Privacy policy

Privacy Policy

Updated 12 May 2024

This privacy policy explains how Saunaorava Oy (“Saunaorava”) processes the personal data of its customers and the users of its online services, and how you can influence the processing of your personal data.

The processing of personal data complies with applicable legislation and industry self-regulation, such as the guidelines issued by the Finnish Association for Customer Experience and Marketing (Asiakkuusmarkkinointiliitto ry) and IAB Finland ry.

Data Controller

Saunaorava Oy
Business ID: 2501198-8
Huopalahdentie 29 A 90
00350 HELSINKI, Finland

Personal Data Collected

Saunaorava collects and processes personal data only to the extent necessary for the purposes described in this privacy policy.

The personal data collected and the scope of processing vary depending on the relationship between Saunaorava and the customer or user of the online services, any consents and objections given regarding the processing of personal data and marketing, and the cookie and tracking settings of the browser used.

Personal data provided by you

Personal data that a customer or user of the online services provides to Saunaorava in various contexts, such as when ordering a product, subscribing to a newsletter or registering for an online service, may include, for example:

  • basic information, such as name and contact details
  • order and billing information, such as details of the payer and recipient of the order, including their email address and phone number
  • customer service information, such as customer feedback and communications with customer service
  • consent information, such as marketing consents, usage rights related to marketing material (such as social media images), or other consents and objections related to the use of personal data
  • responses to surveys, questionnaires or competitions conducted by Saunaorava or its partners
  • call information and call recordings, such as customer service calls

Data collected from the use of online services

Data collected from the use of online services includes, for example:

  • information about the device or application used, such as browser version, device type or screen size
  • information about the use of online services, such as page loads, time spent on the services, navigation within the services, or advertising or marketing content viewed
  • information about web pages opened through customer communications
  • location data at country level based on IP address
  • data collected by social media plugins or other third parties

A user of the online services may be identified by a digital identifier created in the services when the customer logs in or arrives at the service via targeted customer communications, such as a newsletter.

Data on the use of online services is collected using cookies. For more information, see our cookie policy.

Derived and combined data

To better serve its customers and users of its online services, Saunaorava refines the personal data it collects by analysing it with various statistical methods and by combining data collected from different sources.

Using these methods, assumptions may be made about, for example, interests, gender, age group, purchasing behaviour or other similar characteristics. These assumptions are based on the provided or collected data described in the previous section. To protect consumer privacy, Saunaorava does not make assumptions about data considered sensitive.

Saunaorava protects the privacy of its customers and users of its online services by carrying out the derivation and combination of data described above with particular care, so that the privacy of customers and users is not compromised.

Purposes and Legal Basis for Processing Personal Data

Saunaorava collects personal data for managing customer relationships, developing products and services, and commercial purposes.

Managing customer relationships

Saunaorava uses customers’ personal data for various measures necessary to manage the customer relationship, such as:

  • delivering product orders
  • maintaining the customer relationship and customer communications
  • customer service and other customer support, and their quality control
  • billing
  • running competitions and prize draws

The processing of personal data for managing the customer relationship is based on the contract between Saunaorava and the customer for the delivery of a product or service, or on another action establishing a customer relationship.

Customers can influence the processing of personal data for managing the customer relationship by contacting customer service.

Product and service development

Saunaorava uses data on customers and users of its online services to develop products and services and to improve service quality and offering. Product and service development measures may include, for example, product or content recommendations or personalisation of services.

Products and services are also developed with the help of surveys and feedback.

The specific purposes of data collected in studies and surveys, and how that data is stored, are described separately in connection with each study or survey.

The processing of personal data for product and service development is based on Saunaorava’s legitimate interest in using data for the benefit of its customers and users of its online services.

Users of the online services can influence the use of their data in product and service development through ##cookie settings.

Commercial purposes

Saunaorava may use data on customers and users of its online services for marketing, advertising or other commercial activities. The data may be used, for example, for targeting advertising, direct marketing or displaying advertisements on third-party platforms.

The processing of data for commercial purposes is based on the customer’s consent with regard to electronic direct marketing. For other advertising and product recommendations, the processing of personal data is based on Saunaorava’s legitimate interest.

Customers can influence the targeting of advertising through customer service. Users of the online services can influence ad targeting through cookie settings, or, for advertising on third-party platforms, by adjusting the platforms’ own ad settings.

Sharing and Disclosure of Personal Data

Saunaorava uses personal data to fulfil the purposes described above in the section Purposes and Legal Basis for Processing Personal Data. In addition, Saunaorava may use third-party services, in which case Saunaorava ensures the lawful processing of the data through contractual arrangements and instructs the third parties on how to process the data.

Saunaorava may share or disclose personal data to third parties, for example, in the following situations:

  • When required by applicable law. Disclosure of personal data may then be necessary, for example, at the request of an authority or for the conduct of legal proceedings.
  • Marketing activities. Disclosing or sharing personal data with other controllers or processors may then be necessary, for example, to conduct market research, deliver promotional material or carry out online advertising.

Saunaorava may disclose personal data to third parties if this is necessary to protect the rights or safety of Saunaorava and the customer or user, to investigate fraud, or to respond to requests from authorities.

Transfers of personal data outside the EU/EEA

As a rule, Saunaorava does not transfer or process data outside the European Union or the European Economic Area. If data is exceptionally transferred outside the EU/EEA, an adequate level of protection for personal data is ensured in accordance with applicable legislation.

Retention of Personal Data

Saunaorava retains personal data for as long as necessary to fulfil the purposes defined in section 3. However, applicable legislation, such as accounting or other mandatory legislation, may require personal data to be retained even after the purpose of processing has ended. In such situations, the retention periods defined in the applicable legislation are followed.

Your Rights and How to Exercise Them

Saunaorava is committed to protecting the privacy of its customers and users of its online services and to upholding their rights under data protection legislation. The key rights and options customers have regarding the processing of their personal data are listed below:

  • Customers have the right to access their personal data and the right to request the correction of inaccurate data.
  • Customers have the right to request the erasure of their personal data to the extent permitted by other legislation.
  • Customers have the right to transfer certain personal data concerning them to another controller.
  • Customers have the right to prohibit direct marketing or to object to the processing of their personal data for direct marketing purposes. Customers can also influence the channels through which direct marketing is carried out.

For requests related to the above rights, please contact Saunaorava’s customer service.

Users of Saunaorava’s online services have the right to influence the use of cookies and similar technologies in Saunaorava’s services. For more information on the use of cookies and your options, see Saunaorava’s ##cookie policy.

Data Security

Saunaorava ensures the secure processing of personal data through appropriate security measures. Personal data is protected against loss, destruction, misuse, unauthorised access and disclosure. Secure processing is ensured, for example, by restricting access to data and by ensuring that our employees and subcontractors use personal data in accordance with the instructions and agreements provided.

Changes to This Privacy Policy

Saunaorava reserves the right to update this privacy policy, for example due to the development of its services or mandatory legislation. Changes and updates to the privacy policy will be announced on Saunaorava’s website.