Privacy Policy
The online store MadeBySaara, Business ID 3633899-4, at www.madebysaara.com processes personal data provided by customers in order to fulfill the terms and conditions, process electronic orders and deliveries, and ensure necessary communication within the period required by law.
General Provisions
-
The data controller, in accordance with the GDPR, is MadeBySaara, located in Espoo, Finland.
-
The contact details of the data controller are:
info@madebysaara.com -
Personal data means any information relating to an identified or identifiable natural person.
Source of Personal Data
-
The data controller processes personal data obtained with the customer's consent, collected through the online store for the purpose of entering into and fulfilling a purchase agreement.
-
The data controller processes only the identification and contact details necessary to fulfill the purchase agreement.
-
Personal data is processed for delivery and accounting purposes, as well as for communication between the contracting parties, for the period required by law. Personal data is not published or transferred to other countries.
Purpose of Data Processing
The data controller processes personal data for the following purposes:
-
Website registration in accordance with GDPR;
-
Processing electronic orders created by the customer (name, address, email, phone number);
-
Complying with legal obligations arising from the contractual relationship between the customer and the data controller;
-
Personal data is necessary for fulfilling the purchase agreement. The contract cannot be concluded without providing personal data.
Data Retention Period
-
Personal data is stored for as long as necessary to fulfill the rights and obligations arising from the contractual relationship and for three years after the contract has ended;
-
The data controller will delete all personal data once the required retention period has expired.
Recipients and Processors of Personal Data
Personal data may be processed by third parties acting as subcontractors of the data controller. Their services are necessary to fulfill the contract between the customer and the data controller.
Subcontractors include:
- Webnode AG (e-commerce platform)
- Shipping companies
- Google Analytics (website analytics)
Customer Rights
In accordance with the GDPR, the customer has the right to:
- Access personal data;
- Rectify personal data;
- Request deletion of personal data;
- Object to the processing of personal data;
- Data portability;
- Withdraw consent at any time by contacting: info@madebysaara.com
- File a complaint with a supervisory authority if a violation is suspected.
Data Security
-
The data controller undertakes to implement all necessary technical and organizational measures to protect personal data.
-
These measures include securing systems with password protection, using antivirus software, and maintaining systems regularly.
Final Provisions
-
By placing an order on the website, the customer confirms that they have read and fully accept this Privacy Policy;
-
The customer agrees to these terms by selecting the consent checkbox in the order form;
-
The data controller reserves the right to update this policy at any time. The updated version will be published on this website.
This policy comes into effect on June 20, 2026.
