This page describes what happens to your personal data when you order a part from us.
Placing an order generates the following data:
We do not process card numbers. The payment is handled by Stripe, and the card details are never transmitted to our systems.
Data is disclosed only to the extent needed to deliver the order:
The shop, its database and the email delivery all run inside the EU/EEA: Hetzner in Germany and Mailgun's EU region. Two recipients can transfer data to the United States. Stripe (our contract is with Stripe Payments Europe, Limited, Ireland) may transfer payment data to Stripe, Inc., and Microsoft (Outlook) may transfer mailbox content to Microsoft Corporation. Both transfers rely on the European Commission's standard contractual clauses and on the recipients' certification under the EU-US Data Privacy Framework.
Order and accounting data is kept for six years from the end of the accounting period, as required by the Finnish Accounting Act. Customer service messages are kept for two years from the last message. Analytics data collected with your consent is kept for 14 months. Data no longer needed is deleted.
You have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing and to receive your data in a machine-readable form. Requests go to finvaraosa@outlook.com.
You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
The shop always uses the cookies it needs to work:
With your consent we also use Google Analytics and Google Ads cookies to measure which advertisement led to a purchase. They are set only after you accept them in the banner; before that, and if you decline, no measurement cookie is written and Google receives no identifiers.
The choice is stored for the whole of finvaraosat.fi, including the checkout at kauppa.finvaraosat.fi, so you are asked once. You can change it at any time from the “Cookie settings” link in the footer. Google Ireland Limited acts as the processor, and data may be transferred outside the EU under the EU–US Data Privacy Framework.
Last updated 20 August 2026