Privacy Policy

Last updated: 31 May 2026

1. Data Controller

Hannu Annala, Kokkola ja Helsinki, Finland. Email: info@hannuannala.fi. Phone: +358 40 5829 999.

2. Data We Collect

We collect your name, email address, phone number, shipping address, and payment references (Stripe transaction IDs). Card details are processed directly by Stripe and never stored on our servers. We also log IP addresses and browser agent strings for security purposes.

3. Purpose and Legal Basis

Your data is used to: process orders and bookings (contract performance); send transactional emails (legitimate interest); send newsletters (consent); comply with tax and accounting obligations (legal obligation).

4. Data Retention

Account data is retained for the duration of your account. Order and booking records are retained for 7 years to comply with Finnish accounting law. Newsletter subscriptions are kept until you unsubscribe.

5. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, or port your data. You may object to processing and withdraw consent at any time. To exercise these rights, contact info@hannuannala.fi. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

6. Cookies

We use strictly necessary session cookies for authentication. No third-party tracking or advertising cookies are used. Stripe may set cookies for fraud prevention.

7. Third Parties

Payment processing: Stripe (Stripe, Inc., USA – EU-US Data Privacy Framework). Email delivery: configured by site administrator. No data is sold or shared with advertisers.