Privacy Policy

This is a register and data protection statement in accordance with the Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR).

Energiapussit.net processes the personal data provided by the customer, which fulfills and confirms the terms of use, the processing of electronic orders and deliveries, and the necessary communication within the time required by law.

General provisions

1. The controller of personal data that complies with the GDPR regulation (hereinafter referred to as the "regulation") is Top Scope Oy - www.energiapussit.net, business ID number 3271027-7, (hereinafter referred to as the "Registrar"); 

2. The contact details of the controller are: asiakaspalvelu@energiapussit.net 

3. Personal data is all information related to an identified or identifiable natural person.

Source of Personal Data

1. The registrar processes the personal data obtained with the customer's consent, which has been collected by contract for the purpose of obtaining and fulfilling an electronic order for the online store; 

2. The registrar only processes the customer's identification and contact information, which are necessary to fulfill the purchase contract; 

3. The registrar processes personal data for sending and accounting purposes as well as for the time required by law to transmit the necessary information to the contracting parties.

Purpose of data processing

The controller processes the Customer's personal data for the following purposes: 

1. Registration of the website energiapussit.net in accordance with Chapter 4 Section 2 of the GDPR; 

2. Electronic order created by the customer (name, address, e-mail, phone number); 

3. Comply with the law and regulations resulting from the contractual relationship between the Customer and the Data Controller; 

4. Personal information is necessary to fulfill the purchase contract. A contract cannot be concluded without personal information.

Duration of personal data storage

1. The Controller stores personal data as long as necessary to fulfill the rights and obligations arising from the contractual relationship between the Controller and the Customer and for three years after the termination of the contractual relationship; 

2. The controller must delete all personal data after the time required to store personal data.

Recipients and processors of personal data

Energiapussit.net does not hand over its customers' data to external parties. However, data can be transferred by subcontractors outside the EU or EEA. If the data is transferred outside the EU or the EEA, we will ensure an adequate level of personal data protection, for example by agreeing on matters related to the confidentiality and processing of personal data as required by legislation. 

The third parties that process the customer's personal data are subcontractors of the Controller. The services of these subcontractors are necessary so that the agreement on the acquisition and processing of the electronic order in the contract between the Controller and the Customer can be implemented. 

The subcontractors of the controller are:

• Webnode AG (e-commerce platform);
• Google Analytics (Analytics);

Cookies 

Energiapussit.net uses cookies to develop the online store and customer experience. We use cookies to develop our services and business. No personal information is stored in cookies. We use cookies to collect information, e.g. about how much, how and when our site is used.

Customer rights

According to the regulation, the Customer has:

1. the right to access personal data;

2. right to rectification of personal data 

3. the right to delete personal data; 

4. the right to object to the processing of personal data; 

5. the right to data portability; 

6. the right to withdraw consent to the processing of personal data in writing or by e-mail to the address: asiakaspalvelu@energiapussit.net; 

7. the right to submit a complaint to the supervisory authority if a violation of the regulation is suspected.

Personal Data Security

1. The registrar has taken technical precautions to secure data storage facilities. Care is taken in the processing of the register and the information processed with the help of information systems is properly protected with SSL protection. 

2. The registrar ensures that stored data as well as server access rights and other data critical to the security of personal data are handled confidentially and only by those employees whose job description it is.

Final Provisions

1. By placing an electronic order on the website energiapussit.net, the Customer confirms that he is aware of all personal data protection terms and accepts them in full; 

2. The customer accepts these rules by selecting the checkbox in the order form; 

3. The registrar may update these Rules at any time. A new, updated version must be published on this website.

 These rules enter into force on 1 May 2024