Privacy Policy
INTRODUCTION
Nytalo Oy Ab is committed to protecting your privacy when you use our services and is responsible for the processing of all your personal data. This Privacy Policy explains how we collect, process, and safeguard your personal information.
We may update this policy from time to time. Please review the latest version regularly on our website.
This Privacy Policy applies to our online services, newsletter, and SMS services.
WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
Nytalo Oy Ab (Business ID: 3185262-8) is the owner of the www.epldiamond.fi online store and centrally manages the processing of personal data.
Personal data will not be disclosed to third parties unless required by law.
WHAT PERSONAL DATA DO WE PROCESS?
We collect and store personal data that you provide to us directly, including:
- Name
- Address
- Date of birth
- Native language
- Gender
- Mobile phone number
- Email address
- Preferred communication methods (email and/or SMS/phone call)
We also collect information related to:
- Your purchases (products, prices, dates, store/online shop)
- Incomplete purchases in the online store
- Your areas of interest within the online store
- Possible returns
- Customer service inquiries
- Participation in events, competitions, or similar activities
PURPOSE OF PROCESSING PERSONAL DATA
Your personal data may be used for the following purposes:
- Verification of age and identity
- Creation and management of EPL CLUB member accounts
- Processing online purchases
- Recording purchase receipts during the current bonus collection period
- Calculating bonus balances
- Handling orders and returns
- Contacting you regarding delivery information
- Sending SMS/email notifications when orders are ready for collection
- Responding to customer service inquiries via SMS/email
- Managing insurance matters and insurance claims
- Processing credit receipts
- Handling repair services
- Analysis and segmentation for targeted campaigns
- Sending general and targeted communications
- Invitations and announcements related to events and competitions
- Customer satisfaction surveys to improve services and offerings
- Testing and developing our systems and services
- Preventing fraud and misuse
HOW LONG DO WE STORE YOUR DATA?
We retain your personal data only for as long as necessary to fulfill our contractual obligations and to comply with statutory retention requirements.
After this period, your personal data will be deleted.
Information related to online store purchases is stored for the period required under accounting legislation.
TO WHOM MAY YOUR PERSONAL DATA BE DISCLOSED?
Your personal data will not be transferred or sold to third parties for marketing purposes.
However, personal data may be shared with third parties when necessary for providing our services, such as:
- Delivering ordered products
- Analyzing purchase activity
- Printing and distributing email, SMS communications, or marketing materials
YOUR RIGHTS
You have the right to request access to the personal data we hold about you, up to four (4) times per year.
Requests must be made in writing and sent to:
epldiamond.fi@gmail.com
If you believe that Nytalo Oy Ab has processed your personal data incorrectly or unlawfully, or if you wish to request correction or deletion of your personal data, please contact us at the email address above.
RIGHT TO ERASURE
Your request for deletion of personal data may be denied if legal obligations (such as accounting laws) prevent immediate deletion.
Personal data may also need to be retained for the establishment, exercise, or defense of legal claims. In such cases, deletion will be postponed until it is legally permissible.
HOW IS YOUR DATA STORED AND PROTECTED?
All personal data is protected against unauthorized access and against accidental or unlawful destruction, alteration, disclosure, transfer, or other unlawful processing.
We apply best practices in data protection and technical safeguards, including data consolidation, minimization, pseudonymization, anonymization, and encryption.
Our data processing practices comply with the requirements of the EU General Data Protection Regulation (GDPR), applicable since 25 May 2018.
All access to personal data is monitored in accordance with established security standards.
COOKIES AND TRACKING TECHNOLOGIES
The website epldiamond.fi uses cookies and similar technologies, such as browser local storage.
Cookies are small text files stored between your device’s browser and our server. Cookies and other identifiers have defined validity periods, after which they are automatically deleted by your browser.
We use these technologies to:
- Enable website functionality
- Personalize user experience
- Conduct analytics
- Target marketing communications
Our analytics and marketing partners use technologies such as tracking pixels and cookies to help us better understand customer behavior and identify which products and services are of interest.
Whenever possible, data used for analytics is anonymized. If identifiers contain personal data (such as IP addresses), they are processed as personal data. Identifiers that can be linked to an individual are also treated as personal data.
The validity period of identifiers ranges from 30 seconds to 24 months.
We use:
- Google Analytics
- Google Tag Manager
- Google Ads (AdWords)
- Google Display Network
- Google DoubleClick
These tools are used to analyze website usage, popular products, trends, and sales, and — with your consent — for marketing targeting purposes.
Information transmitted to Google contains only anonymized or pseudonymized data.
You may opt out of marketing-related identifiers by enabling the browser’s “Do Not Track” feature and blocking third-party cookies.
If you are logged into your customer account, your account privacy settings override the browser’s “Do Not Track” settings.
CONTACT INFORMATION
If you have any questions regarding the processing of your personal data, or if you wish to request correction, deletion, or transfer of your data, please contact:
For further information regarding personal data processing, you may also contact the supervisory authority:
Office of the Data Protection Ombudsman
http://www.tietosuoja.fi