General

BestBuddy.fi is committed to protecting the privacy of its customers and offers the opportunity to influence the processing of data.

With this privacy policy, we inform our customers about the processing of their personal data. The customer must accept the terms of this privacy policy in order to use BestBuddy.fi's services.

The information we collect can be divided into information provided by the user, information observed from the use of online services, and information derived through analytics.

We use the information:

• To provide an easy-to-use and secure service
• To provide a good customer experience
• To improve product recommendations and marketing
• To develop customer service and online shopping

The data controller and its contact information

The controller of the personal data processed is:

Bombus Lapponicus Tmi (Y-ID 2341255-0)

Vantin Park 2

02780 Espoo

You can ask more about data protection and the processing of personal data by emailing info@BestBuddy.fi

What information can be collected about me?

• User-provided or personally identifiable information
• Identification information, such as name
• Personal identification number to identify the customer when making a credit agreement
• Passport information or similar information required by Customs when ordering tax-free products or services from outside Finland
• Contact information, such as address, email address, and phone number
• Payment information, including credit agreements and other billing information
• With customer consent, location information used to estimate delivery time
• The email address and certificate used to sign in to Google, Facebook, or Microsoft
• Information observed from the use of the services and derived through analytics
• Purchase history, including ordered products and their price information
• Delivery information, such as the selected delivery method and delivery address
• Product reviews
• Online store usage and browsing data and terminal device identification data
• Product recommendation and other information and identifiers used for targeted content

Providing identification, contact and payment information is mandatory when purchasing from BestBuddy.fi via the Internet.

The main source of information is the user themselves, in addition to which we may receive additional information from our partners, for example, a credit service provider. We will inform you about personal data we receive from third parties in accordance with the provisions of the General Data Protection Regulation when we first contact the customer or at the latest within one month of receiving the personal data.

What is my personal data used for?

Personal data is used

• To maintain customer relationships
• For the delivery, processing and archiving of orders
• To develop BestBuddy.fi's operations and services
• To improve customer experience
• For analytics and statistical purposes
• To produce more personalized, targeted content and marketing
• To prevent abuse
• To provide better customer service

The data is processed based on the customer relationship between the customer and BestBuddy.fi, the agreement, the use of the website, the customer's separate express consent or legal obligations.

How is my information stored and protected?

All personal data is protected from unauthorized access and accidental or unlawful destruction, alteration, disclosure, transfer or other unlawful processing.

BestBuddy.fi stores customer data in the United States. The data centers and the technical and process security of the store systems are at a very high level, and they are purchased as a service from a large American service provider. The servers are protected against data breaches and denial of service attacks.

We follow good data protection practices in the processing of personal data and technical solutions, including data consolidation, minimization, pseudonymization, anonymization and encryption. The requirements of the EU General Data Protection Regulation, which will apply from May 25, 2018, have been taken into account in the processing of personal data.

All access to personal data is monitored in accordance with good practices.

Who processes my personal data?

Only BestBuddy.fi's own employees have access to customer data. Our staff is trained to use data safely and ethically. Each of our staff only sees customer data to the extent necessary to perform their job duties.

We use trusted contractual partners, which allows data to be transferred to a third party. The agreements with all partners take into account the requirements set by the EU Data Protection Regulation and other legislation.

Company responsible for data processing:

Bombus Lapponicus Tmi (Y-ID 2341255-0)

Vantin Park 2

02780 Espoo

How long will my data be stored?

We will only retain your personal information for as long as is necessary to fulfill the purposes described in this statement. In addition, some information may be retained for longer periods to the extent necessary to comply with and demonstrate the proper performance of legal obligations, such as accounting and consumer protection obligations.

At the customer's request, personal data concerning them can be deleted or anonymized from BestBuddy.fi's systems. The deletion and anonymization procedure is irreversible, and we cannot restore deleted customer accounts.

For some information, legislation imposes obligations for longer-term storage of information, including for the following purposes:

• The Accounting Act specifies longer retention periods for information, regardless of whether the material contains personal data or not.
• Fulfilling consumer trade responsibilities
• System log information is collected and stored as required by law so that we can provide a legal and secure online store for our customers.
• Taking sufficient backups of the store's databases and systems to secure data, correct errors, and ensure data security and continuity

What rights do I have?

As a customer, you have the right to:

• To have access to personal information about you, including the right to obtain a copy of the personal information we hold about you
• Request correction or deletion of personal data about you
• Under certain conditions, request restriction of processing or object to the processing of personal data

Furthermore, if the processing is based on separate consent, you have the right to withdraw your consent at any time. Please note that this does not affect the lawfulness of the processing carried out before the withdrawal of consent.

You can make a request to exercise your rights by contacting our customer service. The request must be sufficiently specific so that our customer service can verify your identity. We will inform you if we are unable to fulfill your request in some respects, such as deleting any information that we are legally required to retain (e.g. credit information) or have the right to do so.

If you notice that the processing is incomplete or unlawful, you have the right to file a complaint with the data protection authority .

How do I access the information stored about me in the system?

You can request the information stored in BestBuddy.fi's systems by contacting us by email at info@bestbuddy.fi.

Taxes and customs duties

BestBuddy.fi complies with Finnish tax legislation and collects value added tax (VAT) on the sale of products and services, which is paid to the Finnish state. All prices in our online store include statutory value added tax, unless otherwise stated. If the order is delivered outside of Finland, the customer is responsible for any customs fees and taxes in the destination country. Information required by customs, such as passport information, may be requested from the customer for the purpose of processing the order. This information is handled confidentially and only in situations required by the authorities.

How can I influence the use of my data?

BestBuddy.fi is committed to offering its customers opportunities to influence the processing of their data.

You can decide for yourself about the marketing and value-added services targeted to you and whether or not to receive various marketing messages. We are constantly developing our service, so features may be added, changed or removed.

The customer can also terminate their customer account at any time and request BestBuddy.fi to delete their information by contacting our customer service.

Note: In some cases, not all information can be deleted and legislation may require us to retain some of the information related to the customer.

Will my personal data be disclosed to third parties?

We may disclose some necessary information to third parties to guarantee delivery and for marketing purposes. Your information will also be passed on to the credit granting party in connection with a credit decision.

We also use customer data with third parties for analytics and personalization purposes. We use shopping behavior and browsing data with partners to better offer you products and offers that are of interest to you. The data used for analytics and personalization purposes is anonymized or pseudonymized whenever possible. Only we can associate the pseudonymized data used with your name.

If necessary, we also disclose information to authorities. We always inform the customer about information requests, if permitted by law.

We share information with the following third parties:

• For analytics and statistics partners
• For product recommendation and personalization partners
• To email marketing partners, if the customer has allowed weekly newsletters, communications based on browsing history, or product review requests
• For SMS partner when sending text messages is allowed
• To the transport company, if the selected delivery method is transport to a pickup point, the nearest post office or to the destination
• To the payment intermediary when paying with a payment card
• To the lender, when the customer chooses a credit company invoice or installment payment as the payment method
• To the invoice operator when BestBuddy.fi's own invoice is selected as the payment method
• To the product supplier, when ordering electronic licenses or direct delivery products
• Order-related information is passed on to some maintenance companies during maintenance.
• To customs, when purchasing products tax-free
• To a collection agency, when invoices become due and are transferred to collection

BestBuddy.fi ensures a high level of data security and protection when transferring and processing data in accordance with the EU General Data Protection Regulation. The means of ensuring the level of data processing by third parties are model contractual clauses approved by the European Commission, binding corporate data protection regulations (BCR arrangement), the EU-US Privacy Shield agreement or another approved method in accordance with the General Data Protection Regulation.

The customer can limit the disclosure of information for marketing and analytics purposes.

Do the store's websites use cookies and what are they?

BestBuddy.fi uses cookies and other similar technologies, such as local storage in the browser. Cookies are small text files between the browser of the terminal device and the server. Cookies and other identifiers have a specified validity period, after which the browser deletes the identifier. We use these technologies to implement functions, personalization, analytics and marketing targeting.

Functional cookies and local storage are used, among other things, for customer identification, login maintenance, delivery time estimates and shopping cart functions. For these functions, the use of cookies and local storage and their acceptance of their use is mandatory. Functional cookies and local storage variables set by the server remain in the browser for 15 minutes to 24 months, unless they are specifically deleted from the browser settings. Visiting the site will reset the cookies and local storage variables if the browser allows it.

By personalizing the user experience, we can offer more product recommendations on our website that are of interest to our customers.

The partners and technologies we use for analytics and marketing targeting, such as pixel tags and cookies, help us better understand our customers' behavior and tell us which products, features and services our customers are interested in. The information used is anonymized whenever possible. Otherwise, we treat the information as personal to the extent that the identifier contains customer-specific information, such as an IP address. Identifiers that can be linked to a customer in some way are also treated as personal information. The validity period of the identifiers is 30 seconds-24 months.

We use Google Analytics, Google Tag Manager, Google AdWords, Google Display Network and Google DoubleClick for analytics related to our website usage, popular products, trends and sales, and with your consent also for marketing targeting. The information sent to Google is anonymized. Read more about the processing of Google Analytics data .

In addition to the privacy features in Account Management, you can opt out of the use of identifiers for marketing targeting by enabling your browser's Do Not Track feature and setting your browser to reject third-party cookies. When logged into your customer account, Account Management's privacy settings override your browser's Do Not Track feature.

Can this privacy policy be changed?

Due to the development of services and changes in government regulations, we reserve the right to change the privacy policy. Registered customers will be notified of significant changes to the privacy policy when the terms are updated.

Who can I contact?

You can contact us with questions related to privacy, data processing and the privacy policy by email at info@bestbuddy.fi.