Privacy Policy

Effective Date: [31.08.2025] Version: 1.0

This Privacy Policy explains how Vince's Exclusives Oy (the "Company", "we", "us") collects, uses, stores, and protects personal data obtained from users ("User", "you") of our website www.vincesexclusives.fi. This policy is prepared in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection laws.

1. Data Controller
Vince's Exclusives Oy
[3526557-8]
[Kokkohongantie 9c]
Email: [vinces.exclusives@gmail.com]

2. Personal Data Collected
We may collect the following information:

• Contact Information: Name, email address, phone number, address

• Customer Information: Orders, payment information (limited, via payment provider)

• Technical Data: IP address, browser type, operating system, cookies, usage analytics

• User-Provided Data: Information submitted via contact forms or comments

3. Purpose of Data Processing
We use personal data for the following purposes:

• Providing and maintaining the Service

• Managing customer relationships and communication

• Processing orders and payments

• Improving user experience (e.g., via cookies)

• Fulfilling legal obligations (e.g., accounting)

4. Legal Basis for Processing
We process personal data on the following grounds:

• Contractual necessity: e.g., processing orders

• Consent: e.g., newsletter subscription, cookie usage

• Legal obligation: e.g., accounting

• Legitimate interest: e.g., maintaining customer relationships and marketing

5. Cookies and Tracking
Our website uses cookies and similar technologies. Cookies improve site functionality and collect data to analyze user experience. You can manage cookies in your browser settings. 

6. Data Sharing and Transfers
We may share personal data with:

• Payment service providers for payment processing

• Authorities when required by law

• Service providers (e.g., website hosting, analytics) only as necessary

Data is not transferred outside the EU/EEA without appropriate safeguards.

7. Data Retention
We retain personal data only as long as necessary to fulfill the purposes described in this policy or as required by law. For example, accounting records are retained for 6 years after the end of the financial year.

8. User Rights
Users have the following rights:

• Right to access their data

• Right to correct data

• Right to delete data ("right to be forgotten")

• Right to restrict processing

• Right to data portability

• Right to object to processing (e.g., direct marketing)

• Right to withdraw consent at any time

To exercise your rights, contact us using the information provided in Section 1.

9. Data Security
We implement appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, loss, or destruction.

10. Changes to the Privacy Policy
We reserve the right to update this Privacy Policy. Significant changes will be posted on the website, and the effective date will be updated.

Contact and Complaints
If you have questions about how we handle personal data, you can contact us using the details in Section 1.
You also have the right to file a complaint with the supervisory authority:

Office of the Data Protection Ombudsman
Ratapihantie 9, 00520 Helsinki
www.tietosuoja.fi