Privacy Policy
This Privacy Policy applies to the digital operations of THE-Enterprise Oy, including online stores and other electronic services.
1. Data Controller and Contact Information
THE-Enterprise Oy
Business ID: 2200797-5
Ensimmäinen savu 2, 01510 Vantaa, Finland
Person responsible for data protection:
Aleksi Etholén
Phone: +358 50 505 8066
Email: aleksi@mamasan.fi
2. Data Collected
The customer register may contain the following information:
- First and last name
- Street address, postal code, city, and country
- Email address and phone number
For business customers, we may also store:
- Company name
- Business ID and VAT number
Order details provided during an online purchase may also include product information, payment method, and delivery method.
3. Purpose and Legal Basis for Processing
Personal data is processed for the following purposes:
- Managing and maintaining customer relationships
- Processing, delivering, and archiving orders
- Statistical analysis and service development
- Marketing purposes (within the limits of law and consent)
The legal bases for processing are:
- Contract between the customer and THE-Enterprise Oy
- Consent when data is used for marketing purposes
- Legitimate interest, such as maintaining customer relations and preventing misuse
All processing complies with the EU General Data Protection Regulation (GDPR, effective from 25 May 2018).
4. Data Retention
Personal data is retained only as long as necessary to fulfill the purposes of this register. Some data may be stored longer if required by law, such as for accounting, consumer protection, or warranty obligations.
5. Disclosure and Transfer of Data
Data is disclosed only to the extent necessary for the operation of the online store. Personal data may be shared with the following partners:
- Logistics and delivery partners – for order fulfillment
- Payment service providers – for processing payments
Data is not shared with third parties for marketing purposes without the customer’s explicit consent. No data is transferred outside the EU or EEA without an adequate level of protection.
6. Cookies
Our website uses cookies to enhance the user experience and enable technical functionality. Cookies are small text files stored on the user’s device. They allow us to:
- Recognize returning visitors
- Simplify login and checkout processes
- Collect statistical data to improve our services
Cookies do not harm devices or files. Users can disable cookies in their browser settings, but this may affect the functionality of certain website or store features.
7. Rights of the Data Subject
As a customer, you have the following rights regarding your personal data:
- Right of access – to request information about the data we hold about you
- Right to rectification – to correct inaccurate or incomplete information
- Right to erasure (“right to be forgotten”) – to request deletion of your data if there is no legal basis for processing
- Right to withdraw consent – to withdraw your marketing consent at any time
- Right to restriction and objection – to limit or object to processing in certain circumstances
Requests must be submitted in writing to the Data Controller. Identity verification may be required before any information is released.
8. Data Security
Personal data is protected using appropriate technical and organizational measures. Access to data is restricted only to authorized personnel and partners who require it to perform their duties.
9. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy if legislation or our operational practices change. The latest version is always available on our website.
