Skip to content

Privacy Policy and Data File Description

This is the company’s privacy policy and data protection statement in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR).

Data Controller

The data controller for the personal data being processed is:
Konto Oy (Business ID: 2247970-2)
Ylä-Satakunnantie 20
39930 KARVIA

For more information about data protection and the processing of personal data, please contact us by email at tietosuoja@konto.fi.

Collection of Personal Data

Personal data may be collected as follows

  • Contact information, such as name, address, phone numbers, and email addresses
  • Passport information or equivalent Information required by Customs when ordering tax-free products or services from outside Finland
  • Personal identification number for customer identification when entering into a credit agreement
  • Information about the services and products ordered by the customer
  • Name, address, and business ID of the employer (business customers)
  • Payment information, including credit agreements and other billing information
  • Purchase history, including products ordered and their price information
  • Shipping information, such as the selected shipping method and shipping address
  • Online store usage and browsing data, as well as device identification data

Providing identification, contact, and payment information is mandatory when making a purchase through the online store.

The primary source of this information is the user themselves; however, we may also receive additional information from our partners, such as credit service providers. We will notify you of any personal data we receive from third parties in accordance with the provisions of the General Data Protection Regulation (GDPR) during our first contact with you or, at the latest, within one month of receiving the personal data.

Use of Personal Data

Personal data is used

  • To manage and maintain the customer relationship
  • To deliver, process, and archive orders
  • To develop our operations and services
  • To improve the customer experience
  • For analytics and statistical purposes
  • To prevent fraud
  • Data is processed based on the customer relationship between the customer and the company, a contract, use of the website, the customer’s separate explicit consent, or legal obligations.

Data is processed based on the customer relationship between the customer and the company, a contract, use of the website, the customer’s separate explicit consent, or legal obligations.

Storage and Protection of Personal Data

All personal data is protected against unauthorized access and against accidental or unlawful destruction, alteration, disclosure, transfer, or other unlawful processing.

Konto Oy stores customer data in Finland. In the processing of personal data and in our technical solutions, we adhere to best data protection practices, including data minimization and anonymization. The processing of personal data complies with the requirements of the EU General Data Protection Regulation (GDPR). Access to personal data is controlled in accordance with best practices.

In the customer’s legitimate interest, personal data is processed with care and, when necessary, transferred to partners to ensure the functionality of travel-related services and in accordance with regulatory requirements. In credit processing, the customer’s information is used to assess their creditworthiness.

Processors of Personal Data

Only the company’s own employees have access to customer data, and our staff is trained to handle the data securely and ethically.

We use trusted contractual partners, which may result in data being transferred to third parties. Our agreements with all partners comply with the requirements set forth in the EU General Data Protection Regulation (GDPR) and other applicable legislation.

Company responsible for data processing:
Konto Oy (Business ID: 2247970-2)
Ylä-Satakunnantie 20
39930 KARVIA

Retention of Personal Data

We retain your personal data only for as long as necessary to fulfill the purposes described in this privacy notice. In addition, certain data may be retained for a longer period to the extent necessary to fulfill legal obligations, such as those related to accounting and consumer transactions, and to demonstrate that we have properly fulfilled them.

At the customer’s request, personal data concerning them may be deleted or anonymized from the company’s systems. The deletion and anonymization process is irreversible, and we cannot restore deleted personal data.

For some data, legislation imposes obligations regarding longer-term retention, including for the following purposes:

  • The Accounting Act specifies longer retention periods for data, regardless of whether the data contains personal information or not
  • Fulfilling obligations related to consumer sales
  • Taking adequate backups of business databases and systems to secure data, correct errors, and ensure data security and business continuity

Regular data sources

  • Information provided by the individual
  • Suomen Asiakastieto Oy in connection with credit processing
  • Personal data may also be collected and updated from authorities and companies that provide services related to personal data, such as authorities or companies that provide contact information update services, for example: the VRK/Population Information System, Posti’s address information system, telephone companies’ contact information registries, and other similar private and public registries

Regular Disclosures of Data

We do not disclose, sell, or rent a data subject’s personal data to third parties. We disclose data to third parties only in the following cases:

  • To an analytics partner (e-commerce, non-identifying analytics)
  • To an accounting firm
  • To a customer management system
  • To a payment processor when paying by credit card
  • To a credit provider, if the customer selects a credit company invoice or installment plan as the payment method
  • To the shipping company, if the selected delivery method is pickup at a pickup point, delivery to the nearest post office, or door-to-door delivery
  • To the product supplier when ordering products for direct delivery
  • To a collection agency, when invoices become overdue and are transferred to collections

Personal data is provided to authorities in accordance with legislation and specific requests. We always inform the customer of such requests as well, if permitted by law.

The company ensures data security and protection when transferring and processing data in accordance with the General Data Protection Regulation (GDPR). Measures to ensure the level of data processing by third parties include mutual agreements or other approved methods in accordance with the General Data Protection Regulation (GDPR).

Transfer of Data Outside the EU or EEA

Personal data is not transferred outside the EU or the EEA.

Data Protection Principles

Manual data

Our company ensures the security of its premises in accordance with its data protection policy. Staff are actively trained and guided on matters related to the General Data Protection Regulation (GDPR).

Digital data

Our company stores data in systems related to customer relationships, customer management, and marketing. Company staff log in to various systems using personal usernames and passwords. The storage of digital personal data is carried out in collaboration with partners who comply with the provisions of the EU General Data Protection Regulation (GDPR).

Rights of the Data Subject

As a customer, you have the right to:

  • Access your personal data, including the right to receive a copy of your personal data
  • Request the rectification or erasure of your personal data
  • Under certain conditions, to request the restriction of processing or to object to the processing of your personal data

In addition, if the processing is based on separate consent, you have the right to withdraw your consent at any time. Please note that this does not affect the lawfulness of the processing carried out prior to the withdrawal of consent.

You can submit a request to exercise your rights by contacting our customer service. The request must be sufficiently specific so that our customer service can verify your identity. We will notify you if we are unable to fulfill certain aspects of your request, such as deleting all data that we are legally required (e.g., credit information) or entitled to retain.

If you notice that our processing is deficient or unlawful, you have the right to file a complaint with the Data Protection Ombudsman.

Requesting Personal Data

You can request the data stored in Konto Oy’s systems by contacting us via email at: tietosuoja@konto.fi.

Use of personal data

Konto Oy is committed to providing its customers with the opportunity to influence how their data is processed. You can decide for yourself whether to receive targeted marketing and choose to accept or decline various marketing messages. Customers may also request that Konto Oy delete their personal data at any time by contacting our customer service. Note: In some cases, not all data can be deleted, and legislation may require us to retain certain customer-related information.

Cookies

Cookies are small text files stored in your browser by the websites you visit. Websites use cookies to help users navigate efficiently and perform certain functions. By law, cookies that are essential for the website’s operation may be set in your browser without your consent. All other cookies must be accepted by the user before they can be set in your browser.

You can view the cookies used by this website through the cookie notice. You can always find the cookie notice in the lower-left corner of the site. Through the cookie notice, you can also change or withdraw your consent to various cookies.

Changes to the Privacy Policy

Due to the development of our services and changes in legislation, we reserve the right to amend this Privacy Policy. Registered customers will be notified of any significant changes to the Privacy Policy when the Terms of Service are updated.

Contact Information

You can contact us with questions regarding privacy, data processing, and this Privacy Policy by email at tietosuoja@konto.fi. For other matters, please contact our customer service at tilaukset@konto.fi.