Privacy Policy
This privacy policy applies to the website at europe.discmania.net and was last updated on May 7, 2021.
Spin18 Oy is responsible for this website and strives to guarantee the rights of the data subjects in accordance with the legislation in force at the time.
The data protection policy is related to the Data Protection Act and the EU General Data Protection Regulation (GDPR). In drafting the data protection policy, efforts have been made to comply with the instructions of the Data Protection Ombudsman's Office, the table published by the Data Protection Ombudsman's Office on the information required by the information obligation, the guidelines of the Data Protection Working Party WP 29 and Traficom's instructions on cookies and consent.
Necessary cookies
This website requires a number of necessary cookies in order to store user-specific information and settings. These may include, for example, the logged-in user's session, the contents of the shopping cart, the language or region selection, and any other display settings. It is not required to ask a specific permission to set necessary cookies.
Traficom's instructions on cookies and consent
Collection of personal information
E-commerce customer register
We collect personal information related to the customer relationship when the visitor registers as a user of the online store or at the latest when ordering. An email address is also collected when subscribing to a newsletter.
The personal data collected is:
- Name
- Email address
- Phone number
- Address
- Order information (incl. cart contents)
- Options and settings (e.g. newsletter subscription)
- Possible customer group
- Possible messages
- Visits to the online store
- The source of traffic when entering an online store
- IP address
The information collected automatically is the source of the traffic and the IP address. Other information is only collected when the user enters it or performs activities in the online store. The collection of this information cannot be refused because it is needed to provide services and send a newsletter. However, using the online store and subscribing to the newsletter is optional.
The data is collected in a registry of the Shopify e-commerce platform provided by a third-party. We also transfer information to our ERP system and any other customer registers.
Information on the processing of personal data in a Shopify online store
Information on compliance with the GDPR of a Shopify online store
Learn more about Shopify's compliance with GDPR
Newsletter system mailing lists
We collect personal information from e-commerce customers and newsletter subscribers, primarily for newsletter delivery and marketing targeting. In addition, the system may be used to send other messages. The newsletter will only be sent to those who have subscribed to it, either when registering for the online store or separately.
The newsletter will only be sent to those who have subscribed to it, either when registering for the online store or separately. You can unsubscribe from newsletters from the link at the end of each newsletter.
The personal data collected is:
- Name
- Email address
- Telephone number
- Location (within postal code)
- Ordering information (incl. Cart contents)
- Options and settings (e.g. newsletter subscription)
- Possible customer group
- Visits to the online store
- The source of traffic when entering an online store
- IP address
- Newsletter openings and clicks
This personal information is collected when you subscribe to the newsletter, register for the online store and subscribe to products. They cannot be refused collection because they are needed to provide services and send a newsletter.
The information is collected to the online store's customer database and then automatically transferred to a registry of the Klaviyo newsletter system provided by a third-party.
Information on the processing of personal data in the Klaviyo newsletter system
Information on compliance with the GDPR of the Klaviyo newsletter system
Contact form
This website has a contact form that collects personal information when you submit the form.
Contact form submissions will not be stored on the website, but will be forwarded to our email and processed in the same way as other emails received by our organization.
The personal data collected is:
- Name
- Email address
- Phone number
- Message title
- Message
Using the contact form is optional, but personal information is required, because without it we would not be able to respond the person who contacted.
Ecommerce visitor tracking
This website uses the e-commerce platform's visitor tracking, which uses cookies. This visitor tracking is used to track user activity in the online store for statistics and marketing targeting.
The personal data collected is:
- IP address
- Information about the page request
- Information about website usage
- Information about ecommerce transactions
The information is collected in a registry of the Shopify e-commerce platform provided by a third-party.
Ecommerce cookies cannot be declined. Blocking cookies in your browser settings will adversely affect other website functions.
Previously set tracking cookies can be deleted through your browser's privacy settings.
About cookies set by the Shopify online store (see "Merchant storefronts")
About the processing of personal information in the Shopify online store
External visitor tracking
This website uses an external visitor tracking service. Technically, visitor tracking works with browser code, IP addresses, and browser-installed cookies that identify page views and other activity on a website by a specific user. The visitor tracking service records anonymized personal information about your website visitors and their activities on the website.
The personal data collected is:
- IP address
- Information about the page request
- Information about website usage
- Information about ecommerce transactions
Data is collected in a registry of the Google Analytics visitor tracking service provided by a third-party.
The user cannot block this tracking other than possibly by using browser add-ons that block it for a particular operator. Google services do not appear to comply with your browser's opt-out setting. Blocking cookies from your browser settings will adversely affect other functionality of your sites.
Previously set tracking cookies can be deleted through your browser's privacy settings.
About cookies set by Google services
Learn about cookies set by Google Analytics
About Google Analytics Privacy and Security
Online advertising conversion tracking
This website has online advertising conversion tracking enabled. Technically, conversion tracking works with browser code, IP addresses, and browser-installed cookies that identify page loads and other activity on a website by a specific user. The conversion tracking service records anonymized personal information about your website visitors and their activity on the website.
The personal data collected is:
- IP address
- Information about the page request
- Information about website usage
- Information about ecommerce transactions
The information is collected in the registers of online advertising services provided by third parties. These are Google Ads and Facebook ads.
The user cannot block this tracking other than possibly by using browser add-ons that block it for a particular provider. Google services do not appear to comply with your browser's opt-out setting. The same is likely to apply to Facebook services. Blocking cookies from your browser settings will adversely affect other functionality of the websites.
Previously set tracking cookies can be deleted through your browser's privacy settings.
About Google Ads GDPR Compliance
Learn more about Google Ads privacy
About cookies set by Google services
Facebook GDPR Compliance Information
About Facebook Conversion Tracking
About Personal Information Collected by Facebook Conversion Tracking
Purpose of processing
E-commerce customer register
We use the information to produce services and target marketing.
Newsletter system mailing lists
We use the information to produce services and target marketing.
Contact form
We use the information for example to serve our customers and to develop our services, depending on the content of the contact.
Ecommerce visitor tracking
We use the information to improve our marketing, communications and services. Ecommerce visitor tracking allows you to see a wide variety of statistics about ecommerce visitors and usage.
External visitor tracking
We use the information to improve our marketing, communications and services. With an external visitor tracking service we are able see, for example, how many visitors are coming to the website, of what sources the visitor traffic is coming from, and a lot of other useful statistics about website usage.
Online advertising conversion tracking
We use the information to improve our marketing. With conversion tracking, we are able to see how much our online advertising is generating sales. In practice, conversion tracking is essential for us to advertise effectively online.
Legal basis for the proceedings
Instructions from the Finnish Data Protection Ombudsman on the legal bases for processing
E-commerce customer register
Criteria for processing personal data:
- the data subject has given consent to the processing of his or her personal data for one or more specific purposes (EU General Data Protection Regulation, chapter II, article 6, paragraph 1a)
- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (EU General Data Protection Regulation, Chapter II, Article 6, paragraph 1b)
Newsletter system mailing lists
Criteria for processing personal data:
- the data subject has given consent to the processing of his or her personal data for one or more specific purposes (EU General Data Protection Regulation, chapter II, article 6, paragraph 1a)
Contact form
Criteria for processing personal data:
- the data subject has given consent to the processing of his or her personal data for one or more specific purposes (EU General Data Protection Regulation, chapter II, article 6, paragraph 1a)
Ecommerce visitor tracking
Criteria for processing personal data:
- processing is necessary for the purposes of the legitimate interests pursued by the controller (EU General Data Protection Regulation, chapter II, article 6, paragraph 1f)
External visitor tracking
Criteria for processing personal data:
- processing is necessary for the purposes of the legitimate interests pursued by the controller (EU General Data Protection Regulation, chapter II, article 6, paragraph 1f)
Online advertising conversion tracking
Criteria for processing personal data:
- processing is necessary for the purposes of the legitimate interests pursued by the controller (EU General Data Protection Regulation, chapter II, article 6, paragraph 1f)
Retention period of personal data
E-commerce customer register
We retain e-commerce customer information for as long as there is a need for customer information. According to the Finnish Accounting Act, accounting data must be kept for 6-10 years, depending on the type.
Shopify is not known to have a specified retention period for personal information.
Newsletter system mailing lists
We retain mailing list information for as long as there is a need for mailing list information. In other respects, the information is retained for the same period as the e-commerce customer register is needed.
Klaviyo states that it will retain personal data only for as long as necessary (see section "Data retention").
Contact form
Contact form submissions are not permanently stored on the website's server.
Contacts forwarded to our email are retained as are other emails in our organization.
Ecommerce visitor tracking
Shopify is not known to have a specified retention period for personal information.
Cookies are valid for 30 minutes to two years, depending on the cookie.
External visitor tracking
According to Google, anonymized visitor- and transaction-specific data is retained by the visitor tracking service for a maximum of 14 months. Conversion tracking cookies are valid for up to 2 years.
Online advertising conversion tracking
Google retains advertising information for a user who is signed in to Google services until the user deletes them. According to Google, anonymized conversion tracking visitor and transaction data will be retained for the time being, but will be further anonymized at 9 and 18 months. Conversion tracking cookies are valid for 90 days.
Facebook retains advertising information for a user who is signed in to Facebook services until the user deletes them. Conversion tracking cookies are valid for90 days.
Recipients of personal data
Personal data will not be disclosed to third parties without a specific legal basis.
Personal information is processed by the staff of the organization responsible for this website in accordance with their duties. In addition, personal data is processed by system vendors and service providers whose services the organization uses to provide its own services, and with whom personal data processing agreements have been concluded.
Personal data may be transferred to a third country as part of automated data processing, in which case the personal data will be properly protected.
Automatic decision making
We do not use your personal information for automatic decision making.
We use your personal information and behavior as an e-commerce customer and as a newsletter subscriber for profiling to target our marketing.
The online advertising services we use (Google Ads, Facebook Ads) use your personal information for profiling to target online advertising in their own and their partner's services.
Finnish Data Protection Ombudsman's guidance on automated decision making and profiling
Rights of the data subject
Once registered, you have the following rights:
- to obtain information on the processing of their personal data
- of access to their data
- to rectification of their data
- to the erasure of their data and to be forgotten
- to restrict the processing of their data
- to data portability
- to object to the processing of their data
- not to be subject to a decision based solely on automated processing
You can also revoke your previous consent at any time for free. You can revoke your consent by notifying our privacy officer.
Instructions from the Finnish Data Protection Ombudsman on the rights of the data subject
Contact details of the Data Protection Officer
If you have any questions about privacy or would like to exercise your rights as a data subject, please contact the website's data protection officer first.
E-mail: europe@discmania.net
Supervisory authority
If you consider that the processing of personal data violates applicable law, you also have the right to complain to the supervisory authority.
Office of the Data Protection Supervisor
Website: tietosuoja.fi
E-mail: tietosuoja@om.fi
Phone: 029 566 6700