Privacy policy
Data Controller
Lumingerie Oy
Business id 2676687-2
Kiertorata 16, 90440 Kempele
Register Contact Person
Mikko Horneman
℅ Lumingerie Oy
Kiertorata 16, 90440 Kempele
Sähköposti: info (at) lumingerie.fi
Name Of The Register
Lumingerie Oy customer register
Purpose of data processing and the legal basis for processing
The legal basis for processing personal data in the customer register is the care and maintenance of the Lumingerie Oy customer relationship with its customers.
Description Of Personal Information provided by Customers
We collect a number of personal data if you order products online or contact us via chat or feedback form. The main source of information is the information provided by users themselves when placing an order. We collect, store and process your data for processing purchases, services and potential claims.
When you place an order we need your name, address, telephone number, and email address. In addition, data is automatically stored on the customer relationship, including ordering information and order payment details. Contact form or chat messages sent throught the website, are sent over a secure SSL connection to the Lumingerie Oy email server. The registry is stored and protected so that only authorized processors of personal data have access to the data with a username and password. Data is protected with sufficient security means, such as a secure connection, firewalls, safe facilities, strong passwords, as well as careful operation of data handlers.
Automatically collected personal information
When you visit the the store we automatically collect information that may be classified as personal data. The gathered information includes the IP address, date and time, used hardware, software and internet browser and browser version. We may also collect information about clicks on the page, and the pages you have visited, as well as products that you have added to your shopping cart.
The use of your personal data
Purpose for the collection of data, in particular personal data, is that we are not able to deliver and process orders without the information collected. We use the information to contact you related to orders, and if you have given us permission for marketing communications, we will send you newsletters, where we'll announce products and special offers only directed newsletter subscribers.
We collect the following types of information:
- The visitor events on the site
- Customer Data
- Data about email messages
Your personal information is used in the following ways:
- Orders
- Customer Service
- Account Administration
- Marketing
- Communicating with you
- Product Reviews
- Store Reviews
- Abandoned cart recovery
Abandoned cart recovery
The abandoned cart recovery function gathers user input from the checkout page even before the user has finished the order process. When the email address field is filled the information is stored in the database and an abandoned cart email is sent to the customer. After the email is sent, all the information is automatically removed from the database.
Sharing The personal information with third parties
We only disclose personal data with our partner which are necessary for the delivery, and customer relationship, order management. In these cases, we follow closely the general EU Data protection Regulation (EU 2016/679). Disclosure of data is limited to the minimum:
- Transport company: When you order products from our store we will disclose your address information to the transport company, so that orders can be delivered.
- Maksupalvelut: Payment Services: We disclose the order details for the current payment provide. Lumingerie Oy uses Paytrail Oy as its payment provider. During the payment process Paytrail collects the customer ip-address, payment method and payment date. You can read the Paytrail Oy data protection leaflet for how they deal with information in connection with payments. https://www.paytrail.com/tietosuojaseloste-paytrailin-maksupalvelu
In addition to the order processing, we may use service providers to process your personal data on our behalf, for instance when sending out newsletters. These service providers have confidentiality clauses and are not allowed to use your personal data for other purposes.
Personal data in our customer relationship management system
We use Klaviyo as out customer management software. The following personal data is stored in the customer relationship management system.
- Site: page events,pages and placed orders
- Customer data: Name and email address
- E-commerce information: information pages, categories and products ordered.
- E-mail correspondence data: information on emails sent through the Klaviyo platform such as delivery, opening, and clicks.
In addition to the analytical purposes described above, we use data personalization, customer segmentation and email automation to those customers who have given permission to do marketing
Klaviyo is a data processor and data controller Lumingerie Oy.
Transferring personal data outside the EU
Data may be transferred outside the European union within the Privacy Shield framework. You can read more about the Privacy Shield agreement here https://www.privacyshield.gov/welcome
Data retention
We will keep certain information you provide, including your personal information, either, as long as your account is existing, or as long as is necessary, so that we can provide you with our services, or (if you have been in contact with customer service) as long as is necessary, so we can keep you up to date related to your support request.
Right of access and correction of data
Customer has the right to have access to the information stored in the registry. Written and signed inspection request must be submitted to the above-mentioned client register the person in charge. Before the release of the data the customer's identity is checked photographic identification or implemented other measures necessary to ensure that the information not be disclosed to any other party, other than the customer himself. If the client detects that the personal data in the register are invalid, incomplete or processed against a register or use of the applicable legislation, the customer may be the above-mentioned email address to ask the controller to correct, change or remove the personal data.
You are also entitled to object or request restriction of the processing of your personal data and you have the right to lodge a complaint with a supervisory authority in accordance with rules defined in General Data Protection Regulation EU 2016/679 (from 25.5.2018 onwards). However, we highly encourage you to work with us in good faith and contact us first.