Privacy policy

Updated 9 September 2026

Privacy notice

This notice explains how Virtatarvike Oy processes personal data in its online store and customer service under the EU General Data Protection Regulation (GDPR) and applicable data protection law.

Data controller and contact

Virtatarvike Oy, Finnish Business ID 3385149-3, Vetokuja 1 C, 01610 Vantaa, Finland. Privacy contact: Amando Sharif, info@virtatarvike.fi, +358 50 555 4195.

The data we process

We process your name, contact and delivery details, order and billing information, and information you give our customer service. For business customers, this may include the company name and the contact person's role. Using the store also produces technical data, such as your IP address, device and browser information, and cookie data. We receive data from you, from your use of the store, and from providers handling payment and delivery of your order.

Why we use data

We use data to handle orders, payments, delivery and customer service. This processing is based on a contract or steps to prepare one. We process accounting data to meet legal obligations. Customer relationship management and service security may rely on our legitimate interests. Marketing and cookies that require consent rely on your consent. You can opt out of direct marketing at any time.

Service providers and transfers

Our store uses Shopify. Payment, delivery, communication and accounting providers also process data needed for their work on your order. Data may be processed outside the EU or EEA. Transfers require a lawful safeguard, such as an EU adequacy decision or standard contractual clauses. See Shopify's privacy policy for more information.

Retention and security

We retain order and customer service data for as long as needed to fulfil the contract, handle returns or complaints, and resolve legal claims. Accounting records are kept for the statutory retention period. Data that is no longer needed is deleted or anonymised. Access is limited to people who need the data for their work. We protect data through access controls and appropriate technical and organisational measures.

Your choices and rights

You can request access to and correction of your data. Where legal conditions apply, you can request erasure, restriction or portability and object to processing. You can withdraw consent without affecting earlier lawful processing. Send requests to info@virtatarvike.fi. We may need to verify your identity. We usually respond within one month. You can complain to the Finnish Data Protection Ombudsman or your local data protection authority.

Cookies and updates

Essential cookies support functions such as the cart and sign-in. Other cookies are used in line with applicable consent requirements. You can also manage cookies in your browser settings; blocking essential cookies may affect shopping. We update this notice when our personal data processing changes.