Privacy Policy

1. Data Controller

Event point Oy (Event point)

Business ID: 3463290-3
Phone: +358 40 3660489
Email: tapahtuapiste@gmail.com

2. Purpose and legal basis for processing personal data

We process personal data for the following purposes:

Order processing and delivery: Personal data is required for order processing, delivery and invoicing.
Customer service: Personal data is used to provide customer service and answer customer questions.
Marketing: Personal data may be used for marketing purposes, such as sending newsletters, provided that the customer has given their consent.
Legal obligations: Personal data is also processed to fulfill legal obligations, such as accounting and taxation.

The legal grounds for processing personal data are:

Contract execution (e.g. order processing)
Compliance with legal obligations
Customer consent (e.g. marketing)
Legitimate interest (e.g. customer service)

3. Personal data processed

We process the following personal data:

Contact information: Name, address, telephone number, email address
Payment information: Credit card information, payment transaction information
Order information: Ordered products, shipping address, billing address
Customer feedback and communication: Customer messages and feedback

4. Retention period of personal data

We retain personal data for as long as necessary to fulfill the purposes set out in this privacy policy or as long as required by law.

5. Disclosures and transfers of personal data

Personal data may be disclosed to the following third parties:

Payment service providers: For payment processing.
Transport companies: For order delivery.
Shopify: An e-commerce platform provider. Shopify complies with GDPR regulations and data protection requirements.

Personal data may be transferred outside the EU or EEA by Shopify or other service providers, but we ensure that transfers are GDPR compliant and that adequate safeguards are in place.

6. Customer rights

The customer has the following rights regarding their personal data:

Right to access information: The customer has the right to obtain confirmation as to whether their personal data is being processed and the right to access the data.
Right to rectification: The customer has the right to demand correction of incorrect or incomplete information.
Right to erasure: The customer has the right to request the erasure of their personal data in certain situations.
Right to restriction of processing: The customer has the right to request restriction of processing in certain situations.
Right to object to processing: The customer has the right to object to the processing of personal data in certain situations.
Right to data portability: The customer has the right to receive personal data concerning him or her in a structured, commonly used and machine-readable format and the right to transfer the data to another controller.

7. Information security

We protect personal data with appropriate technical and organizational measures to prevent unauthorized access, alteration, disclosure or destruction of the data.

8. Changes to the Privacy Policy

We reserve the right to change this Privacy Policy. Any changes will be posted on our website, and customers will be notified directly of any material changes.

9. Contact information

If you have any questions about this privacy policy or would like to exercise your rights, please contact: