomplete data.

Right to erasure (right to be forgotten)
You have the right to request the erasure of your personal data. We will comply with such request unless we have a legitimate ground to not delete the data, or we have statutory obligation to retain the data.

Right to restriction of processing
Under specific conditions provided for in legislation, you have the right to request us to restrict processing of your personal data. The right to request restriction of processing does not apply to personal data processing resulting from our statutory obligations.

Right to data portability
To the extent that the processing of your personal data is based on consent or a contract, you have the right to receive the personal data you have provided us in a structured and commonly used format and the right to have the data transferred to another data controller.

Right to object
You have the right to object to the processing of your personal data if such data is processed for our legitimate interest. In case we do not have compelling legitimate grounds to continue processing such personal data, we shall no longer process the data after your objection.

Right to lodge a complaint
If you find the processing your personal data to conflict with the applicable data protection laws, you have the right to lodge a complaint with your local supervisory authority.

6. COOKIES

AYNA uses cookies and similar technologies in its website. Cookies are small text files that a browser stores on a user's device when using the Internet. Cookies are used for many reasons, the most common of which is the proper functioning of the website and advertising.

Why do we use cookies?

 We use cookies for various purposes. Some cookies are vital in order for the website to function properly. The cookies keep track of your settings and make your shopping experience more convenient by e.g. recognizing your device and remembering your preferences and settings. 

Cookies are also used to collect statistics. This information is used for analytical purposes and enables us to create the best shopping experience for you. The cookies we use do not collect any information that can be used to track or identify individuals.

We will as for your consent to store cookies on your device. Consent is sought when you first visit our website. You can disable the storage of cookies on your device in the browser settings. In this case, however, you should note that not all functions of the website will work as well as possible. You can always check which cookies are stored on your device and change and delete the stored cookies.

Commonly used cookies

Google Analytics:

We use Google Analytics to help us understand how our customers use the website. You can read more about how Google uses your data here: https://www.google.com/intl/en/policies/privacy/. 

Meta: 

Cookies from Meta, Pinterest, TikTok, Google, Microsoft, Acoustic and Criteo are used for marketing purposes. Meta’s privacy policy can be found here: https://www.facebook.com/privacy/policy and Pinterest here: https://policy.pinterest.com/en/privacy-policy and TikTok here: https://www.tiktok.com/legal/page/eea/privacy-policy/en 

Klarna:

In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. You can read Klarna's privacy statement and the cookies used here: https://www.klarna.com/international/privacy-policy/ 

7. AMENDMENTS

We may amend this Privacy Policy from time to time. When we publish changes, the effective date at the beginning of this policy will change to the effective date on which the changes take effect.

8. CONTACT

Controller: Ayna Atelje Oy, business ID: 3422486-2

If you have any questions or concerns regarding this Privacy Policy, please free to contact us at hello@aynaatelje.com.

Last update: 27 September 2024