Privacy Notice

Last updated: 30.9.2024

Varusteleka is on the side of the good guys, and we take data protection seriously. We handle and store all the information that we collect or receive from our customers with utmost care. This Privacy Notice is based on the European General Data Protection Regulation (679/2016), and it describes how we process personal information.

In order to use Varusteleka's services, the customer must accept the methods of data collection and processing described in this Privacy Notice. This acceptance will be confirmed and registered when placing an order (contract), registering or using an account (consent), or during any other process that requires us to collect data (for example, competitions and raffles). We guarantee our customers access to their own recorded data and the option to be forgotten. 

Simply put, Varusteleka stores and retains three types of information: information received from using online services, the information provided by users themselves, and information derived analytically.

We use the information to:

1. Ensure that our customers succeed
2. Provide a safe and easy-to-use service
3. Make product recommendations and develop our marketing
4. Improve our website and customer service
5. Allow swifter customer returns
6. Maintain our circular economy system

Registry owner and controller

The registry is owned and controlled by:

Varusteleka Oy
Hankasuontie 11 A
00390 Helsinki
Business ID: 2082907-8

If necessary, you can ask more about data processing and data protection from our customer service: [email protected]

What information does Varusteleka collect and store?

We only collect information on our customers that is relevant and necessary for providing our services. We do not collect or process personal data categorised as sensitive information. 

1. Information provided by users themselves:
2. Identification information, such as name
3. Contact information, such as phone number, e-mail address, and postal address
4. Payment information, including billing information and payment method
5. Location information for localization (currencies, shipping)
6. Google or Facebook login email and certificate
7. Product reviews
8. Marketing message subscriptions
9. Personal information provided by the client with their separate consent, such as customer response inquiries
10. Customer size data for clothing size recommendation
11. Wish list items
12. Product-specific restock notification subscriptions
13. Information received from the use of online services:
14. Delivery information, such as shipping address and selected payment method
15. Purchase history, such as ordered products, refunds, and payments
16. E-commerce browsing and usage information
17. Device identification used for browsing
18. E-commerce events, such as add to cart functions
19. Data derived from the analysis:
20. Product recommendations derived from browsing and purchase history
21. Customer categorizations and interests derived from purchasing information
22. Personal size data derived from earlier purchase history for personalized clothing size recommendations

Most often, the user of our website is the source of information. In some cases, we may obtain more information from our affiliates, such as a credit provider for billing services. You can see the information you own through the customer account and, if you wish, you will be able to anonymize your account.

Cookies and other tracking methods

Varusteleka's web pages utilize cookies and similar browsing features, such as a browser cache. These are small files on your computer created by Varusteleka's website which allow us to collect analytics from e-commerce users, and to offer a better-functioning website. For example, cookies are used for shopping cart functions, user authentication, and signing up for your user account. By default, your browser cookies will remain for one month unless you delete them separately. Deleting cookies can be done in your browser settings. However, remember that your browser will load new cookies when you revisit our site. It is mandatory to accept cookies and their use on our site as many of its functions depend on them. More information on our cookie policy here.

Cookies are also used to personalize our content and marketing. Our site also has other tracking technologies, such as tracking pixels. Our website traffic is tracked by Custobar (a Finnish content and marketing targeting system that we use), Google, and Facebook. Through these, we can, for example, analyze and develop our online store, personalize website content, and target marketing. The number of ads seen on Facebook is standardized, but at least this way you’ll see better (i.e. our) ads as opposed to the normal ads.

Who can view or handle my data?

Only Varusteleka employees, who are trained to use the information properly, may access our customer information and the software used to control them. It goes without saying that those of us who stand with the good guys (that’d be us) do not abuse the trust of their customers and unnecessarily handle your data. All our systems require password authentication, and we keep an entry log on all internal customer data views. Those able to view the data have an obligation of confidentiality regarding the information.

In some cases, we need to transfer information to third parties, for reasons such as order shipping, data storage, analytics, and marketing. For these purposes, we only use trusted partners with whom we have covered comprehensive data protection and data processing agreements. These contracts have taken into account the requirements of current data legislation and the EU Data Protection Regulation. Varusteleka’s partners do not have permission to use or distribute information for their own purposes.

The registry holder, Varusteleka Oy, is liable for the data management. We are taking different measures and precautions when it comes to ensuring data protection, and our data is located in secure server environments within encrypted databases with limited access and firewalls.

What is my data used for?

Our right to handle your data is based on given consent and the agreement made in order to fulfil your order. Your information is used for the following purposes:

1. Order processing, delivery, archiving, and accounting
2. Maintaining customer relationships
3. Development of our internal functions and systems
4. Development of our customer experience and service
5. Statistical and operational management
6. Abuse prevention
7. The creation of better and more personal content and marketing
8. Enable the processes involving our circular economy system
9. Facilitate and speed up customer returns
10. Make product recommendations
11. Target relevant content for the right audiences

Varusteleka has no need to use personal information for profiling and automatic decision-making at any point of the service process.

Is my information shared forward?

Some necessary information will be passed on to third parties in order to allow functions such as payment transactions, shipping, and marketing messages. For example, in order to ensure the successful delivery of your order, your address and contact information will be passed on to those responsible for logistics and shipping. During your payment transaction, your payment information is sent through a trusted payment agent. E-commerce events and transactions are transmitted to analytics, content, and marketing systems, where only we have the right to access it. 

Each party will only receive the necessary information that is required for the given task or function. Any unnecessary use or distribution of data by these service providers is strictly prohibited. All data transfers are conducted through secure connections.

Your information may be shared with authorities should the law require us to do so. 

In case Varusteleka would be sold in the future, your personal information would be transferred to the new owner and registry holder.

Is my information transferred internationally?

Information collected by Varusteleka is not generally transferred outside the European Union or the European Economic Area (ETA). Our own servers are located in the EU area. Some of the third parties may operate outside EU or ETA, primarily for the purpose of servicing international customers, completing payments and making deliveries. Information based on analytics is processed in third countries to enable targeted marketing.

Our agreements on data handling with the third parties are extensive and require compliance with international data transfer regulations.

How long will data be stored?

We will keep the information for the time needed for us to accomplish the uses mentioned in this document. We will discard personal information from inactive accounts no later than five years after the end of the activity. Some information may be stored for longer if required by law.

Can I delete my data?

If your information is no longer needed to accomplish the uses mentioned in this document, e.g. mailing your order, you can delete your data. In this case your account will be anonymized and all personal data will be removed by pseudonymization from the account and purchase history. Once anonymized, accounts can not be identified or linked to their former owners and are impossible to recover.

Customers can do this anonymization by themselves through their customer account. Due to our database backup automation, the total erasure of personal data will require a full rotation of our backup cycle. This rotation may take several days.

Legislation or unpaid debts may in some cases oblige Varusteleka to retain some of the customer information despite anonymization.

Do I have rights?

Of course! You have the right to know if your data is being handled and get a copy of your data in an easily transferred format. You can review the data you’ve given through your personal customer account page.

You have the right to ask us to correct and supplement any inadequate or inaccurate information. You can control your own information through the customer account page.

You have the right to withdraw the consent you’ve given us to process and handle your data. Removing the consent does not impact the legality of the data processing that has taken place prior to the withdrawal.

You have the right to limit the processing of your data as specified in the legislation.

In case you notice some flaws in our data handling and operations, you have the right to file a complaint to your local Data Protection Authority. Please let us know as well, so we can correct our mistakes.

How do I see what information I have given?

From the customer account page you will find the opportunity to download a personal listing of the information you have submitted. We are continually developing our services to give you more access and control of your data.

How can I change my information or be forgotten?

From the customer account page you will find the opportunity to download a personal listing of the information you have submitted. We are continually developing our services to give you more access and control of your data.

You can also contact us, preferably through our customer service, and ask for help in removing your data or being forgotten. Directions for contacting us are below.

In what cases will varusteleka get in touch with me?

Varusteleka will contact you only in issues directly related to the successful completion of your order, and the primary form of contact is via email.

Marketing communications, like newsletters, are based on the consent you have given. You can withdraw your consent at any point, and we will leave you alone.

Varusteleka's right to make changes to this Privacy Statement

We strive to continuously develop our services and provide a better customer experience for our users. As a result, new services and functions may appear, or old ones may change. We will update this report if needed. Legislative changes may also require us to modify or refine parts of this report. In case there are significant changes, we will inform our customers in advance and if needed, ask for your consent again.

How to contact us, if you got questions or concerns?

You may contact our customer service at [email protected] in any issues related to data protection.