Privacy policy

Last updated: January 30, 2025


Data controller 

MirTa´s Cosmetics Oy 
3205931-4
Pispalan valtatie 40, 33270 Tampere
0504756505


What information is collected?

The following data is stored in the customer register:

  • First and last name
  • Street address, postal code, city, and country
  • Email address and phone number
  • Language and currency used during transactions
  • For business customers: company name, business ID, and tax ID

Additionally, the following information is stored in the online store’s order records:

  • Order details (products purchased)
  • Payment method and delivery method
  • Order timestamp and any customer feedback


Purpose of Processing Personal Data

Personal data is processed for the following purposes:

  • Managing customer relationships and communication
  • Order delivery, processing, and archiving
  • Statistical analysis and business development
  • Marketing communication and service improvement (based on consent)
  • Website usage analytics and user experience enhancement (based on consent)
  • Customer service and handling of complaints

The legal basis for processing personal data is contract, consent, or the legitimate interest of the data controller. The processing of personal data complies with the requirements set by the EU General Data Protection Regulation (GDPR, effective May 25, 2018).


How long will personal data be stored?

Personal data is retained only for as long as necessary to fulfill the purpose of processing or to comply with legal obligations. Retention periods are determined based on factors such as the duration of the customer relationship, the Accounting Act, the Consumer Protection Act, and other applicable legal requirements. 


Disclosure of information to third parties 

Personal data may be disclosed to:

  • Logistics and payment service partners for order processing and delivery.
  • Authorities to comply with legal obligations.

Data will not be transferred outside the EU/EEA without appropriate safeguards.


Cookies and Analytics

The website uses the following tools and services:

Google Analytics

Tracks user traffic and activity on the website, such as the number of visits, duration, location, and the devices and browsers used.

The collected data may include:

  •  IP address
  • Device and browser type
  • Time spent on the website and navigation between pages

Users can manage their cookie settings in their browser settings and block, for example, third-party cookies.


Rights of the Data Subject

As a customer, you have the following rights: 

  • Right to access data
  • Right to rectify data
  • Right to withdraw consent
  • Right to object to data processing
  • Right to request data deletion
  • Right to data portability
  • Right to lodge a complaint with a data protection authority

You have the right to lodge a complaint with the Data Protection Ombudsman if you believe that the processing of your personal data is inadequate or violates data protection regulations. You can submit a complaint to the Finnish Data Protection Ombudsman’s office at https://tietosuoja.fi/


Data Security and Protection of Personal Data

Personal data is processed confidentially and protected with appropriate technical and administrative measures. We implement access control, security policies, and data minimization to prevent unauthorized access to information. Access to personal data is restricted to individuals with a justified need, and the data is stored in secure systems. We retain personal data only for as long as necessary.


Changes to the Privacy Policy

We reserve the right to update this privacy policy. Any changes will be published on the website and will take effect immediately upon publication. We recommend reviewing the privacy policy regularly to stay informed about any updates.

If you have any questions regarding this privacy policy, you can contact us at: info@mirtascosmetics.fi.