Privacy Policy

1. General

1.1. This privacy policy governs the collection, processing and storage of personal data. The data controller is Kruunu-Pukine Oy.
Email: hello@kruunu-pukine.fi

1.2. A data subject, for the purposes of this policy, is a natural person whose personal data is processed by the data controller.

1.3. A customer, for the purposes of this policy, is a person who purchases goods or services from the Store.

1.4. The data controller processes personal data in accordance with applicable legislation and ensures that personal data is processed lawfully, fairly and securely.

2. Collection of Personal Data

2.1. Personal data is collected electronically via the online store, email and customer communications.

2.2. By submitting their personal data, the data subject grants the data controller the right to process that data for the purposes set out in this policy.

2.3. The data subject is responsible for the accuracy of the data provided and must notify the data controller immediately of any changes.

2.4. The data controller is not liable for any damages arising from the submission of inaccurate data.

3. Processing of Personal Data

3.1. The data controller may process the following personal data:

First and last name
Email address
Phone number
Billing and delivery address

3.2. The legal basis for processing personal data is Article 6(1)(a), (b), (c) and (f) of the EU General Data Protection Regulation (GDPR) 2016/679.

3.3. Purposes and retention periods for processing personal data:

Order processing and fulfilment — up to 3 years after the order is fulfilled
Customer communications — up to 3 years after the last interaction
Marketing — until consent is withdrawn
Accounting — in accordance with statutory requirements (up to 7 years)

3.4. The data controller may share personal data with third parties to the extent necessary to provide the service (e.g. payment service providers, transport and courier companies).

3.5. The data controller applies appropriate technical and organisational measures to protect personal data.

4. Rights of the Data Subject

4.1. The data subject has the right to access their personal data.

4.2. The data subject has the right to request the correction or deletion of inaccurate personal data.

4.3. Where processing is based on consent, the data subject has the right to withdraw that consent at any time.

4.4. The data subject has the right to lodge a complaint with the relevant data protection authority.

4.5. To exercise their rights, the data subject may contact us at: hello@kruunu-pukine.fi

5. Final Provisions

5.1. This privacy policy has been drawn up in accordance with European Union and Finnish legislation.

5.2. The data controller reserves the right to amend this privacy policy by publishing any changes on the website.