Privacy Policy

Acnova Oy

---

1. General

This Privacy Policy describes how Acnova Oy processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation.

2. What data we process

We may process the following categories of data:

• First and last name
• Company name
• Email address
• Phone number
• Shipping and billing address
• Order data
• Purchase history
• Messages sent via forms or chat
• Analytics data (where consent is given)
• IP address (hashed for cookie consent logging)

3. Legal bases (GDPR, Article 6)

We process personal data on the following legal bases:

• Performance of a contract (orders, delivery, payments)
• Legal obligation (accounting and tax compliance)
• Legitimate interest (website security, fraud prevention)
• Consent (analytics, marketing, cookies)

4. Analytics (Google Analytics 4)

We use Google Analytics 4 to analyze website usage. Analytics is enabled only after user consent. Before consent, analytics cookies are not loaded. Google Consent Mode v2 is used.

Cookie consent logs are stored for 365 days in a protected form (IP and User-Agent are hashed using a salt).

Provider:

Google Ireland Limited.

5. Payments

Payments are processed via Stripe and Paytrail. Payment providers act as independent data controllers with respect to payment information.

6. Delivery

We use delivery services including PostNord. Personal data is shared only to the extent necessary to deliver your order.

7. Email marketing

Mailings are sent via Odoo. Subscription is voluntary. You can unsubscribe at any time.

8. WhatsApp and communications

We may use WhatsApp Business API (Meta) for communications. Data may be transferred outside the EU in accordance with GDPR transfer mechanisms.

9. Online chat

We use Odoo LiveChat to handle user inquiries.

10. reCAPTCHA

Google reCAPTCHA is used to protect forms.

11. Embedded content

The website may contain embedded content (YouTube, maps) which may collect data when you interact with it.

12. Retention

Order data is retained for periods required by accounting and tax laws. Marketing data is retained until consent is withdrawn. Cookie consent logs are retained for 365 days.

13. Transfers outside the EU

Some service providers may process data outside the EU. Transfers are based on Standard Contractual Clauses and the EU–US Data Privacy Framework (where applicable).

14. Data subject rights

You have the right to:

• Access your personal data
• Request rectification
• Request erasure
• Restrict processing
• Withdraw consent
• Lodge a complaint with the Finnish Data Protection Ombudsman

15. Contact

Acnova Oy

Email:

info@acnova.eu

Phone:

+358 9 424 513 15