Privacy policy

1. The controller

Name: Foto Monza Oy
Business ID: 3009635-7
Address: Asemakatu 2 B C, 45100 Kouvola, Finland
Telephone: 05 375 3220
Email: [email protected]

2. The person responsible for the register

The company: Foto Monza Oy
Name: Jyri Seppälä
Address: Asemakatu 2 B C, 45100 Kouvola, Finland
Telephone: 040 552 7479
Email: [email protected]

3. Data Protection Officer

The company: Foto Monza Oy
Name: Jyri Seppälä
Address: Asemakatu 2 B C, 45100 Kouvola, Finland
Telephone: 040 552 7479
Email: [email protected]

4. Purpose of the register

Kerättäviä henkilötietoja käytetään asiakassuhteen hallintaan, tilausten käsittelyyn ja toimittamiseen, käyttäjätilien hallintaan sekä palveluiden ja asiakaskokemuksen kehittämiseen sekä markkinointiin, kuten uutiskirjeisiin ja muistutuksiin ostoskoriin jääneistä tuotteista.

5. Grounds for data processing

Personal data are processed either on the basis of the customer's consent or for the performance of a contract.

6. Data content of the register

• Name and company name
• Address, postcode and town
• E-mail address and telephone number
• Username and subscription details
• Verkkosivujen käyttöä koskevat tiedot ja tunnisteet (esim. evästetunnisteet, selatut tuotteet ja ostoskoriin lisätyt tuotteet), jos olet antanut siihen suostumuksen

7. Data retention period

The data is stored for as long as it is needed to manage the customer relationship, process orders or improve customer service. Legal obligations, such as the storage of accounting records, may require a longer retention period.

8. Sources of information

Personal data is primarily obtained from the customer when he or she places an order in the online shop or enters data in the online form.

9. Regular disclosures and transfers of data

Personal data is disclosed to service providers who process it on our behalf for the purposes of operating our online shop, retail outlet and marketing activities. We regularly use the following service providers:

• Avarda – payment processing
• WooPOS – the shop’s till system
• Klaviyo – newsletters and customer communications
• SMTP.com – sending emails relating to the online shop (e.g. order confirmations)
• Google (Google Analytics, Google Ads, Google Merchant Centre) – visitor analytics, advertising and measuring advertising effectiveness
• Google Customer Reviews (Google Customer Reviews) – if you choose to take part in the survey after placing your order, Google will receive your email address, order number and estimated delivery date so that it can send you the review survey
• Meta (Facebook and Instagram) – advertising and measuring advertising effectiveness
• ProfitMetrics – measuring the profitability of advertising
• Cloudflare as well as our hosting provider – the technical operation and data security of the website
• OpenAI (ChatGPT Ads) – mainonta ja mainonnan tehokkuuden mittaus
• Serviceform – yhteydenottolomakkeet ja niiden mittaus

Some service providers (such as Google, Meta, Klaviyo and SMTP.com) may also process data outside the EU and the EEA, particularly in the United States. In such cases, the transfer is based on the EU–US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

Measuring in-store purchases: When you shop in our store and provide your contact details at the till, we may pass on information about your purchase (the date and value of the purchase) to Meta, along with your email address or telephone number in encrypted form. Meta uses this information solely to assess whether an advert led to the purchase; it cannot view your contact details in plain text.

10. Cookies and tracking

We use cookies and similar technologies on our website. When you visit the site, you can use the cookie banner to choose which categories of cookies you wish to allow. You can change your selection at any time via the link at the bottom of the page Cookie settings.

• Essential cookies enable the website’s basic functions, such as the shopping basket, logging in and remembering your cookie preferences. They cannot be disabled.
• Analytics cookies (Google Analytics) tells us how visitors use the website, so that we can improve it.
• Marketing cookies (Google Ads, Meta, Klaviyo, ProfitMetrics) enable you to target your advertising and measure the effectiveness of your campaigns.
• Preference scales remember your settings and preferences.

Evästeiden säilyttäminen ja tunnisteiden palauttaminen

Osa selaimista, kuten Safari ja Firefox, poistaa tai lyhentää evästeiden voimassaoloa automaattisesti, vaikka olet antanut niille suostumuksesi. Jos olet hyväksynyt markkinointi- tai analytiikkaevästeet, palvelimemme tallentaa niiden tunnisteista varmuuskopion omaan evästeeseensä (fm_bak_-alkuiset evästeet, voimassa enintään 400 päivää). Jos selain on poistanut alkuperäisen evästeen, palautamme tunnisteen varmuuskopiosta seuraavalla käynnilläsi.

Näin tunnistamme sinut palaavaksi asiakkaaksi myös silloin, kun selaimesi on poistanut evästeen. Tunnistamisen avulla voimme esimerkiksi lähettää muistutuksen ostoskoriin jääneistä tuotteista sekä mitata, mistä mainonnasta tilaukset ovat peräisin. Palautamme ainoastaan tunnisteita, jotka on alun perin asetettu suostumuksellasi. Varmuuskopiot koskevat palveluja Klaviyo, ProfitMetrics, Google Ads, Meta ja Google Analytics.

Jos perut markkinointi- tai analytiikkasuostumuksesi, poistamme myös kyseisen ryhmän varmuuskopioevästeet seuraavalla sivulatauksella, eikä tunnisteita enää palauteta.

Google’s Consent Mode

Käytämme Googlen suostumustilaa (Consent Mode v2, perustila). Googlen mittaus- ja mainostagit latautuvat vasta, kun olet antanut suostumuksen analytiikka- tai markkinointievästeille. Ennen suostumusta Googlelle ei lähetetä tietoja sivustomme käytöstä.

Myös muut seurantaskriptit, kuten Meta Pixel, latautuvat vasta suostumuksesi jälkeen.

You can also block cookies in your browser settings, but if you do so, some of the website’s features, such as the shopping basket, may not work.

11. Reviews and customer feedback

We collect and display customer reviews of products and services. Submitting a review is voluntary. We record information provided by the user (e.g. name and review text) when a review is submitted, and may link the review to an order to verify its authenticity.

Reviews are published on our website to support other customers. We do not edit content except to correct technical errors or remove illegal content. Reviews are kept on the website indefinitely until a user requests their removal or until they are no longer relevant.

12. Protection of the register

Data is always transferred over an SSL-secured connection.
Electronic data is protected by firewalls, usernames and passwords.
Only those employees who need access to the data to perform their job duties have access to the data.

13. Automatic decision-making

We do not make automated individual decisions in accordance with Article 22 of the EU General Data Protection Regulation.

14. Rights of the data subject

The data subject has the following rights:

• Right of inspection: the right to check what information is stored about them.
• Right of rectification: the right to request the correction of inaccurate information.
• Right of withdrawal: the right to request the deletion of data, unless a legal obligation prevents it.
• The right of restriction and the right of opposition: the right to restrict or object to the processing.
• Direct marketing ban: the right to object to the use of your data for direct marketing.
• Withdrawal of consent: if the processing is based on consent, it can be withdrawn at any time.
• Right of appeal: the right to lodge a complaint with the Data Protection Ombudsman (www.tietosuoja.fi).

Requests for verification and amendments can be sent by e-mail to [email protected].