Tietosuojakäytäntö

Privacy Policy – Online Store

Versolla, operating on the Versolla website at versolla.fi, processes personal data provided by the customer for the purpose of fulfilling and confirming the Terms of Use, processing electronic orders and deliveries, and ensuring the necessary exchange of information for the period required by law.

General Provisions

1. The controller of personal data in accordance with the General Data Protection Regulation (GDPR) (hereinafter referred to as the "Regulation") is Versolla, located at Versolla (hereinafter referred to as the "Controller").

2. The Controller's contact details are:
   Email: info@versolla.fi

3. Personal data means any information relating to an identified or identifiable natural person.

Source of Personal Data

1. The Controller processes personal data obtained with the customer's consent, collected through a contract for the purpose of creating and fulfilling an electronic order in the online store.

2. The Controller processes only identification and contact details of the customer that are necessary for the performance of the purchase contract.

3. Personal data is processed for shipping, accounting, and the transmission of necessary information between contractual parties for the period required by law. Personal data is not disclosed and is not transferred to third countries.

Purpose of Personal Data Processing

The Controller processes the Customer's personal data for the following purposes:

1. Registration on the website in accordance with Article 4(2) of the GDPR;

2. Processing electronic orders created by the Customer (name, address, email address, phone number);

3. Compliance with legal obligations arising from the contractual relationship between the Customer and the Controller;

4. Personal data is necessary for the performance of the purchase contract. The contract cannot be concluded without personal data.

Retention Period of Personal Data

1. The Controller retains personal data for as long as necessary to fulfill the rights and obligations arising from the contractual relationship between the Controller and the Customer, and for three (3) years after the termination of the contractual relationship.

2. After the expiration of the retention period, the Controller shall delete all personal data.

Recipients and Processors of Personal Data

Personal data of the Customer may be processed by third parties acting as processors on behalf of the Controller. These processors are necessary for the performance of the contract related to electronic orders.

The Controller's processors include:

• Webnode AG (e-commerce platform);

• Shipping companies;

• Google Analytics (website analytics).

Customer Rights

In accordance with the Regulation, the Customer has the right to:

1. Access personal data;

2. Rectify personal data;

3. Erase personal data ("right to be forgotten");

4. Object to the processing of personal data;

5. Data portability;

6. Withdraw consent to the processing of personal data at any time in writing or by email at: info@versolla.fi;

7. Lodge a complaint with a supervisory authority if the Customer believes that the Regulation has been violated.

Security of Personal Data

1. The Controller undertakes to implement all necessary technical and organizational measures to protect personal data.

2. The Controller has implemented technical safeguards to secure data storage, including password-protected access to computers, the use of antivirus software, and regular system maintenance.

Final Provisions

1. By placing an electronic order on the website, the Customer confirms that they have been informed of all personal data protection conditions and accepts them in full.

2. The Customer agrees to these rules by selecting the appropriate checkbox in the order form.

3. The Controller may update these rules at any time. The updated version will be published on this website.

These rules enter into force on November 4, 2025.