Privacy Policy

This is the privacy policy for our online store in accordance with the EU General Data Protection Regulation (GDPR).

Last updated: August 26, 2026

1. Data Controller

Company name: AA-Tarvike ja Monipalvelu Oy
Business ID: 3291126-3
Address: Porasentie 895, 69950 Perho
Email: info@aatarvikepalvelu.fi
Phone: +358 400 124 566

2. Name of the Register

Online store customer and order register, as well as customer user accounts.

3. Purpose and Legal Basis for Processing Personal Data

The primary purposes of processing personal data are handling online store orders, delivering products, managing customer relationships, and maintaining customer accounts.

The legal basis for processing is the performance of a contract (such as order delivery and account management) and the data controller's legal obligations, such as accounting requirements.

4. Personal Data Collected

Only personal data necessary for processing orders and maintaining customer accounts is collected and stored:

  • Customer's first and last name
  • Contact information (postal address, phone number, and email address)
  • Order history and delivery information
  • User account login information (passwords are always stored in encrypted form)

5. Regular Sources of Information

Personal data is collected directly from the customer when placing an order or creating a customer account.

6. Regular Disclosure and Transfer of Personal Data

Personal data is disclosed to third parties only to the extent necessary to provide our services:

  • Logistics partners: Address and contact information may be provided to shipping companies for the delivery of physical products.
  • Payment service providers: Payment information is securely transferred to the payment service provider for processing payments.

Personal data is not transferred outside the European Union (EU) or the European Economic Area (EEA).

7. Principles for Protecting the Register

Personal data is handled with appropriate care and information systems are protected using appropriate technical and organizational measures. Digitally stored information is kept on secure servers and is accessible only to persons whose duties require access to the information.

Access to personal data requires a personal username and password.

8. Data Retention Period

Customer account information is retained for as long as the customer account remains active.

Information related to accounting records, such as orders and receipts, is retained for the period required by Finnish accounting legislation, generally six years from the end of the year in which the financial period ended.

9. Data Subject Rights and Account Deletion

The customer has the right to:

  • Access their stored personal data.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of their customer account and related personal data.

If you would like to delete your customer account, you can send a free-form request by email to: info@aatarvikepalvelu.fi.

Please note that information required by law, such as accounting records, cannot be deleted before the statutory retention period has expired.