This Privacy Policy describes how ByHinders Ky collects, stores and processes your personal data.
1. Controller
ByHinders Ky (‘’By Hinders’’ or ‘’we’’)
Ingarskilantie 144,
10120 Tähtelä,
Finland
2. Contact information
or visit our showroom/shop at Pursimiehenkatu 16 A, 00150 Helsinki, Finland.
We are open Fridays and Saturday 11am – 6pm.
3. Personal data we collect and store
3.1. Purpose of and legal basis for processing your personal data
We process your personal data for following purposes:
– performing our contractual duties, such as processing orders and payments, performing deliveries and returns,
– marketing our products and services, developing our customer experience and service,
– contacting and communicating with our customers and other stakeholders, including providing personalized emails, offers and other communications,
– fulfilling our legal obligations, e.g. anti-money laundering obligations, bookkeeping, etc.
– defending our rights, e.g. in case of complaints or lawsuits filed against us,
– recruiting.
Our processing of personal data is based on:
Contract between you and us when the processing of personal data is necessary for fulfilling our contractual obligations, e.g. to process and deliver orders to the correct customers.
Our legal obligations to process certain data, e.g. in order to monitor and supervise the activities on our platform and to verify transactions, etc.
Legitimate interests pursued by us in situations such as marketing of our services and products for our existing customers, developing our services and organizing customer service.
Consent when you sign up for our newsletter or receive other communication from us that you have requested. Also our use of website cookies is based on consent We may also send communications to persons other than our existing customers, based on their consent. Our use of website cookies is also mostly based on your consent.
For recruiting, we only process the data directly necessary for the assessment of suitability of the applicant to the role in question. This processing is based on the applicants consent and our legitimate interest to fulfill our open positions.
3.2.What kind of data we collect?
By Hinders collects and stores the following types of information:
(i) information received from our website or from the use of our online services:
Newsletter sign-up and contact form: On our website, we collect data when you order our newsletter and to respond to questions and other contact requests sent in through the website.
b. When you visit our website, we collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device.
c. your purchase history, webshop browsing and usage information.
(ii) analytically derived information:
Product recommendations derived from browsing and purchase history,
b. Customer categorization, profiling and interests derived from, e.g., purchasing information, location and language.
(iii) other information:
a. basic information, such as name, address, email address, phone number,
b. payment information, such as billing information and payment method,
c. other information you provide us in our communications such as data related to customer relationship with your company, product reviews or feedback and
d. data related to recruitment, such as name, contact information, applicant’s cv and other information provided by the applicant.
Most often, we obtain the information directly from you. In some cases, we may obtain more information from publicly available sources, such as your company’s public websites or social media platforms.
3.3. Who can view or process your personal data?
Only our employees, who are trained to use the information properly, may access the collected personal data and the software used to control them.
In some cases, we need to transfer information to our sub-processors, for operational reasons such data storage, analytics, and marketing. Our sub-processors do not have permission to use or distribute information for their own purposes. Each sub-processor will only receive the necessary information that is required for the given task or function.
We use the following external payment processors to transfer the payments and under their own terms and privacy policies. You may choose the payment transfer service yourself when placing the order. You may find more information about them below:
Stripe
Please find the information how Stripe processes personal data and their privacy policy here.
3.4. How long we will store your personal data?
We will keep the information for the time needed for us to accomplish the uses mentioned in this Privacy Policy and to adhere to times required by law. We regularly review the collected personal data and take reasonable actions to ensure that no incompatible, outdated or inaccurate personal data are stored with us.
4. Transfer of personal data to countries outside the EU or the EEA
Primarily, we store and process the personal data within the EU/EEA. However, your personal data may be transferred outside of the EU/ EEA. In such case, we will have the adequate safeguards in place, including the EU Standard Contractual Clauses.
5. Data Security
We take appropriate technical and organizational measures against unlawful processing of your personal data. All collected personal data are stored in databases protected by firewalls, passwords and other appropriate technical measures.
6. Cookies
Cookies are small files that can be used to improve your user experience on our internet site. Some cookies are necessary for the operation of our website.
By law, we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
You may edit your cookie preferences on our website via our cookie settings tool.
7. Your rights to your personal data
7.1. Access to personal data and rectification of data
You have the right to access the personal data we hold about you. You also have the right to request the rectification of any incorrect or inaccurate data concerning you. Submit your request for access or rectification to email stated above in Section 2.
7.2. Your other rights
You have the right to oppose to the use of your personal data and withdraw your consent to the processing of your data at any time.
Further, you have a right to request for deletion of your personal data (excluding the data that we have right to process). We may delete or anonymize your data after which they can’t be identified or linked to you and are impossible to recover.
If you would like to exercise this right, please contact us through the contact information in Section 2.
You have a right to receive an answer from us within 30 days from your request.
If you notice any flaws in our handling or operations, you have the right to file a complaint to your local Data Protection Authority. However, please contact us first, so that we can correct our mistakes.
8. Changes to this privacy policy
We strive to continuously develop our services and provide a better customer experience as well as improve our data protection policies. We will update this Privacy Policy if needed. Legislative changes may also require us to modify or refine parts of this Privacy Policy. Significant changes will be reported to our customers separately.