{"id":59323,"date":"2020-10-12T12:57:21","date_gmt":"2020-10-12T09:57:21","guid":{"rendered":"https:\/\/origopro.com\/tietosuojaseloste\/"},"modified":"2026-09-08T05:30:15","modified_gmt":"2026-09-08T02:30:15","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/origopro.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n\t
\n\t\t
\n\t\t\t\t\t\t\t\t\t\n\t\t\t\n\n\t\t<\/div>\n\n\t\t\n\n\t\t
\n\t\t\t\n

ORIGOPRO CUSTOMER DATA PRIVACY POLICY<\/b><\/h1>\n

DATA CONTROLLER<\/b><\/p>\n

Origopro Oy<\/p>\n

H\u00f6yl\u00e4\u00e4m\u00f6tie 18 A<\/p>\n

00380 Helsinki, Finland<\/p>\n

shop@origopro.com<\/p>\n

+358-41 440 7349<\/p>\n

CONTACT DETAILS REGARDING THE REGISTER<\/b><\/p>\n

shop@origopro.com<\/p>\n

+358-41 440 7349<\/p>\n

WHAT DATA WE PROCESS<\/b><\/p>\n

We process the following personal data related to our customers:<\/p>\n

Basic customer information:<\/strong><\/p>\n

    \n
  • Name<\/span><\/li>\n
  • Address<\/span><\/li>\n
  • Date of birth<\/span><\/li>\n
  • Personal identity code (national identification number)<\/span><\/li>\n
  • Usernames and customer identifiers<\/span><\/li>\n
  • Gender<\/span><\/li>\n
  • Preferred service language<\/span><\/li>\n
  • Phone number(s)<\/span><\/li>\n
  • Email address<\/span><\/li>\n<\/ul>\n

    Purchase transaction data online and at sales points:<\/b><\/p>\n

      \n
    • Receipt data and information on purchases made online and in-store<\/span><\/li>\n
    • Purchase history data regarding purchases registered with promo codes<\/span><\/li>\n
    • Information related to orders, deliveries, and returns<\/span><\/li>\n
    • Dispatch, receipt, and response data from post-service or post-purchase surveys<\/span><\/li>\n<\/ul>\n

      Service usage data:<\/b><\/p>\n

        \n
      • Service usage and booking data across online channels, mobile applications, and physical stores<\/span><\/li>\n
      • IP address and information provided directly by the customer<\/span><\/li>\n
      • Depending on the service, data may also be stored as photographs<\/span><\/li>\n
      • Online behavior data on Origopro\u2019s websites and services, technical data, cookies sent to the user’s browser, and related information<\/span><\/li>\n<\/ul>\n

        Customer service data:<\/b><\/p>\n

          \n
        • Customer communications and message content, as well as categorization data necessary for service delivery<\/span><\/li>\n
        • Data related to customer feedback and responses<\/span><\/li>\n
        • Data regarding requested refunds and compensation (reason, amount, and bank details)<\/span><\/li>\n
        • Dispatch, receipt, and response data from post-service surveys<\/span><\/li>\n<\/ul>\n

          Marketing communication data:<\/b><\/p>\n

            \n
          • Channel-specific marketing consents: email, SMS, direct marketing opt-outs<\/span><\/li>\n
          • Information on sent messages and electronic message open and click-through rates<\/span><\/li>\n
          • Information on coupons sent by mail and their usage<\/span><\/li>\n
          • Information on event invitations sent and participation details<\/span><\/li>\n
          • Information regarding inclusion in telemarketing campaigns and participation details<\/span><\/li>\n<\/ul>\n

            Customer survey data:<\/b><\/p>\n

              \n
            • Opt-out preferences regarding survey reception<\/span><\/li>\n
            • Information related to sending and receiving surveys, and responses provided by the customer<\/span><\/li>\n<\/ul>\n

              Customer analysis and segmentation data:<\/b><\/p>\n

                \n
              • Information provided by the customer to personalize service and facilitate transactions (e.g., interests)<\/span><\/li>\n
              • Origopro customer segmentation data<\/span><\/li>\n
              • Information linked to the customer obtained from external data sources (e.g., name and address updates from the Population Register Centre \/ Digital and Population Data Services Agency)<\/span><\/li>\n<\/ul>\n

                Credit and financing data:<\/b><\/p>\n

                  \n
                • Customer name, address, and contact details<\/span><\/li>\n
                • Line-item and total purchase amounts, returns, chosen payment method<\/span><\/li>\n
                • Credit information, default records, and reasons for negative credit decisions<\/span><\/li>\n
                • Payment behavior data, bank details, TUPAS\/strong authentication data, billing details, service details, transaction\/contact records, and customer consents\/prohibitions<\/span><\/li>\n<\/ul>\n

                   <\/p>\n

                  PURPOSES AND LEGAL BASES FOR PROCESSING<\/b><\/p>\n

                  E-Commerce, Sales, and Order Fulfillment<\/b><\/p>\n

                    \n
                  • Sales and service delivery across digital channels and sales points<\/span><\/li>\n
                  • Targeting benefits appropriately in sales situations (e.g., online product recommendations)<\/span><\/li>\n
                  • Service delivery, development, monitoring, and customer service execution<\/span><\/li>\n
                  • Product range and service development<\/span><\/li>\n
                  • Customer relationship management (service communications, personalization)<\/span><\/li>\n
                  • Processing of payments, orders, reservations, deliveries, returns, invoicing, financing, and debt collection<\/span><\/li>\n
                  • Legal basis:<\/span><\/i> Performance of a contract and legal obligation.<\/span><\/li>\n<\/ul>\n

                    Customer Service<\/b><\/p>\n

                      \n
                    • Processing and responding to customer feedback and service requests (<\/span>Legitimate interest<\/span><\/i>)<\/span><\/li>\n
                    • Processing, responding to, and paying refund requests and compensation claims (<\/span>Legal obligation<\/span><\/i>)<\/span><\/li>\n<\/ul>\n

                      Customer Communications and Marketing<\/b><\/p>\n

                        \n
                      • Executing communications and marketing across channels (direct mail, email, Facebook)<\/span><\/li>\n
                      • Organizing competitions and raffles<\/span><\/li>\n
                      • Analyzing and segmenting customer data for targeted communication<\/span><\/li>\n
                      • Legal basis:<\/span><\/i> Legitimate interest for existing customers; customer consent for newsletters and SMS.<\/span><\/li>\n<\/ul>\n

                        Customer Surveys and Analysis<\/b><\/p>\n

                          \n
                        • Targeting surveys post-sale or post-service and gathering customer feedback<\/span><\/li>\n
                        • Data usage in analytics, reporting, and system development to improve business operations<\/span><\/li>\n
                        • Legal basis:<\/span><\/i> Legitimate interest.<\/span><\/li>\n<\/ul>\n

                          Legal Obligations and Administrative Measures<\/b><\/p>\n

                            \n
                          • Accounting, crime prevention\/investigation, drafting or defending legal claims<\/span><\/li>\n
                          • Seller liability for defects under consumer protection law, product liability compliance, and product recalls<\/span><\/li>\n
                          • Legal basis:<\/span><\/i> Legal obligation and protection of vital interests.<\/span><\/li>\n<\/ul>\n

                             <\/p>\n

                            DATA RETENTION PERIOD<\/b><\/p>\n

                            Processing is restricted to data strictly necessary for each purpose:<\/span><\/p>\n

                              \n
                            • Consent-based data:<\/b> Processing ends upon consent withdrawal (e.g., newsletter subscriptions are removed immediately upon unsubscription).<\/span><\/li>\n
                            • Purchase & Event data:<\/b> Purchase data is retained for 5 years. Event participation data is kept for up to 5 years from the event date.<\/span><\/li>\n
                            • Accounting records:<\/b> Invoicing, purchase, and return data are retained for 6 years from the end of the financial year (Accounting Act).<\/span><\/li>\n
                            • Debt collection:<\/b> Retained for an average of 4 years after collection concludes.<\/span><\/li>\n
                            • Feedback, claims, & legal matters:<\/b> Retained for the time necessary to resolve the matter, typically not exceeding 5 years.<\/span><\/li>\n
                            • Product recalls \/ Vital interests:<\/b> Erased promptly after completion of the recall process as instructed by authorities.<\/span><\/li>\n
                            • Surveys & Requests:<\/b> Survey records kept up to 5 years. Competition lists deleted after prize delivery. Rights requests records kept for 1 year (inspection request responses kept for 3 months)<\/span><\/li>\n<\/ul>\n

                              YOUR RIGHT TO WITHDRAW CONSENT<\/b><\/p>\n

                              Where processing relies on consent (e.g., electronic direct marketing), you may withdraw it at any time via customer service or through our website. You can manage channel-specific consents (SMS, email) or opt out of direct marketing and surveys entirely. Opting out of marketing will not affect essential transactional communications regarding your orders or services.<\/span><\/p>\n

                              YOUR RIGHTS AS A DATA SUBJECT<\/b><\/p>\n

                              Under data protection legislation, you have the right to:<\/span><\/p>\n

                                \n
                              • Access:<\/b> Request confirmation of whether we process your data and receive a copy of your personal data.<\/span><\/li>\n
                              • Rectify:<\/b> Request correction or completion of inaccurate or incomplete personal data.<\/span><\/li>\n
                              • Erase:<\/b> Request deletion of your personal data (“right to be forgotten”) under statutory conditions.<\/span><\/li>\n
                              • Restrict:<\/b> Request restriction of processing under legally defined circumstances.<\/span><\/li>\n
                              • Data Portability:<\/b> Receive data you provided in a structured, machine-readable format or request transfer to another controller (applicable to automated processing based on consent\/contract).<\/span><\/li>\n
                              • Object:<\/b> Object to processing based on legitimate interest or direct marketing (including profiling).<\/span><\/li>\n<\/ul>\n

                                HOW TO EXERCISE YOUR RIGHTS<\/b><\/p>\n

                                To exercise your rights, submit a request to the contact details listed above. Responses containing personal data will be sent via encrypted electronic form or registered mail to verify the recipient’s identity and maintain confidentiality.<\/span><\/p>\n

                                RECIPIENTS OF PERSONAL DATA<\/b><\/p>\n

                                Data is processed by authorized Origopro Oy staff and partner employees bound by strict confidentiality. Data is disclosed externally only as described below, required by law, during business transactions, or for debt collection:<\/span><\/p>\n

                                  \n
                                • Payment Processors:<\/b> Banks, credit institutions, PayPal, Paytrail.<\/span><\/li>\n
                                • Subcontractors & IT Providers:<\/b> IT infrastructure providers (Oracle, Microsoft, Amazon Web Services, Google LLC Analytics), marketing partners, logistics\/shipping providers, and address update services (Fonecta Oy).<\/span><\/li>\n
                                • International Transfers:<\/b> Data processing primarily occurs within the EU\/EEA. Access from outside the EU\/EEA may occur strictly in connection with IT service provision under standard contractual safeguards.<\/span><\/li>\n
                                • Authorities:<\/b> Statutory disclosures to police, customs, border control, or tax authorities.<\/span><\/li>\n<\/ul>\n

                                  RIGHT TO LODGE A COMPLAINT<\/b><\/p>\n

                                  If you believe your personal data is processed in violation of the EU GDPR, you may lodge a complaint with a supervisory authority in the EU member state of your residence, workplace, or place of alleged infringement. In Finland:<\/span><\/p>\n

                                  Office of the Data Protection Ombudsman<\/b><\/p>\n

                                  Street address: Ratapihantie 9, 6th floor, 00520 Helsinki<\/span><\/p>\n

                                  Postal address: P.O. Box 800, 00521 Helsinki<\/span><\/p>\n

                                  Phone: +358 29 56 66700<\/span><\/p>\n

                                  Email: tietosuoja@om.fi<\/span><\/p>\n

                                  MANDATORY DATA REQUIREMENTS<\/b><\/p>\n

                                  To fulfill our customer contract, basic details (name, contact info, date of birth, gender, purchase history, language preference) are required. Online orders require name, address, phone number, date of birth, and payment data. Custom tailoring or alteration services require physical measurements. Origopro reserves the right to suspend service delivery if essential requested data is withheld or erased upon request.<\/span><\/p>\n

                                  AUTOMATED DECISION-MAKING AND PROFILING<\/b><\/p>\n

                                    \n
                                  • Marketing Profiling:<\/b> Used to target communications and event invitations (does not carry legal or significantly impactful effects).<\/span><\/li>\n
                                  • Credit Assessment:<\/b> Customers requesting payment by invoice undergo credit profiling to evaluate creditworthiness, as required by law for contract execution. Data subjects retain the right to human intervention, to express their point of view, and to contest automated credit decisions.<\/span><\/li>\n<\/ul>\n

                                    PURPOSE LIMITATION & THIRD-PARTY DATA<\/b><\/p>\n

                                      \n
                                    • Purpose Limitation:<\/b> Data is used strictly for stated purposes. Compatible new processing requirements will be communicated in advance.<\/span><\/li>\n
                                    • Third-Party Sources:<\/b> Name\/address updates and direct marketing bans are updated via partners using Population Register Centre data. Credit information is obtained from Suomen Asiakastieto Oy.<\/span><\/li>\n<\/ul>\n

                                      DATA SECURITY<\/b><\/p>\n

                                      Origopro protects customer data using appropriate technical and organizational measures (access control, role-based permissions, personnel training, system monitoring). In the event of a data breach, affected individuals and relevant authorities will be notified in accordance with legal obligations.<\/span><\/p>\n

                                       <\/p>\n

                                      ADDITIONAL STATUTORY DETAILS ON DATA SUBJECT RIGHTS<\/b><\/p>\n

                                      Detailed Criteria for Data Erasure:<\/b><\/p>\n

                                      You may demand data deletion if:<\/span><\/p>\n

                                        \n
                                      1. Data is no longer needed for its original purpose.<\/span><\/li>\n
                                      2. Consent is withdrawn and no other legal basis exists.<\/span><\/li>\n
                                      3. You object to processing based on legitimate interest and no overriding grounds exist.<\/span><\/li>\n
                                      4. Data was processed unlawfully or must be erased to comply with a legal obligation.<\/span><\/li>\n
                                      5. Data was collected from a child regarding information society services.<\/span><\/li>\n<\/ol>\n

                                        Detailed Criteria for Processing Restriction:<\/b><\/p>\n

                                        You may request restricted processing if:<\/span><\/p>\n

                                          \n
                                        1. You contest data accuracy (restricted during verification).<\/span><\/li>\n
                                        2. Processing is unlawful, but you oppose erasure and request restriction instead.<\/span><\/li>\n
                                        3. The controller no longer needs the data, but you require it for legal claims.<\/span><\/li>\n
                                        4. You have objected to processing pending verification of overriding grounds.<\/span><\/li>\n<\/ol>\n

                                          Detailed Criteria for Objection:<\/b><\/p>\n

                                          You may object at any time to processing based on legitimate interest or profiling, as well as processing carried out for direct marketing purposes. Processing will cease unless compelling legitimate grounds overriding your interests can be demonstrated.<\/span><\/p>\n\t\t<\/div>\n\n\t\t\n