Privacy policy

Online store (Tmi), business ID: 2808676-6, 00360 Helsinki, located in Helsinki, processes the personal data provided by the customer, who completes and confirms the terms of use, the processing of electronic orders and deliveries and the necessary communication within the time required by law.

General provisions

1. The controller of personal data, which complies with the GDPR Regulation (hereinafter referred to as the "Regulation"), Business ID: 2808676-6, located in Helsinki .

2. The contact details of the Controller are: e-mail:, tel. +358 40 094 3900

3. Personal data are any data relating to an identified or identifiable natural person.

Source of personal data

1. The controller processes personal data obtained with the consent of the customer and collected by contract for the purpose of acquiring and fulfilling an e-commerce order.

2. The controller only processes the customer's identification and contact data necessary for the fulfilment of the purchase contract;

3. The controller processes personal data for shipping and accounting purposes and for the transmission of information required by the contracting parties for the time required by law. The personal data will not be disclosed or transferred to other countries.

Purpose of processing

The Controller processes the Customer's personal data for the following purposes:

1. registration of the website in accordance with Chapter 4, Section 2 of the GDPR;

2. the electronic order created by the Customer (name, address, e-mail, telephone number);

3. to comply with the law and regulations arising from the contractual relationship between the Customer and the Data Controller;

4. The personal data are necessary for the performance of the purchase contract. The contract cannot be concluded without the personal data.

Duration of storage of personal data

The controller shall store personal data for as long as necessary to fulfil the rights and obligations arising from the contractual relationship between the controller and the customer and for three years after the termination of the contractual relationship;

2. The Controller shall delete all personal data after the period necessary for the storage of the personal data.

Recipients and processors of personal data

Third parties processing the Customer's personal data are subcontractors of the Controller. The services of these subcontractors are necessary for the performance of the contract for the acquisition and processing of the electronic order in the contract between the Controller and the Customer.

The subcontractors of the Controller are:

Webnode AG (e-commerce system);

Webnode (web-based web service); (web service provider for web services); Freight company (Postal Service);

Google Analytics (website analytics);

Customer rights

Google Analytics (web analytics), web analytics (website analytics), web analytics (web analytics):

1. the right of access to personal data;

2. the right to rectification of personal data

3. the right to have personal data erased;

4. the right to object to the processing of personal data;

5. the right to data portability;

6. the right to withdraw consent to the processing of personal data in writing or by e-mail to:

7. the right to lodge a complaint with a supervisory authority in case of suspected breach of the Regulation.

If you wish to report a breach of the right to object to the processing of your personal data, you may contact the Data Protection Officer

1. The controller undertakes to take all technical and organisational precautions necessary to protect personal data.

2. The controller has taken technical precautions to secure the data storage facilities, in particular by ensuring password-protected access to the computer, using anti-virus software and regularly maintaining the computers.

Final provisions

1. By placing an electronic order on this website, the Customer declares that he/she is aware of and fully accepts all the personal data protection conditions;

2. by ticking the checkbox on the order form, the Customer accepts these rules;

3. The Controller may update these Terms at any time. The new, updated version must be published on this website.

These Rules will enter into force on 20.4.2022.