Privacy policy

Privacy Policy
Updated: January 20, 2025

Osmia Oy (Business ID: 1560382-4) is committed to protecting the privacy of its customers and processes personal data in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR). This policy explains what information we collect, why we collect it, and how you can exercise your rights.

1. Data Controller

Osmia Oy
Sorvaajankatu 11a, 00580 Helsinki, Finland
Email: osmia@osmia.fi

2. Name of the Register

Osmia Oy Customer and Marketing Register

3. Purpose of Processing Personal Data

Personal data is processed for the following purposes:

  • Customer relationship management: Order processing, delivery, invoicing, and customer service.
  • Marketing: Campaign messages, newsletters, and customer communications.
  • Legal obligations: Such as accounting requirements.
  • Improving website functionality: Anonymous analytics and cookies.

The legal basis for processing personal data is the customer relationship, legal obligations, or consent.

4. Data Collected

For customer relationships:

  • Name
  • Email address
  • Phone number
  • Shipping and billing addresses

For marketing purposes:

  • Name
  • Email address

For analytics and cookies (anonymized):

  • Website usage and browsing data
  • Device identification data

Data collected via the Consentmo tool to comply with GDPR requirements:

  • IP address
  • Email address

5. Data Retention Periods

  • Customer relationship data is retained for the duration of the relationship and up to 5 years after its termination.
  • Marketing data is retained until consent is withdrawn.
  • Anonymous analytics data is retained for 26 months.

6. Rights of the Data Subject

You have the right to:

  • Inspect the personal data we have stored about you.
  • Request correction or completion of your data.
  • Request deletion of your data ("right to be forgotten").
  • Request transfer of your data to another system.
  • Object to the processing of your data.
  • Withdraw consent for marketing.
  • Lodge a complaint with the supervisory authority (in Finland: Data Protection Ombudsman).

You can exercise your rights easily via the Consentmo tool:

  • Update your information
  • Download all data we have stored about you
  • Request a report of your personal data
  • Request the deletion of your data

7. Protection of Personal Data

Personal data is processed confidentially and stored in encrypted electronic form on secure servers. Access to the data is restricted to Osmia’s staff and contract partners who process the data under confidentiality agreements.

Personal data is disclosed to:

  • Osmia employees
  • Payment processors (for handling payments)
  • Logistics companies (for deliveries)
  • Accounting firms (for bookkeeping)
  • IT service providers (for website maintenance)

No data is transferred outside the EU/EEA.

8. Cookies and Analytics

The website uses cookies and Google Analytics:

  • Cookies track website usage and enhance the user experience.
  • Google Analytics data is anonymized and not linked to other registers.

You can block cookies via your browser settings or download the Google Analytics Opt-out add-on.

9. Contact and Updates

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

We reserve the right to update this policy as needed. The updated version will be available on our website.