Shipping to Europe now €8,90 | Free shipping for orders over €90

Currency: EUR

Data Protection and Registry Statement

This is the data protection and registration statement in accordance with the Hidastaja Art web store's Personal Data Act (Sections 10 and 24) and the EU's General Data Protection Regulation (GDPR). Prepared on 20 July 2019. Latest update 30 December 2021.

1 Registrar

Hidastaja Art (ID 2419981-9)

Arinatie 16 B 33

01520 Vantaa


2 The contact person responsible for the register

Heli Luokkamäki

Arinatie 16 B 33




3 Register name

Hidastaja Art web store's customer register

4 Purpose and legal basis of personal data processing

Personal data is processed within the limits allowed by legislation for the management and development of the customer base and in communication and marketing aimed at customers. The customer has the right to refuse direct marketing aimed at him. The processing of personal data is based on the controller's legitimate interest, contractual relationship and/or compliance with the controller's statutory obligation. The processing of personal data can also be based on the data subject's consent, which then forms the legal basis for the processing in the applicable parts. The controller has a legitimate interest in engaging in factual, justified and legal sales and marketing activities, including related customer profiling.

5 Data content of the register

The register basically contains the following personal information about all registered persons:

  • The person's first and last name
  • Email address
  • Local/postal address
  • Telephone number
  • Order details
  • Posti/Matkahuolto tracking information for orders

6 Regular sources of information

Personal data is collected from the registered person himself. Personal data is also collected and updated within the limits of the applicable legislation from generally available sources, which are related to the implementation of the customer relationship between the controller and the registered person and with which the controller fulfills its obligations related to maintaining customer relationships.

7 Personal data retention period

The information collected in the register is stored only for as long and to the extent necessary in relation to the original or compatible purposes for which the personal information was collected. Information about the registered person is deleted from the register two years after the customer relationship of the registered person with the controller has ended, and the obligations and measures related to the customer relationship have been completed. For example, accounting documents are kept for six years after the end of the accounting period.

8 Disclosure of personal data to others

Personal data can be disclosed within the limits permitted by law to the partners of the Hidastaja Art web store, to the extent that it is necessary for the order given by the customer. Third parties to whom it is necessary for us to disclose information in order to process orders:

  • Payment service providers: Klarna Checkout and Paytrail
  • Transport companies: Posti and Matkahuolto

This Privacy Statement covers the use of the customer's data only by the Hidastaja Art web store. Please also familiarize yourself with the privacy statements of our partners.

9 visitor tracking

This website uses the Google Analytics web analysis service provided by Google Inc. ("Google"). The tracking program's javascript code is run in the service with every page load. Google Analytics identifies the user's so-called with cookies (English cookies), which are text files saved by the browser on the computer. Information about the use of the website is transmitted and stored on Google's servers, e.g. Stateside. Google uses this information to compile reports on the use of the website, which are used for visitor statistics and to improve the service.User data collected with cookies is anonymous. The user can prevent the use of cookies by choosing to block cookies in their browser settings. In this case, the user may not be able to take advantage of all the site's functionalities. By using this website, the user accepts Google's data collection for the purposes mentioned above.You can at any time and permanently block the collection and use of your IP address with the help of the Google Analytics service. See for details. More information about Google's analytics tracking on Google's privacy page

The Facebook pixel is a cookie for targeting advertising and tracking results on Facebook. The pixel can be used to monitor, among other things, how many visitors from Facebook move to the website via an ad. The Facebook pixel collects data only from those users who have a Facebook username and who have given Facebook permission to use cookies. We use the pixel to monitor the behavior of our advertisements and target groups and to target advertising to the right target groups and customers. We use the information to compile anonymous and aggregated statistics to understand how people use our advertising and pages. Our goal is to improve the targeting and content of our marketing communications and the content and structure of our website. A Facebook user can, if they wish, modify their own advertising settings in their Facebook user account. You can read more information about Facebook's data protection practices here: Facebook's data protection practices and information about Facebook's cookie practices.

10 Principles of registry protection

The register is stored electronically and properly protected from outsiders with firewalls, passwords and other generally accepted technical protection measures in the field of information security. Materials containing personal data are stored in locked rooms, to which only designated and authorized persons have access due to their duties. The database containing personal data is on a server, which is kept in a locked state, to which only designated and authorized persons have access due to their duties.Access to databases and systems is only possible with separately issued personal user IDs and passwords. The registrar has limited access rights and authorizations to information systems and other storage platforms in such a way that the data can be viewed and processed only by persons necessary for their legal processing. Potential employees and other persons of the controller are committed to observe the obligation of confidentiality and to keep secret the information they receive in connection with the processing of personal data.

11 Rights of the website user regarding personal data

The customer has the right to check what information about him is stored in the register. Requests regarding the exercise of the data subject's rights shall be addressed in writing to the controller's contact person mentioned in point 1. Data inspection requests are answered in writing. If there are errors in the customer's data, the customer can submit a request to the controller to correct the error. The customer has the right to prohibit the use of their data for direct marketing or market and opinion surveys by notifying the controller.

The customer has the right to delete personal data processed by the Hidastaja Art web store at any time, except in the following situations:

  • The customer has an open matter in customer service
  • The customer has an open order that has not yet been fully delivered
  • The customer is suspected of misuse of our services or the customer has misused our services in the last four years
  • The customer has an unpaid debt to the Hidastaja Art web store, regardless of the payment method
  • If the customer has made purchases in our web store, we have to keep personal data related to the purchase based on accounting regulations.

12 Changes to data protection policies

We reserve the right to change this privacy statement. The latest version of the privacy statement can be found on this page. If the changes in the updated privacy statement are significant, we will announce them in a visible way at the beginning of the statement and on the homepage of the Hidastaja Art web store.

Gift card