Updated 13.1.2024

Privacy Policy

In order to serve you to the best of our ability, it is necessary for us to collect and process some information about you.

We value your privacy and are committed to protecting it in accordance with this privacy policy, applicable laws, and good business practices.

This privacy policy contains information in accordance with the EU General Data Protection Regulation (GDPR) about what personal information we collect, how we process it, and what rights and options you have concerning your data.

1. General

MarieK Design Ltd (Business ID: 3402399-9) processes your personal data in accordance with this privacy policy and applicable legislation. Therefore, we ask you to carefully read this privacy policy.

By using our services or websites or contacting us, you accept that we process your personal information in accordance with this privacy policy. If you do not agree with these terms, we may not be able to serve you to the best of our ability.

2. For what purpose are my personal data collected and processed?

We collect, store, and process your personal data only for predefined purposes:

Managing customer relationships and customer communication.
Customer service and responding to contact requests.
Implementation and development of our services.
Monitoring and analyzing the use of our services and products.
Segmentation of customers to provide personalized content in products and services.
Ensuring the security of our services and products and investigating misuse.
Customer, opinion, and market research.
Developing our business.
Targeting marketing and advertising.
Direct marketing.

We do not perform profiling based on the personal characteristics of registered individuals or related automated decision-making.

3. What personal data is collected about me and from which sources?

We primarily collect your personal data from you during contact and when using our websites and services. We also collect information manually, for example, over the phone during customer service or sales interactions.

In addition to the data you provide, we collect information on our websites and services through cookies for the purposes of analyzing and improving the use of our websites and services, as well as for targeting marketing and advertising.

Furthermore, we collect data from public sources, such as the trade register and business register, as well as from other entities providing information about business decision-makers. Information collected from these sources includes business information and contact details of business decision-makers, such as name, email address, and phone number.

4. On what basis are personal data processed?

We process personal data based on several legal grounds. The legal basis for processing depends on our relationship with you. The table below shows the legal bases for processing personal data and examples of processing actions.

LEGAL BASIS	EXAMPLES OF PROCESSING ACTIONS
Contractual relationship or pre-contractual measures	We process customer data for all purposes mentioned in section 2 based on a contractual relationship.
Legal obligation	We retain and process customer data, e.g., for accounting purposes, in accordance with accounting legislation.
Legitimate interests of the data controller or a third party	If we do not have a contractual relationship with you, we process your data based on legitimate interests. Such processing actions include customer service, responding to contact requests, tracking and developing our websites, ensuring the security of our services, and investigating potential misuse. Processing personal data of business representatives for marketing purposes is also based on legitimate interests.
Consent	When subscribing to our newsletter as an individual, we process your data based on your consent. We request your consent for direct marketing when collecting data.

5. Who processes my data, and is it disclosed to third parties?

Your data is processed by employees of our company as they perform their duties. However, we use third-party information systems for data storage and processing. We ensure through contracts that your data is processed confidentially and in compliance with the law.

We disclose data to our collaboration partners in the IT, payment processing, transportation, and accounting sectors as necessary for service provision. This includes ordering payment or logistics services for your online store or other services provided by third parties through our websites or services. Information about such data transfers to third parties is provided separately when ordering the service.

We may also disclose data in compliance with contractual obligations or legal requirements. We may also disclose data if we are involved in a corporate or business transaction.

6. Are my data transferred outside the EU?

We use service providers whose servers are located within the EU. We do not transfer data outside the EU.

7. How long are personal data stored?

We only store personal data for as long as necessary for the purposes of data processing or as required by contract or law.

We aim to update and delete unnecessary data regularly. We typically delete data that has been unused for over two years, provided there are no other reasons, such as ensuring the security of our services or legal obligations, to retain the data.

Please note that, for example, the Accounting Act requires us to retain accounting records for at least six (6) years from the end of the financial year.

8. How are my data stored and protected?

Your data is stored on servers provided by our service providers, which are protected according to common industry practices. We ensure that the processing complies with applicable legislation and security measures are in place to prevent the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to data.

The personal data we collect and process is treated confidentially and is only accessible to employees or other individuals (including possible subcontractors) who need to know the data for the intended purpose and are legally bound to keep the data confidential. Access to your personal data is protected by user-specific IDs, passwords, and access rights.

9. Is data submission mandatory, and what are the consequences of not submitting data?

If you do not provide your personal data or allow their processing according to the principles of this privacy policy, we may not be able to serve you and fulfill the purpose of our operation. If you do not want us to process your data in accordance with this privacy policy, please do not provide us with any information.

10. Does the website use cookies, and what are they?

We use cookies on our websites to provide the best possible user experience for the users of our websites and services.

Cookies are short text files that the web server saves on the user’s device. Cookies help us gather information about how our websites and services are used. We use this information to develop our services, analyze usage, and target marketing and advertising.

You can allow or deny the use of cookies through your browser settings. Most browsers allow cookies by default. Please note that blocking cookies may limit the functionality of our websites and services.

11. What rights and options do I have?

RIGHT OF THE DATA SUBJECT	WHAT DOES IT MEAN?
Withdrawal of consent	If we process your data based on your consent, you can withdraw your consent at any time by notifying us. You can also prohibit the use of your data for direct marketing at any time by clicking the “Unsubscribe” link in each email sent for marketing purposes.
Access to data	You have the right to confirm whether we process personal data about you and to obtain information about what personal data we process. You also have the right to receive supplementary information about the legal grounds for the processing of your personal data.
Right to rectification	You have the right to request the correction of inaccurate or outdated, or otherwise incomplete data concerning you.
Right to erasure	You have the right to request the erasure of your data, for example, if the data is no longer needed for the purpose for which it was collected or if you withdraw your consent for data processing.
Right to Opt-Out of Direct Marketing	You have the right to prohibit the processing of your personal data for direct marketing purposes at any time by clicking the ‘Unsubscribe’ link at the end of our email messages or by informing our customer service. If you choose to opt-out of using your data for direct marketing as our customer, we will only send you messages necessary for customer relationship management.
Right to object to processing	If we process your personal data based on our legitimate interests or the public interest, you have the right to object to the processing of personal data concerning you, except when we have compelling legitimate grounds for processing that override your interests, or if the processing is necessary for the establishment, exercise, or defense of legal claims. Please note that in this case, we may no longer be able to serve you.
Right to restriction of processing	In certain situations, you have the right to request the restriction of the processing of your personal data. For example, if you believe that the data is incorrect, we may restrict processing while verifying the accuracy of the data or if you believe that the processing is unlawful and you do not want your data to be deleted.
Right to data portability	If we process your data based on your consent or for the performance of a contract, you have the right to receive the data you have provided to us electronically in a machine-readable, commonly used format so that you can transfer it to another service provider if technically feasible.
Right to object to automated decision-making and profiling	We do not perform profiling based on personal characteristics or automated processing leading to automated decision-making based on your data.

12. How can I exercise my rights?

You can exercise the above rights by contacting us, for example, by sending an email to [email protected]. Detailed contact information can be found at the end of this document. Please be prepared to prove your identity if your contact concerns the processing of your personal data.

If you believe that the processing of your personal data is not in accordance with the law, you also have the right to lodge a complaint with the relevant supervisory authority. The contact details of the Data Protection Ombudsman can be found on the Data Protection Ombudsman’s website.

13. Can this privacy policy be updated?

We update the content of the privacy policy as our operations develop and/or legislation changes, so we ask you to visit this page from time to time. You can find the latest update date of the privacy policy at the beginning of this document. Significant changes to the privacy policy will be announced to data subjects in connection with the update of the terms.

14. How can I contact you regarding data protection matters?

The easiest way to contact us regarding data protection matters is to send an email to [email protected]. Messages sent to this email address are treated confidentially by our data protection officer.

MarieK Design Oy

Mustikkatie 3
05200 Nurmijärvi
FINLAND
[email protected]
+358 40 912 9875