GDPR Privacy Statement

Last updated on April 12, 2023.


Kettu Knits is committed to protecting the privacy of its customers and offers the opportunity to influence data processing. With this data protection statement, we inform our customers about the processing of their personal data. The customer must accept the terms of this privacy statement in order to use Kettu Knits' services. The information we collect can be divided into information provided by the user, information observed from the use of online services, and information derived with the help of analytics. We use the information: - To provide an easy-to-use and secure service

- To provide a good customer experience

– To improve product recommendations and marketing

- For the development of customer service and online shopping

The keeper of the register
Fox Knits 2303284-9
Karhunkatu 17
48600 Kotka

Person responsible for registry matters and/or contact person
Jana Tarhala

Registry name
Kettu Knits customer register

Data content of the register
Kettu Knits customer register contains the following information:
– Customer's first and last name
– The customer's address, email and phone number
– Products ordered by the customer
– Additional information given in connection with the order
– Order delivery and payment methods
– Shipment tracking information
– The main source of IP address information is the user himself. All information is stored in the databases of the company's ERP and CRM systems for 6 years.

How is my data stored and protected?
All personal data is protected against unauthorized access and against accidental or illegal data destruction, alteration, disclosure, transfer or other illegal processing. All access to personal data is monitored in accordance with good practices.

Who processes my personal data?
Only Kettu Knits' own employees have access to customer information. Each of our staff sees customer information only to the extent that it is necessary for the performance of work tasks. We use trusted contractual partners, in which case the information can be transferred to a third party. The agreements with all partners take into account the requirements set by the EU data protection regulation and other legislation. The company responsible for data processing:
Kettu Knits 2303284-9
Karhunkatu 17
48600 Kotka

How long will my data be kept?
We only keep your personal data for the time necessary to fulfill the purposes described in this statement. In addition, some information can be kept longer to the extent that it is necessary to fulfill the obligations set by law, such as accounting and consumer trade responsibilities, and to demonstrate their proper implementation. At the customer's request, personal information about him can be deleted or anonymized from Kettu Knits' systems. The deletion and anonymization procedure is irreversible, and we cannot restore deleted customer accounts. For some information, the legislation imposes obligations on the longer-term storage of the information, e.g. for the following purposes:- The Accounting Act defines longer retention periods for information, regardless of whether the material contains personal data or not
– Fulfilling responsibilities regarding consumer trade
- System log data is collected and stored as required by law, so that we can offer legal and safe online shopping to our customers
- Taking sufficient backups of the shop's databases and systems to secure data, correct error situations and verify data security and continuity.

Cookie Privacy Policy
With permanent cookies, we save information about your home page and your login information if you select "Remember me" when logging in.
We use session-specific cookies when you use the search narrowing function and to check if you are logged in or if you add a product to your shopping cart.

What rights do I have?
As a customer, you have the right to: Get access to your personal data, including the right to receive a copy of your personal data
Requests correction or deletion of personal data about you
Under certain conditions, request restriction of processing or object to the processing of personal data
In addition, if the processing is based on a separate consent, you have the right to withdraw your consent at any time. Please note that this does not affect the legality of the data processing carried out before the withdrawal of consent. You can change your settings on the account management page. You can make a request to exercise your rights by contacting our customer service. The request must be sufficiently specific so that our customer service can verify your identity. We will notify you if we are unable to fulfill your request in some respects, such as deleting all information that we have a legal obligation (for example, credit information) or the right to keep. If you notice that the processing is flawed or illegal, you have the right to file a complaint to the data protection authority .

Will my personal data be transferred to third parties?
We may disclose some necessary information to third parties to guarantee delivery and for marketing purposes. Your information is also forwarded to the credit granting agency in connection with the credit decision. We also use customer data with third parties for analytics and personalization purposes. We use purchasing behavior and browsing information with partners so that we can better offer products and offers that interest you. Information used for analytics and personalization purposes is always anonymized or pseudonymized whenever possible. Only we can connect the used pseudonymized information to your name. If necessary, we will also hand over the information to the authorities. We always also inform the customer about information requests, if it is allowed within the framework of the law. We pass on information to the following third parties:- Analytics and statistics partners
– For product recommendation and personalization partners
– For e-mail marketing partners, if the customer has allowed a weekly newsletter, communications based on browsing history or requests for product reviews
– To the transport company, if the selected delivery method is transport to the pick-up point, the nearest post office or to the destination
- When paying with a payment card to the payment intermediary
- To the credit provider, when the customer chooses the credit company's invoice or partial payment as payment method
- For customs, when buying products tax-free Kettu Knits takes care of a high level of data security and protection when transferring and processing data in accordance with the EU Data Protection Regulation. The means of ensuring the level of data processing by third parties are model contract clauses approved by the European Commission, data protection regulations binding on the group (BCR arrangement), the EU-US Privacy Shield agreement or another approved method according to the data protection regulation. The customer can limit the disclosure of data for marketing and analytics purposes

Are cookies used on the store's website and what are they?
Kettu Knits uses cookies ("cookies") and other similar technologies, such as the browser's local storage ("local storage"). Cookies are small text files between the end device's browser and the server. Cookies and other identifiers have a defined validity period, after which the browser deletes the identifier. We use these technologies to implement functions, for personalization and for analytics and marketing targeting. Functional cookies and local storage are used e.g. for customer identification, login maintenance, delivery time estimates and Shopping Cart functions. The use of cookies and local storage and acceptance of their use is mandatory for these functions. Functional cookies set by the server and local storage variables remain in the browser for 15 min-24 months, unless they are separately deleted from the browser settings. Visiting the website resets cookies and local storage variables if the browser allows it. By personalizing the user experience, we can offer more product recommendations that are interesting to our customers. For this function, a RichRelevance cookie is placed in the customer's browser. These cookies remain in the browser for 30 minutes to 24 months. The information sent to RichRelevance, such as visits to product pages and search history, is anonymized, and it is not possible for a third party to find out the customer's identity. The information used for analytics and marketing targeting is anonymized whenever possible. Otherwise, we treat the information as personal to the extent that the identifier contains customer-targeting information, such as an IP address. Identifiers that are connected to the customer in some way are also treated as personal information. The validity period of tags used for analytics and marketing targeting is 30s-24 months.
We use Google Analytics, e.g. in analytics related to the use of our site, popular products, trends and sales. The information sent to Google is anonymized. Read more about Google Analytics data processing . Other technologies we use for analytics and marketing targeting, such as pixel tags, help us better understand our customers' behavior and tell us which products are of interest to our customers and which functions and services are most useful to our customers. The identifiers used by our analytics and marketing partners can be refused by enabling the browser's Do Not Track function and setting the browser to reject third-party cookies.

Can this privacy statement be changed?
Due to the development of services and changes in legislation, we reserve the right to change the data protection statement. Significant changes to the privacy statement will be notified to registered customers when the terms are updated.

Who can I contact?
Kettu Knits 2303284-9
Karhunkatu 17
48600 Kotka