Created 2 June 2025, updated 28 October 2026
1. Data controller
Fimarin
VAT ID: FI35277544
Haukilahdenranta 19 A 7, 02170 Espoo, Finland
Email: jarno@fimarin.fi
Phone: +358 40 544 2903
2. Contact person for privacy matters
Jarno Mustonen, jarno@fimarin.fi, tel. +358 40 544 2903
3. Name of the register
Fimarin customer register and website user register
4. Purposes and legal basis of processing
We process personal data for the following purposes:
- processing, payment, delivery and invoicing of orders
- customer service and responding to enquiries
- managing and maintaining customer relationships
- electronic direct marketing (only with consent)
- analysing website use and measuring advertising (only with consent, see section 11)
The legal bases for processing are:
- performance of a contract (GDPR 6.1 b)
- legal obligation, e.g. accounting (GDPR 6.1 c)
- legitimate interest of the controller, e.g. customer service and security (GDPR 6.1 f)
- consent, e.g. newsletters and analytics and marketing cookies (GDPR 6.1 a)
5. Personal data processed
- name
- contact details (address, phone number, email address)
- order details and payment transaction details (we do not see or store card details)
- customer feedback and enquiries
- customer account details, if you create an account
- based on consent: cookie data and information on website use (e.g. IP address, browser, device, pages viewed)
6. Sources of data
We receive data:
- from the data subject, e.g. when placing an order or contacting us
- from payment and delivery services in connection with fulfilling an order
- through cookies and analytics tools in accordance with your consent
- from public registers where necessary (e.g. company information)
7. Retention period
We retain data only for as long as necessary:
- accounting records are kept as required by the Finnish Accounting Act (vouchers 6 years)
- customer relationship data is kept for the duration of the relationship and thereafter as long as necessary, e.g. for handling warranty and complaint matters
- consent-based data is deleted when consent is withdrawn
- Google Analytics data is kept for the period set in the service settings
8. Data processors and disclosures
We use the following service providers, which process data on our behalf:
- Hostinger International Ltd – website and email hosting
- Stripe Payments Europe Ltd – payment processing (Klarna Bank AB if you choose Klarna as the payment method)
- Posti Oy – delivery of shipments
- Google Ireland Ltd – visitor analytics (Google Analytics) and advertising measurement (Google Ads), only with consent
- accounting firm and auditor
Data held by some service providers (e.g. Google and Stripe) may also be processed outside the EU/EEA, such as in the United States. Such transfers are protected by the EU–US Data Privacy Framework or by standard contractual clauses approved by the European Commission. We do not sell personal data.
9. Your rights
You have the right to:
- access your data
- request correction of inaccurate data
- request erasure of your data (”right to be forgotten”)
- restrict or object to the processing of your data
- transfer your data to another system
- withdraw your consent at any time
- lodge a complaint with the supervisory authority (Office of the Data Protection Ombudsman, tietosuoja.fi)
You can exercise your rights by sending a request to jarno@fimarin.fi.
10. Data security
We handle personal data confidentially and protect it with technical and organisational measures. The site uses SSL encryption, and access to data is restricted to those who need it for their work.
11. Cookies
Cookies are small text files stored in your browser. We use the following cookies:
- Necessary: shopping cart, checkout, login, language selection, payment security (WooCommerce, Stripe) and storing your cookie choices. These are essential for the site to work and do not require consent.
- Analytics: Google Analytics (_ga, _ga_*) collects statistics on how the site is used. Used only with your consent; kept for up to 2 years.
- Marketing: Google Ads (e.g. _gcl_au) for measuring and targeting advertising. Used only with your consent.
You can give or withdraw your consent at any time via the Cookie settingslink at the bottom of the page. You can also block cookies in your browser settings, but then, for example, the shopping cart may not work.