Registrar

Salonkitukku (Alekki Oy)
Business ID: 3427445-6
Puistokatu 7
38200 Sastamala

Email: myynti@salonkitukku.com
Phone: 044 971 9745
www.salonkitukku.com

Personal data processed

We process personal data to the extent necessary for the operation of the online store, order fulfillment, customer relationship management, customer service, service development, information security, and marketing in accordance with the customer's choices. Not all of the information mentioned below is collected from every customer or website user.

Basic customer and company information

• name of the customer or company contact person
• company name and business ID
• billing and shipping address
• email address and phone number

Customer account and order information

• customer account identification and login information
• order number and date of order
• ordered products, quantities and prices
• delivery and payment method
• payment status and identification and reference information related to the payment transaction
• order history
• discounts, coupons and potential customer group
  information related to returns, complaints and refunds

Customer service and marketing information

• contacts, customer service messages, feedback and complaints
• newsletter and other electronic marketing subscription and consent information
• marketing bans and information on withdrawal of consent
• customer-reported interests and communication preferences
• information about sending, opening, clicking on and navigating to the website of marketing messages
• Interest and audience data based on products viewed and website usage
• Identifiers related to the marketing message or campaign

Information about the use and technical operation of the website

• IP address and approximate location inferred from it, such as country, region or city
• cookies, local browser storage, and other web identifiers, such as user, device, client, and session identifiers
• user cookie consents, cookie choices and their timing;
  information about the device, browser, operating system, screen size or resolution, and language settings
• date, duration and session details of the visit
• pages viewed, products and product groups, and searches made on the site
• Clicks, taps, scrolls, mouse movements and other usage events made on the site
• heatmap and session recording data, and responses to user surveys and feedback, if those features are enabled;
  traffic source, referring website, and campaign and marketing identifiers;
• transaction information related to the shopping cart, checkout, and purchase transaction, such as products, product categories, purchase value, currency, and transaction or order ID
• Information needed to measure the effectiveness of marketing messages and related conversions
• Device, browser, session and risk information related to payment security, fraud prevention, bot detection and abuse prevention
• Log and diagnostic information regarding website performance, errors, login, server, and security

Online identifiers and usage data related to analytics, functionality and marketing are processed in accordance with the user's cookie choices when processing requires consent. Technical data necessary for the operation, payment and security of the online store can be processed without cookie consent.

Purposes and legal bases for processing personal data

Salonkitukku processes personal data for the following purposes:

• Receiving, paying, delivering orders and maintaining the customer account: processing is based on the preparation and execution of the contract with the customer.
• Customer service related to orders, returns, complaints and refunds: processing is based on the execution of the agreement and, if necessary, Salonkitukku's legitimate interest in investigating and handling matters related to the customer relationship.
• Accounting, invoicing, taxation and other legal obligations: processing is based on Salonkitukku's legal obligations.
• Ensuring the security of the online store, preventing abuse, resolving technical problems and handling legal claims: the processing is based on Salonkitukku's legitimate interest.
• Development of customer relationships and online store operations, as well as internal sales and order reporting: the processing is based on Salonkitukku's legitimate interest to the extent that personal data is used in the processing.
• Use of Google Analytics 4, Hotjar and other non-essential analytics and tracking technologies: processing is based on the user's consent.
• Newsletters and other electronic direct marketing: Newsletters and other electronic direct marketing to consumers are mainly based on the recipient's consent. In situations permitted by law, Salonkitukku may market its own similar products to existing customers without separate consent. The recipient always has the right to prohibit direct marketing easily and free of charge. Marketing that is essentially related to their work duties may be targeted to company contact persons in situations permitted by law.

Salonkitukku's legitimate interests include the proper management of the online store and customer relationships, business development, ensuring the security of the service, preventing abuse, and preparing, presenting and defending legal claims. The effects of processing based on legitimate interest on the rights of the data subject are assessed before processing begins.

Personal data retention periods

Salonkitukku only stores personal data for as long as is necessary to achieve the purposes of the data processing or to comply with legal obligations. Retention periods are determined based on the data group and the purpose of the processing. The data is deleted or anonymized when there is no longer a reason for its storage.

• Order, invoicing and payment information is retained for the period required by accounting and other applicable legislation. Accounting documents and transaction records are generally retained for at least six years from the end of the year in which the financial period ended.
• Customer account and customer relationship information is stored for the duration of the customer account and customer relationship and thereafter for as long as the information is needed, for example, to process statutory obligations, complaints or legal claims.
• Customer service, return and complaint information is retained during the processing of the matter and thereafter for as long as the information may be reasonably needed to resolve the matter or process legal claims.
• Marketing consents and newsletter information are stored until the data subject withdraws their consent or unsubscribes from the newsletter. Necessary information regarding the marketing ban may be stored to comply with the ban.
• Cookie, analytics and usage data are stored in accordance with the user's cookie choices and the retention periods specified in the available services.
• Technical log and security information is only retained for as long as is necessary for the operation of the online store, troubleshooting, and ensuring data security.

The necessity of retention periods is assessed regularly. Personal data may be retained for longer than described above if their retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

Sources of personal data

Personal data is mainly obtained from the data subject themselves when placing an order, creating a customer account, subscribing to a newsletter, contacting us or doing other business.

Technical, cookie and analytics data related to the use of the website is collected in connection with the use of the website in accordance with the cookie choices made by the user.

Information may also be obtained from service providers used by Salonkitukku, such as payment, invoicing, transportation and logistics service providers. Such information may include payment confirmation, payment status, shipment tracking information and delivery status information.

Mandatory provision of information

In order to process an order, the customer must provide at least the information necessary for order delivery, invoicing and communication. Without this information, Salonkitukku may not be able to receive, process or deliver the order.

Providing company and business ID information is mandatory only when the order is placed in the name of the company or the information is needed to implement a customer group, invoicing, or other service related to corporate customers.

Providing marketing consent and accepting non-essential analytics and marketing cookies is voluntary. Not accepting them does not prevent you from using the online store or placing an order.

Automated decision-making and profiling

Salonkitukku does not make decisions concerning the data subject that are based solely on automated processing of personal data and that would have legal effects or other similarly significant effects concerning the data subject.

Website usage and transaction data collected with the user's consent may be used to form marketing target groups and target advertising. This processing does not involve automated decision-making that has a significant legal or similar effect on the customer.

Recipients and disclosures of personal data

Salonkitukku uses external service providers to manage its online store and customer relationships. Personal data may only be disclosed or processed to the extent necessary to provide the service in question.

Personal data may be processed, for example:

• payment, invoicing and financial service providers
• transportation, warehousing and logistics service providers
• administrators of online stores, websites, servers and information systems
• accounting, bookkeeping and other administrative service providers
• email, customer communication and newsletter service providers
• analytics, user experience, advertising and marketing service providers in accordance with the customer's cookie choices
• experts and authorities when the disclosure of information is based on law or is necessary for the establishment, exercise or defense of a legal claim.

Some service providers process personal data on behalf of Salonkitukku as personal data processors and in accordance with the instructions given by Salonkitukku. Some recipients, such as certain payment service, transportation and analytics service providers, may also process data as independent data controllers in accordance with their own data protection policies.

Personal information is not sold to third parties.

Data subject rights

The data subject has the following rights, depending on the legal basis for the processing of personal data and the situation:

• Right to access information: The data subject has the right to receive confirmation as to whether Salonkitukku is processing personal data concerning him or her, and to receive a copy of the data being processed.
• Right to rectification: The data subject has the right to request the correction or completion of incorrect or incomplete personal data.
• Right to erasure: In certain situations, the data subject has the right to request the erasure of their personal data. However, this right does not apply, for example, when the retention of the data is necessary to fulfill a legal obligation of Salonkitukku, such as an accounting obligation.
• Right to restriction of processing: In certain situations, the data subject has the right to request restriction of the processing of their personal data, for example, while the accuracy of the data is being verified.
• Right to object to processing: The data subject has the right to object to the processing of their personal data when the processing is based on Salonkitukku's legitimate interest. The data subject always has the right to object to the use of their personal data for direct marketing.
• Right to data portability: The data subject has the right to receive the personal data he or she has provided in a structured, commonly used and machine-readable format, where the processing is based on consent or a contract and is carried out automatically.
• Right to withdraw consent: Where the processing of personal data is based on consent, the data subject may withdraw their consent at any time. The withdrawal will not affect the lawfulness of the processing carried out prior to it.
• Right to lodge a complaint: The data subject has the right to lodge a complaint with the Office of the Data Protection Ombudsman if he or she considers that his or her personal data has been processed in violation of data protection regulations.

The rights of the data subject are not absolute in all situations, but their applicability depends, among other things, on the purpose and legal basis for processing personal data.

Exercise of rights

The data subject can exercise their rights by contacting Salonkitukku:

Email: myynti@salonkitukku.com
Phone: 044 971 9745

The request must specify which right the data subject wishes to exercise and what information the request concerns. If necessary, Salonkitukku may request additional information to verify the identity of the requester.

Salonkitukku will respond to the request without undue delay and no later than one month after receiving it. The deadline may be extended by a maximum of two months if the request is complex or there are multiple requests. The data subject will be notified of the extension of the deadline and the reasons for it within one month of receiving the request. If the request cannot be fulfilled, the data subject will be notified of the reasons for the refusal and of the possibility of referring the matter to the Office of the Data Protection Ombudsman.

Protection of personal data

Salonkitukku protects personal data with appropriate technical and organizational measures in relation to the risks of processing. Access to personal data is limited to persons who need the information to perform their work duties. Confidentiality and data protection obligations apply to persons and service providers who process personal data.

The security, access rights and operating procedures of systems containing personal data are assessed and updated as necessary. Data security measures take into account the nature of the data being processed, the scope of the processing and the risks associated with the processing of personal data.

Cookies and similar technologies

Salonkitukku's website uses cookies and other similar technologies, such as local browser storage and various tracking tags. Cookies are small files that allow a website to store or read information on a user's device.

Essential cookies

Necessary cookies are used to enable the technical operation and security of the online store. They are used to implement, for example, the shopping cart, checkout functions, payment, login, session maintenance, fraud and bot prevention, and storing the cookie choices made by the user.

Necessary cookies may be set by, for example, WooCommerce, WordPress, CookieYes, and e-commerce payment and security services such as Stripe, Pohjola Finance, hCaptcha, and Cloudflare. The use of these cookies does not require the user's consent when they are necessary to provide the e-commerce service requested by the user.

Functional cookies

Functional cookies are used to enable optional features selected by the user and to personalize the user experience. For example, they can be used to store the products the user has recently viewed.

Functional cookies are only used with the user's consent. Rejecting them will not prevent you from using the basic functions of the online store, but some optional features may not be available.

Analytics cookies

With the user's consent, we use analytics technologies to obtain information about website usage and to improve the online store's operations and user experience.

Analytics may process, for example, information about pages and products viewed, actions taken on the site, time and duration of the visit, source of traffic, and the user's browser and device.

In analytics we use:

• Google Analytics 4 to measure website usage and visitor traffic
• Hotjar service for analyzing website usability and user experience.

Marketing cookies

With the user's consent, we use Klaviyo cookies and tracking technologies to measure website activity and to implement marketing, customer communications, and content personalization.

Klaviyo can be used to process, for example, information about the products and pages viewed by the user, website navigation, shopping cart events, marketing messages, website navigation, and whether the user has subscribed to the newsletter.

The information can be linked to the user's Klaviyo customer profile, for example when the user subscribes to a newsletter or navigates to the website from a message sent by Klaviyo. Klaviyo's __kla_id cookie can identify the visitor and pass identification-related information to Klaviyo.

Managing cookie preferences

The user is shown a cookie banner on the website, through which he can:

• accept all cookies
• reject non-essential cookies
• make more specific choices for each cookie category.

Non-essential cookies and tracking technologies are only used after the user has given their consent. The user can change their choices or withdraw their consent at any time via the Cookie Settings link on the website. Withdrawing consent is as easy as giving it.

Rejecting non-essential cookies will not prevent you from using basic online store features or ordering, but it may affect some optional features, personalization of your experience, and measurement of site usage.

The user can also delete or block cookies through their browser settings. However, browser settings do not replace the ability to accept or reject non-essential cookies on the website.

More information about the cookies used

Up-to-date information about cookies and other tracking technologies used on the website can be found in the website's cookie settings.

Cookie settings indicate the name of the cookie or technology, the setter or service provider, the purpose, category and validity period, and, if necessary, information about the disclosure of data to third parties.

Transfers of personal data outside the EU and EEA

In connection with the service providers and their subprocessors used by Salonkitukku, personal data may be processed or accessed from outside the EU and EEA, including the United States. Such services may include Google Analytics 4, Hotjar by Contentsquare, Klaviyo, Stripe, hCaptcha and CookieYes.

Transfers to a recipient in the United States may be based on the European Commission's adequacy decision on the EU-US Data Protection Framework when the recipient falls within the scope of the Framework. In other situations, transfers will be made using standard data protection clauses approved by the European Commission and, where appropriate, other additional safeguards.

For more information about the safeguards used in the transfer of personal data or the safeguards applied to a copy, please contact myynti@salonkitukku.com.

Changes to the privacy policy

We keep this privacy policy up to date and will update it as necessary if there are changes in the processing of personal data or in applicable legislation. The date of its last update will be indicated in connection with the policy. Minor changes, such as correction of typographical errors or clarification of the text, will not be notified to customers separately.

Changes that have a material impact on the processing of personal data will be notified to data subjects clearly and before the change comes into effect, for example on the website, by email or through another appropriate communication channel. If personal data are processed for a new purpose, data subjects will be provided with information about this before the new processing begins. If the processing requires consent, the necessary consent will be requested before the processing.

Last updated: 17.7.2026