Data protection and registration statement

Data protection and registration statement
Updated: 3.9.2025

A register description in accordance with Section 10 of the Personal Data Act (523/1999) and a statement in accordance with the EU General Data Protection Regulation (GDPR).

1) Data controller

WoolWomen Ltd.
Business ID: 3131563-8
Address: Tampereentie 272, 37560 Lempäälä
Email: info@woolwomen.fi

2) Contact persons

Mari Brandt
Email: info@woolwomen.fi

3) Register name

Customer register

4) Purpose of the register and basis for processing

Personal data is processed for the following purposes:

  1. Order fulfillment and customer relationship management

    • Basis for processing: agreement between the customer and WoolWomen Oy.

  2. Marketing (e.g. newsletters and offers)

    • Basis for processing: customer's consent when subscribing to the email list.

  3. Troubleshooting potential problems

    • Basis for processing: legitimate interest, i.e. processing the customer's order and improving the service.

5) Data content of the register

The register stores information provided by the customer, such as:

  • Name

  • Address

  • Telephone number

  • E-mail address

  • Order information and purchased products/services

6) Data retention period

Personal data is only retained for as long as necessary to process orders, maintain customer relationships, and fulfill legal obligations. Data used for marketing purposes is retained until the customer withdraws consent.

7) Regular data transfers

The following service providers use the personal data of data subjects to enable payment of orders, delivery and other online store operations:

  • Shopify – eCommerce Platform

  • Shopify Payments – payment processing

  • Paytrail – payment intermediary

  • PostNord, Matkahuolto, Posti – logistics services for order delivery

  • Shopify Newsletter – sending newsletters

The information will not be disclosed to third parties for any purpose other than to provide the above-mentioned services, and the information will not be used for automated decision-making or profiling.

8) Rights of the data subject

The data subject has the right to:

  • Check what information is stored about him/her

  • Get a copy of your information

  • Request correction, completion or deletion of information

  • Restrict the processing of your data

  • Withdraw consent to marketing at any time

  • Object to the processing of their data

  • Request the transfer of your data to another controller

  • File a complaint with the data protection authority

All requests can be sent by email to: info@woolwomen.fi

It should be noted that statutory retention obligations (e.g. accounting) may prevent the data from being completely deleted before the deadline expires.

9) Registry protection

Access to the data in the register requires a username and password. The data is only accessible to the data controller's employees who are responsible for technical or product-specific maintenance.

Data is protected by technical and organizational measures against unauthorized access, loss and misuse.