This privacy notice is prepared in accordance with Section 10 of the Finnish Personal Data Act (523/1999).

Date: 13 January 2026

Data Controller: Novacraft Oy
Business ID: 2864981-3
Address: Päkkärintie 6, 29570 Pori
Phone: +358 40 655 1989
Email: asiakaspalvelu(at)novacraft.fi

Purpose of Processing Personal Data

The collected personal data is used for:
Delivering customer orders
Maintaining and developing customer relationships

The register may contain the following information:
Details of the orderer, recipient, and payer
Email addresses
Residential and postal addresses
Phone numbers
Order details
DB Schenker shipment tracking information related to orders

Legal Basis for Processing

Personal data is collected and processed based on:
The customer’s consent, or the performance of a contract between the customer and the company.

Data Retention Period

Personal data is stored for as long as it is necessary for fulfilling the contract with the customer or for developing customer service.

Regular Sources of Data

Directly from the data subject. From public authorities’ registers, within the limits permitted by law.

Regular Disclosure of Data

Personal data is not routinely disclosed to parties outside the company.

Data Security

Electronic data is protected by firewalls, user accounts, and passwords.
Access to personal data is restricted to employees of the data controller who require the data to perform their duties.

Rights of the Data Subject

The customer has the right to inspect what personal data concerning them has been stored in the register. A written and signed request for access must be submitted to the person responsible for data protection matters.

The right of access is free of charge once per year.

The customer has the right to request the rectification or deletion of incorrect or outdated data, or the transfer of data from one system to another. The customer also has the right to restrict or object to the processing of their personal data in accordance with Articles 18 and 21 of the EU General Data Protection Regulation (GDPR).

The customer has the right to withdraw previously given consent for data processing and to lodge a complaint with a supervisory authority regarding the processing of their personal data.

The customer also has the right to prohibit the use of their personal data for direct marketing purposes.

Disclosure of Data to Third Parties

We may disclose certain necessary personal data to third parties to ensure delivery and for marketing purposes.

If required, we may also disclose data to authorities. Where permitted by law, we will inform the customer of such data requests.

Customer data will be deleted upon request. Please note that in some cases not all data can be deleted, as legislation may require certain data to be retained.

Cookie Policy

Our website uses cookies. By clicking the “Accept all cookies” button, you consent to the use of cookies. Cookies make using our website easier, faster, and more user-friendly, and they also help us develop our business.

A cookie is a small text file stored on the user’s device by the web browser. Cookies are placed on the user’s device only by the website requested by the user. Only the server that sent the cookie can later read and use it.

Cookies or similar technologies do not harm the user’s device or files, and they cannot be used to run programs or spread malware. Users cannot be identified solely through cookies.

You may block non-essential cookies, restrict the use of cookies, or delete previously stored cookies via our website’s cookie banner.

Akryylimaali 20 ml, Burnt Umber