Privacy policy

Data controller

Antero Sulonen Art
Apilaratas Oy
Pellavantori 2 B 78
FI-33100 Tampere
FINLAND

Collection of personal data and legal basis for processing

Personal data is collected for the purpose of managing the customer relationship. The legal basis for processing is the contract between the customer and Apilaratas Oy, as well as the statutory obligations arising from that contract. Providing personal data is a prerequisite for entering into the contract; in other words, an order cannot be placed without the necessary personal information.

Personal data is also collected for marketing purposes. The legal basis for this processing is the customer’s consent.

No profiling or automated decision‑making is carried out.

Recipients of personal data

Personal data is received by the visual artists mentioned on the website and by Apilaratas Oy. Payment processing is carried out using PayPal, which operates internationally. When the customer proceeds to payment, the online store transmits the contents of the shopping cart and the contact details required to complete the payment to PayPal. PayPal processes this information for the provision of its own services and acts as an independent data controller for this processing.

Retention of personal data

Personal data is retained as follows:

• in the online store for five years,
• in the email archive for seven years,
• in accounting records for seven years.

Rights of the data subject

The data subject has the following rights:

• the right to access personal data concerning them,
• the right to rectification of inaccurate data,
• the right to restrict processing (for example, to prohibit marketing),
• the right to object to processing,
• the right to withdraw consent (for example, consent to marketing),
• the right to lodge a complaint with the supervisory authority.

The right to erasure (“right to be forgotten”) applies only when the data controller has no statutory obligations to continue processing the personal data.