Privacy Policy

Privacy Policy

VH Company, operating the online store Hupikauppa at hupikauppa.fi, located in Sastamala, processes personal data provided by customers in accordance with the Terms of Service, for the handling of electronic orders and deliveries, and for any necessary communication, for the period required by law.

General Provisions

  1. The controller of personal data in accordance with the GDPR Regulation (hereinafter “Regulation”) is Hupikauppa, located in Sastamala (hereinafter “Controller”).

  2. Personal data refers to any information relating to an identified or identifiable natural person.

  3. Controller contact information:
    VH Company
    Sastamalankatu 9 B 14, 38210 Sastamala, Finland
    Phone: +358 451526145
    Email: info@hupikauppa.fi

Source of Personal Data

  1. The Controller processes personal data obtained with the customer’s consent, collected for the purpose of completing an electronic purchase agreement.

  2. Only identification and contact information necessary to fulfill the purchase agreement are processed.

  3. Personal data is processed for shipping, accounting, and necessary communication between contractual parties for the period required by law. Data is not disclosed or transferred outside the EU.

Purpose of Processing

Personal data is processed for purposes related to:

  • Managing, administering, and developing the customer relationship,

  • Providing and delivering services,

  • Billing and service development,

  • Handling complaints and other legal claims.

Additionally, personal data may be used for communication directed at customers, such as information, newsletters, and marketing, including direct marketing and electronic marketing. Customers have the right to opt-out of direct marketing.

Content of the Register

The register may contain the following personal data of all registered individuals:

  • Basic personal and contact information: [first name, last name, address, phone number, email address]

  • Company or organization-related information: [company name, Business ID, VAT number]

  • Direct marketing consents and opt-outs

Retention Period

  1. The Controller retains personal data for as long as necessary to fulfill the rights and obligations arising from the contract between the Controller and the Customer, and for three years after the termination of the contract.

  2. The Controller shall delete all personal data once the retention period has expired.

Recipients and Processors of Personal Data

Customer data may be processed by third-party service providers who are subcontractors of the Controller. These services are necessary to execute electronic orders and handle agreements between the Controller and the Customer.

The Controller’s subcontractors include:

  • Shopify (online store platform)

  • Postal service (shipping)

  • Google Analytics (website analytics)

Customer Rights

Under the Regulation, the Customer has the right to:

  1. Access their personal data

  2. Rectify inaccurate personal data

  3. Request deletion of personal data

  4. Object to processing

  5. Request data portability

  6. Withdraw consent to the processing of personal data by contacting info@hupikauppa.fi

  7. Lodge a complaint with the supervisory authority if the Regulation is believed to have been violated

Security of Personal Data

  1. The Controller is committed to implementing all technical and organizational measures necessary to protect personal data.

  2. Technical measures include secured access to computers with passwords, antivirus software, and regular maintenance of hardware.

Final Provisions

  1. By placing an electronic order on hupikauppa.fi, the Customer acknowledges and accepts the privacy policy.

  2. The Customer confirms acceptance by ticking the checkbox on the order form.

  3. The Controller may update this Policy at any time. The updated version will be published on this website.

Effective Date: 7. February 2026