Privacy policy

This following privacy policy:

– explains what we do with the personal data of the Customer* and/or the Buyer;
– explains how we collect, use and protect the personal data of the Customer and/or the Buyer;
– helps the Customer and/or the Buyer understand how their personal data is collected and used and what their rights are in relation to their personal data.
* An Anvol Oy Customer is a person who has registered as a Customer in the e-shop or retail shop without making a purchase.

1. General

The chief processor of personal data is Anvol Oy (company code 2760806-7, address Mannerheimintie 20, 00100, Helsinki, Finland).
When processing the personal data of the Customer and/or the Buyer, Anvol Oy follows the legislation of Estonia and the European Union.
All personal data of the Customer and/or the Buyer held by Anvol Oy is collected directly from the Buyer and/or the Customer.
We use the personal data of the Customer and/or the Buyer for the purposes Anvol Oy has collected such data for and to the extent necessary to fulfil these purposes. If the purpose of collecting personal data is met, we will delete excess personal data as follows:
a. Customer card data 7 years after data collection;
b. E-shop user account data 7 years after data collection.
c. Personal data 7 years after the purchase.
Anvol Oy may change the privacy policy at any time in accordance with the requirements of personal data protection.

2. Processing of personal data for direct marketing purposes

a) Anvol Oy’s Customers and Buyers can join direct marketing offers.
b) Direct marketing channels include SMS, e-mail and regular mail.
c) For the purposes of direct marketing, Anvol Oy transmits the Customer’s personal data to direct marketing service providers in accordance with the requirements for the protection of personal data.
d) Anvol Oy’s Customers and Buyers voluntarily consent to the processing of their personal data for the purpose of direct marketing.
e) Consent for direct marketing is given by the Customer and/or the Buyer by marking the relevant consent box.
f) Consent for the processing of personal data for the purpose of direct marketing is given by the Customer and/or Buyer by voluntarily registering as a user in the e-shop, when making a purchase in the e-shop, filling in the necessary fields when visiting the e-shop website or by filling in the necessary fields on the loyalty card registration form.
g) Anvol Oy forwards the personal data of the Buyer and/or the Customer to the partners providing direct marketing services.
h) The Customer and/or Buyer has the right to withdraw their consent for the processing of personal data for the purpose of direct marketing at any time. This does not affect the previous processing of personal data that was based on the Customer and/or Buyer’s consent.
i) Processing of personal data for the purpose of direct marketing will be terminated by revoking the consent given by the Customer and/or Buyer.
j) Anvol Oy’s e-shop uses information technology solutions based on legitimate interest, which enable the Customer and/or Buyer to get personalized offers.
k) A Customer who has registered as a user in the e-shop can revoke their consent to receive direct marketing materials at any time by logging in to the e-shop or contacting the data protection officer at Anvol Oy directly.
l) The Customer and/or Buyer may request the deletion, correction, renewal or suspension of the processing of their personal data collected for the purposes of direct marketing at any time. In order to delete, update or suspend the processing of personal data, the Customer and/or Buyer must e-mail klient@anvol.eu or fill in the inquiry form that can be found here

3. Processing of personal data for the purchase and sale agreement

a) Personal data is collected from the Buyer for signing a purchase and sale agreement.
b) In order to sign a purchase and sale agreement, it is necessary to collect the following personal data from the Buyer: first and last name, phone number, e-mail address and address for delivery of goods.
c) The Buyer’s personal data collected by the purchase and sale agreement may be transferred by Anvol Oy to third party contractual partners (providers of parcel transport service/courier service/direct marketing service).
d) Pursuant to the Accounting Act, the personal data of the Buyer collected upon concluding a purchase and sale agreement will be stored for 7 years.

4. Rights of the Customer and the Buyer

The rights of the Customer and/or Buyer are important to Anvol Oy. In the following we will give an overview of all the rights of Customers and Buyers in relation to their personal data.
Customers and Buyers have the following rights:
a) The Customer and/or Buyer can contact Anvol Oy with questions related to the processing of personal data at any time by e-mailing klient@anvol.eu .
b) The Customer and/or Buyer may contact Anvol Oy to gain access to their personal data at any time.
c) The Customer and/or Buyer have the right to contact Anvol Oy at any time to update their personal data.
d) The Customer and/or Buyer may ask Anvol Oy to delete their personal data (right to be forgotten).
e) The Customer and/or Buyer may ask Anvol Oy to restrict the processing of their personal data or submit objections to the processing of their personal data.
f) The Customer may ask Anvol Oy to transfer their personal data to a new data processor.
g) The Customer and/or Buyer may contact the data protection officer of Anvol Oy with questions concerning the processing of their personal data by e-mailing klient@anvol.eu
h) The Customer and/or Buyer have the right to turn to the Data Protection Inspectorate with complaints concerning the processing of personal data.

5. Transfer of personal data

Anvol Oy transmits the personal data of the Customer and/or the Buyer to the following third parties:
a) Contracted transport or courier service providers;
b) Direct marketing service providers, with consent;
c) The accounting service provider to fulfil obligations arising from the law;
d) Contracted IT service providers;
e) Other parties to fulfil obligations arising from the law.

6. Data protection officer

a) The data protection officer of Anvol Oy is Gert Gross.
b) The data protection officer of Anvol Oy is available by e-mail at klient@anvol.eu .
c) The data protection officer is obliged to respond to the inquiries of the Customer and/or Buyer within 30 days of receipt of the e-mail.

7. Integrated and default data protection

a) Anvol Oy will take all reasonable technical and organizational measures to ensure the security of the Buyer’s personal data.
b) Anvol Oy ensures that the information systems, other technologies and internal work systems used have the relevant and up-to-date security measures that are necessary for the secure processing of personal data.
c) All personal data of the Customer and/or Buyer gathered through visiting and ordering through the e-shop will be treated as confidential information. An encrypted data communication channel with banks ensures the security of the Buyer’s personal data and bank details.

The recipients of personal data are:

Customer orders and invoices:
– Directo (business software)
Suppliers – for delivery:
– Postnord
– Posti
Payment intermediaries – for payment:
– Bambora Checkout
Statistics collectors – for collection of information with the purpose of improving the user experience in the e-shop:
– Google Analytics
– Hotjar
Marketing channels:
– Omnisend