Brick Borrow Finland | Privacy Policy

SUMMARY

Lainapalikka Suomi Oy is a Finnish company providing and maintaining Brick Borrow service (“Service”) though its website at www.brickborrow.fi. Brick Borrow service is LEGO® set borrowing service that makes building with LEGO® sets fun, easy, and accessible. In order to serve our customers, as well as to market and develop our services, we collect the necessary information about our customers. We consider data protection to be of utmost importance and comply with the applicable data protection legislation and official guidelines in the processing of personal data.

Customer and marketing registers of Lainapalikka Suomi Oy mainly include the basic contact details provided by you as a user of the Service. The processing of this data is based on the agreement for providing the Service, our legitimate interest in customer relationship or customer acquisition, or your consent. The information is used to provide and maintain the borrowing service, manage the customer relationship, and borrowing process. We do not share your data with external parties, but it may be processed by trusted service providers on our behalf.

Please take a moment to review this Privacy Policy, where we explain what data we collect, how we use it, and what rights you have regarding your personal data. If you have any questions about our privacy practices or wish to exercise your rights, you can contact us by email, phone, or post.

Controller’s contact details in privacy matters:

Lainapalikka Suomi Oy
Onnelantie 14 A
90230 Oulu
Email info@brickborrow.fi
Phone: +358 45 78312018

1. What personal data we collect and how we collect it

We collect your information when you register for our Service, place an order, use our services or website, visit our office, or interact with us in other ways. We do not collect sensitive personal data. The information we collect includes basic details such as:

• Name
• Address
• Email address
• Phone number
• Order and rental history
• Favorite sets
• Feedback
• Marketing preferences (such as opting out of direct marketing)

Payments are processed by Stripe Payments Europe, Ltd., which collects your payment card details directly through a secure feature embedded in our Service. Lainapalikka Suomi Oy does not collect or store your payment card information.

We may also automatically collect certain technical information from your computer or mobile device when you use our website. This may include your IP address, city-level location, operating system, browser, device type and settings, and how you use our services (such as pages you visit). Most automatically collected information is stored only temporarily. You can disable cookies in your browser settings if you prefer. For more details, please see Section 9 of this Privacy Policy.

2. How we use your personal data and the legal basis for processing

We may use your personal data to manage customer relationships, communicate with you, provide our services, process reservations and rentals, handle billing, perform analytics and statistical purposes, and provide targeted advertising and marketing. Marketing messages related to the Service may be sent unless you have opted out.

The primary legal basis for processing your personal data is the contract made when you order the Service. We may also process your data based on your consent provided when registering for the Service, or on our legitimate interest in managing the customer relationship and targeting marketing.

3. Who processes your personal data

Your personal data is processed by employees of Lainapalikka Suomi Oy whose duties relate to customer relationship management, service delivery, sales, marketing, or administration. Our staff are trained in secure data handling, and each staff group processes data only to the extent necessary for their work duties.

We also use trusted service providers who may process your personal data on our behalf. These providers offer services such as payment processing (Stripe Payments Europe Ltd), postal and parcel delivery (Posti Group Oyj), e-commerce platform services (Wix.com Ltd), IT and data processing services, analytics, and opinion or market research services. Service providers are not permitted to use your personal data or disclose it for any other purpose than providing services on our behalf. All service providers we use comply with GDPR and other applicable legislation.

4. Transfers of personal data outside the EU/EEA

Your personal data is primarily processed within the European Union. However, we also use non-European service providers, in which case your personal data may be transferred outside the EU/EEA. To protect your data and your rights, transfers are made only based on a valid legal transfer mechanism.

The primary transfer mechanism is a European Commission adequacy decision, which allows data to be transferred to a country outside the EU. For U.S.-based service providers we use, we require that they are certified under the EU-U.S. Data Privacy Framework and committed to complying with the EU GDPR. More information about the EU-U.S. Data Privacy Framework can be found here: https://www.dataprivacyframework.gov/s/

5. Sharing personal data with third parties

We do not sell your personal data and only disclose it as described in this Privacy Policy. All data sharing complies with applicable data protection legislation.

If we decide for strategic or other business reasons to sell or transfer our business, in whole or in part, we may transfer the personal data we have collected and retained, including customer data containing personal data, to any party involved in the sale or transfer.

We may also disclose personal data if we consider it necessary under applicable law, regulation, or upon request by an authority.

6. How we protect your personal data

Your data is stored in an electronic register, and appropriate measures have been taken to protect your personal data. Personal data is protected against unauthorized access, accidental or unlawful destruction, alteration, disclosure, transfer, or other unlawful processing. Accessing and processing the register requires user authentication and a secure connection. Access is allowed only to designated personnel whose duties include system or customer management.

7. How long we keep your personal data

We retain your personal data only as long as necessary for the purposes described in this Privacy Policy, unless longer retention is required or permitted by law. We delete your personal data when our contractual relationship ends, when you withdraw your consent, or if there is no longer a basis for processing your personal data.

8. Your rights as a data subject

You have the right to access, correct, delete, or supplement your personal data. You also have the right to exercise all other rights provided by data protection legislation, such as the right to restrict or object to processing, and the right to transfer data to another system.

To ensure secure identification, in some cases we may require requests to be made in person at our premises or via a signed letter including appropriate identification details. We will respond to access requests in writing.

You also have the right to object to the use of your personal data for direct marketing, distance selling, or other marketing purposes. If you have given us permission to send marketing messages, you can later withdraw it following the instructions included in the messages.

We aim to resolve any questions regarding the processing of personal data directly with you, respecting all your rights. If you are not satisfied with our processing, you have the right to contact the data protection authority.

9. Cookie Policy

Our Site uses cookies or similar technologies. Cookies are text files containing small amounts of information which are downloaded to your device when you visit a site. Cookies are then sent back to the originating site on each subsequent visit, or to another site that recognises that cookie. You can find more information about cookies at: www.allaboutcookies.org

Our Site uses the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential in order to enable you to move around the Web Site and use its features, such as accessing secure areas of the Site or keeping selected toys in your shopping cart. Without these cookies, services like enabling appropriate content based your type of device cannot be provided.
• Performance Cookies: These cookies collect information about how visitors use the Site, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. The information these cookies collect is aggregated and used to improve how the Site works.
• Functionality Cookies: These cookies allow the Site to remember choices you make (such as your language or the region you are in) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. These cookies cannot track your browsing activity on other websites.
• Social Media Cookies: These cookies are used when you share information using a social media sharing button on the Site. The social network will record that you have done this. This information may be linked to targeting/advertising activities.
• Targeting/Advertising Cookies: These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaigns. They are usually placed by advertising networks with our permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers.

In order to place cookies on your device, we require your consent, which we will obtain when you first visit our Site. If you don’t want to allow cookies at all, or only want to allow the use of certain cookies, refer to your browser settings. You can also use your browser settings to withdraw your consent to our use of cookies at any time and delete cookies that have already been set. You should consult with your browser's provider/manufacturer if you have any questions regarding disabling cookies. Note that by rejecting or disabling certain categories of cookies, you may be prevented from accessing some features of our Site or certain content or functionality may not be available.

To opt out of Google Analytics, please visit:
https://tools.google.com/dlpage/gaoptout

If you'd like to opt out of third party cookies relating to behavioural advertising, please go to www.youronlinechoices.eu. Opting out does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver ads tailored to your web preferences and usage patterns.

10. Changes to the Privacy Policy

We may update this Privacy Policy and our data protection practices from time to time. If the changes are significant, we will notify you on our website, in Service or by other means, such as by email. We hope you will check this privacy policy regularly to stay up-to-date on our privacy practices.