Privacy statement for e-commerce customers
This is Privacy policy of Sentient Being OÜ in accordance with the EU General Data Protection Regulation (GDPR).
The purpose of this privacy policy is to describe as clearly and comprehensibly as possible how Sentient Being OÜ (the “Company”) collects, processes and stores customer and personal data in accordance with the Personal Data Act and the EU Data Protection Regulation (GDPR). This privacy statement applies whenever you use our services described in it.
Keeper of the personal data register
Sentient Being OÜ, Keemia tn 4, 10616, Tallinn, Estonia
Registry Officer
Sentient Being OÜ
Registration number: 16099710
VAT: EE102310449
Keemia tn 4, 10616, Tallinna, Estonia
Contact information
You can contact us by sending an email to info (at) hamppumaa.fi
Collection of personal information
What is personal information?
Personal data is any information that relates directly or indirectly to a living natural person. Personal information includes, for example, name, personal identity number, address, e-mail address and telephone number. Electronic identities, such as IP addresses, can also be considered personal data if they can be linked to a natural person.
What personal information does the website collect and how?
When you shop in our online store, browse our website, subscribe to our newsletter and join our regular customer online store, contact us through our customer service, participate in a marketing campaign, competition or customer survey we may collect personal information about you.
Legal basis of the site for the processing of personal data and legitimate purposes of the processing of personal data:
- Your consent, such as granting a marketing authorization to subscribe to a newsletter
- When processing is necessary for our contract with you (for example, delivery of products you have ordered from an online store)
- Responding to your customer service request
- Other legitimate grounds for processing personal data, such as the development of our online store
- If we collect your personal information for other purposes, we will ask for your prior consent.
Information collected when purchasing in an online store
When you place an order from the online store, we collect personal information from you for the delivery of the products you have ordered. Such information includes name, address, telephone number, email address, order amount, and products ordered. Depending on the payment method used, the last 4 digits of your personal identity number or credit card will also be processed for certain payment methods.
Information collected through the “My Customer Account” section of the online store
When you register as a user in the online store (My Client Account section), we collect the following information: name, address, login information (email address and password) and, if desired, your interests in our product groups.
Information collected when subscribing to our newsletter
When you subscribe to our newsletter for consumer customers, we collect your name and email address to send the newsletter.
Information collected in connection with marketing raffles or customer surveys
When you participate in a marketing raffle or customer survey we conduct, we may collect your contact information (email address, address, telephone number) for the purpose of submitting a potential prize, depending on how the raffle or survey is conducted.
Information collected in connection with the use of electronic services
When you use the hamppumaa.fi website, we collect information about the use of the service. Some of this information may be personal information, such as your IP address. If you are logged in to our online store to identify you, we collect information about your use of the site (purchase history, browsing history) and may also combine it with your other user information.
Processing and storage of personal data
Customer service
We use your personal information for customer service purposes when you contact us, for example to inquire about the status of your e-commerce order. We use your name and order number to identify the customer and the order. If necessary, we use your contact information, e.g. email address and phone number, to contact you to ask questions or handle the matter.
Sending information
Once you have placed an order from the online store, we will use the information you provide to send you an order confirmation and email notifications related to the status of your order. This information will be sent to the email address you provided with your order.
Marketing and personalization
If you have subscribed to the newsletter, we will use the personal information you provide to send the newsletter and personalize its content. This personal information includes your email address as well as information about your possible purchase history, newsletters delivered and opened to you, and your e-commerce browsing history. We use this information in our marketing to target our advertising so that, for example, the offers are as interesting as possible to you.
At the Website and the Store, we use the personal information you provide to personalize the Site. We collect information about the services you use and use it to modify the content of our website when you visit the site. In practice, this means, for example, that we will primarily show you products and offers on the site that we believe will interest you, for example, based on your previous online store purchase history or browsing history.
Development of services
We also use the information we collect from our customers to develop our products and services and to improve customer service. With the help of digital services, we analyze the activities of users and use this to develop our online store. For such analyzes, we primarily use only aggregate, Anonymous, or anonymized data.
Data storage times
We will keep your personal information for as long as is necessary for the processing reason.
In our customer management and marketing system, your customer information is retained by default for five (5) years since you were last active. Activity is defined in the system by one of the following measures: purchase from the hamppumaa.fi online store, browsing the online store, opening a newsletter or clicking.
The My Account section of our online store will retain the personal information you provide as long as the user account is active.
When you visit our website, your visitor data is retained by default for 26 months for analysis and reporting purposes.
If you subscribe to our newsletter, your contact information will be kept for as long as you wish to receive the newsletter.
Your personal information may be stored in several different places for different purposes and on different grounds. As a result, personal information that has been deleted from one of our systems may still be stored in another system where it is retained for another purpose or on some other basis.
Protection of personal data
The company maintains a high level of security in the processing of personal data. We continuously evaluate our policies regarding the processing of personal data and potential risks, and implement measures that comply with the principles of default data protection.
The personal information we process is stored on a system that is protected by operating system security software. Access to the system requires the entry of a username and password. The system is also protected by firewalls and other technical means. Only certain pre-defined employees of the website have access to and are entitled to use the information contained in the register stored in the system. The information contained in the register is located in locked and guarded premises.
We continuously train our staff on data protection issues. All questions concerning our operations, the Personal Data Act or the EU Data Protection Regulation (GDPR) can be sent to info (at) hamppumaa.fi
Disclosure of personal data
The Company may authorize external partners or service providers to provide IT services, payment solutions or other digital services to the Site. As part of the provision of these services, the site’s partners, both inside and outside the EU and the EEA, may have access to your personal information.
IT partners and suppliers
The company uses several different IT services and systems in its business. Some of them also store and process personal information. In this case, the company takes care of the security of personal data and the protection of privacy during all such processing. The systems are cloud services, in which case we transfer personal information to the service provider. In this case, the service provider or IT provider is a personal data processor who processes the data on behalf of the company and in accordance with our instructions.
Internal IT systems
Internally, we process customer data in our loyalty system, e-commerce system and customer management and marketing system. In addition, in connection with e-commerce purchases, the information is stored in the systems of the selected payment service provider and the logistics company performing the delivery in accordance with the selected delivery method (eg Posti, DB Schenker).
These systems enable you to deliver your order from our online store, answer your questions related to our services, and provide customer service. These systems may process all personal information we collect.
We use Google office software and system services in our internal work. This means that Google is a personal data processor we have authorized. Please refer to the Google Privacy Statement.
Providers of web analytics services
We use external vendors to personalize our websites and analyze usage patterns, as well as user feedback. These companies process personal information on our behalf. Data are processed in analysis services mainly anonymously at the aggregate level.
- Google:Privacy Statement
Payment service providers
Payment can be made with Visa Electron and Debit cards, Visa MasterCard and Maestro (debit card). In payments made by invoice, Sentient Being OÜ is shown on the card invoice as the recipient of the payment. The interface (software) for card payments in the online store (hamppumaa.fi) is a secure and fast QuickPay, and the payment intermediary is Clearhaus, which is a secure payment intermediary. All data will be processed in accordance with the regulations in force.
Contact information services
We also use an external chat service provider to implement the chat function on the company’s website. Through the chat service, your conversations with our customer service are stored in the cloud chat service. The conversation contains the following information: conversation content, country and city, browser, operating system, current page, and browsing history. The customer can choose to leave their own name and e-mail address. The information is stored in the Get Respons cloud service for as long as necessary to process customer feedback.
Transfer to a third country
Some of the service providers we use on our website are located outside the EU / EEA. This means that your personal data may also be transferred to partners in these countries for the purposes mentioned above. In this case, we are responsible for ensuring that the security of personal data is at an adequate level.
Your rights as a customer
Necessary processing of personal data and processing on the basis of consent
Personal data may be processed without consent if it is necessary for the performance of an agreement with you or the fulfillment of obligations imposed by law. However, the collection and use of personal information for other purposes requires that you have given your consent.
As a customer, you give your consent to the processing of personal data when, for example, you use our services on the hamppumaa.fi website, subscribe to our newsletter, join our regular customer in the online store, or contact us through our customer service.
Withdrawal of consent
Under applicable personal data law, you have the right, at any time, to request to see the personal data collected and processed about you, to request the correction of inaccurate data, to restrict their processing or to delete personal data.
When you withdraw your consent, we will delete your personal information and stop processing it with their consent.
Please note, however, that the same personal data may be used both with consent and as necessary or required by other legal acts. As a result, even if you withdraw your consent and the processing to which the consent relates is suspended, the information may remain with us for other purposes.
The right to receive information about personal information we hold about you
If you wish to know what information we have registered about you, you have the right to request this information in writing from the above address. An extract from the register is provided on request and is available free of charge once a year.
The right to request stored information about you
You have the right to request a registration extract from the company for stored personal data about you once a year free of charge.
You can send the request to info (at) hamppumaa.fi, in which case upon receipt of the request we will contact you to verify your identity, or in writing, in which case the personal signature of the applicant must be included. The written letter shall contain the text “Request for personal records – to the company’s data protection officer”.
Right to manage and delete your personal data
You have the right to control your personal information, including rectification, supplementation or deletion if you wish. In addition, you have the right to request that the processing of personal data be restricted to certain purposes only, so that your data may not be used for marketing purposes, for example.
Complaints
If you believe that a company is violating the Personal Data Act or other data protection laws, you can contact the Registry Officer. For more information, see the EDPS website.
Amendment of the Privacy Statement
We may make changes to this privacy statement from time to time. You can always find the latest version of the privacy statement on our website