Payment Service

Payments by Visa, Visa Electron, or Mastercard The payment intermediation service is implemented and provided by Paytrail Oyj (Business ID: 2122839-7) in cooperation with Finnish banks and credit institutions. Paytrail Oyj appears as the recipient of the payment on the cardholder's statement and forwards the payment to the merchant. Paytrail Oyj holds a payment institution license.

Paytrail Oyj, Business ID: 2122839-7, Innova 2, Lutakonaukio 7, 40100 Jyväskylä, Finland. Phone: 0207 181 830

Online Banking The payment intermediation service for online banking payments is implemented by Paytrail Oyj (2122839-7) in cooperation with Finnish banks and credit institutions. From the user's perspective, the service works just like a traditional online payment.

Privacy Notice (In accordance with the EU General Data Protection Regulation (2016/679) and the Finnish Data Protection Act (1050/2018))

1. Data Controller — Kuusamon Uistin Oy (Business ID: 0186320-3), Professori Räsäsentie 1–2, 93600 Kuusamo, Finland.
   
   
2. Contact Person for Register Matters — Annukka Nevala, Kuusamon Uistin Oy, Kuusamo, Finland. Tel: +358 40 831 5912. Email: shop@kuusamonuistin.fi
   
   
3. Name of the Register — Kuusamon Uistin Oy's online store customer register.
   
   
4. Processing of Personal Data and Website Analytics Purpose of data collection and marketing — We collect personal data primarily to process online store orders, deliver products, and handle invoicing. We may also use the data for customer communication and electronic direct marketing, provided you have given separate consent for this (for example, during the order or registration process). You can withdraw your marketing consent at any time. Website analytics (Google Analytics) — We use Google Analytics on our website to analyze visitor numbers and site usage, so that we can develop our online store and improve the customer experience. The use of analytics is based on your consent, which you can give or refuse in the website's cookie settings. In Google Analytics, user- and event-level statistical data is retained for a maximum of 14 months. Sharing data with third parties — We do not sell your personal data or disclose it to outside parties for their own marketing purposes. We share your data with trusted partners only to the extent necessary to provide our services (for example, payment intermediaries and shipping companies) and to arrange the website's technical maintenance and analytics (e.g. Google). We always ensure that our partners process your data appropriately and in accordance with applicable data protection legislation.
   
   
5. Data Content of the Register — First and last name; email address; postal address; user credentials and passwords for the data controller's services; marketing permissions or prohibitions. We do not store customers' credit card details or other payment-related information.
   
   

Online store order data is also processed and stored in the Winpos point-of-sale system, which we use to track our company's sales. Data stored in Winpos is used solely for tracking sales and orders. This data is not used for marketing purposes, is not disclosed to third parties, and is not sold.

1. Regular Sources of Information — The data subject provides their information on the kuusamonuistin.fi website, or at events organized by Kuusamon Uistin Oy.
   
   
2. Regular Disclosure of Data — Register data is not disclosed to third parties, except the service providers described in Section 4.
   
   
3. Register Protection and Data Security — Personal data is stored on secure servers provided by our trusted cloud service provider (Shopify), whose physical and digital security is maintained in accordance with the strictest industry security standards (such as PCI DSS Level 1 certification). Data is protected through appropriate technical and organizational measures, such as firewalls, encryption of data transmission and databases (SSL/TLS protection), and strict access controls. Access to personal data is restricted to those individuals for whom it is necessary in order to carry out their job duties or provide the service, and use of the systems requires personal authentication credentials.
   
   
4. Your Rights — Under the GDPR you have the right to access, correct, or request erasure of your data, restrict or object to processing, and request data portability where applicable. You may withdraw marketing consent at any time and lodge a complaint with the Office of the Data Protection Ombudsman if you believe your data has been processed unlawfully. Requests should be sent to the contact person in Section 2.
   
   

Liability— Kuusamon Uistin Oy is not responsible for uninterrupted operation of the service, nor for the accuracy, reliability, errors, omissions, or inaccuracies of the content, nor does it guarantee the website's security or that communications sent through it are free of viruses or other harmful components.