Privacy policy

Privacy Policy

1. Data Controller

Suomen Lasitehdas Oy
Business ID: 1027496-1
Kirjaltajantie 2, 06150 Porvoo, Finland
Email: myynti@lasitehdas.com

2. Contact Person for Register Matters

Lasitehdas (Suomen Lasitehdas Oy)
Email: myynti@lasitehdas.com

3. Name of the Register

Lasitehdas Online Store User Register

4. Purpose of Processing Personal Data

Personal data stored in the Lasitehdas online store user register is used for managing customer relationships, processing and delivering orders, handling contact requests, marketing purposes, and developing online services and customer experience.

5. Data We Collect

The register may include the following basic information about users:

  • Name

  • Address

  • Phone number

  • Email address

The controller records the information that the user personally provides when using the Lasitehdas online store.

When you browse our online store, we also automatically receive your device’s IP address, the browser you are using, and the operating system of your device.

Like many other websites, we use “cookies”. They improve your experience in our online store and collect information about visitors and visit volumes. Please read more about cookies later in this Privacy Policy (“7. Cookies”).

6. Regular Data Disclosures and Transfer of Data Outside the EU or EEA

Customer data is stored in the systems and databases of our e-commerce platform (Shopify). Shopify may transfer data outside the EU, but it complies with the requirements of the EU General Data Protection Regulation (GDPR) under the EU–US Data Privacy Framework.

We collect analytical data about website visitors using services such as Google Analytics and Facebook Pixel.

For payment processing, we use the following service providers:

  • Klarna Bank AB

  • Paytrail Oyj

  • Svea Bank AB

  • Shopify Payments (Stripe Payments Europe Ltd)

  • PayPal (Europe) S.à r.l. et Cie, S.C.A.

Payment service providers act as independent data controllers in connection with payment transactions and process personal data in accordance with their own privacy policies.

7. Cookies

Cookies are small files that a website or service provider stores on your device’s storage via your browser (if you allow this). Cookies enable the site or service provider to recognize your device and browser. Some cookies we use are essential for the proper and intended operation of the online store — for example, they help process the contents of your shopping cart.

Cookies also help us understand your interests on our site based on your previous or current visits, allowing us to serve you better. We use cookies to gain more accurate insight into website traffic and interaction, which helps us improve your shopping experience in the future.

We also use data collected from cookies for better targeting of marketing. Website usage is tracked using services such as Facebook Pixel and Google Analytics.

8. Principles of Register Protection

We follow industry best practices to ensure that personal data is not compromised, misused, accessed, disclosed, altered, or destroyed.

The Lasitehdas online store user register is stored in a system that requires a username and password for access. Only specific, pre-authorized persons (such as employees of the data controller) have access to the data. The system is also protected by firewalls and other technical measures.

9. Right to Object

The data subject has the right to prohibit the data controller from processing their personal data for direct marketing, distance selling, other forms of direct marketing, or for market and opinion research, as well as for personal directories and genealogical research. The objection must be made in writing and addressed to the person responsible for register matters.

10. Right of Access

The data subject has the right to review their personal data stored in the register and to receive copies of it. The request for access must be made in writing and addressed to the person responsible for register matters.

11. Rectification of Data

The controller will, on its own initiative or at the request of the data subject, correct, delete, or supplement any personal data in the register that is incorrect, unnecessary, incomplete, or outdated for the purpose of processing. The data subject should contact the controller’s data protection contact via email to request correction.

12. Updates

This Privacy Policy may be updated as necessary.
This version was last updated on October 29, 2025.

Get a quote