Use the discount code LEHMUS-58, orders over 58 euros will be shipped without shipping fee to the nearest pick-up point! (In the Finnish region, cannot be combined with other discount codes)

Lehmus Roastery

Privacy Policy

Version according to the General Data Protection Regulation (679/2016) of the EU

Data Controller:
Lehmus Roastery Oy
Business ID: 2763382-8
Address: Satamatie 6, 53900 LAPPEENRANTA Phone: +358 50 413 9629
Email: arttu@lehmusroastery.com

Person Responsible for Data Protection Matters:
Arttu Muukkonen
Phone: +358 50 413 9629 Email: arttu@lehmusroastery.com

Basis and Purpose of Personal Data Processing:

The legal basis for processing personal data is:

Personal data is used for the delivery, return, and possible contact related to orders in the online store. Additionally, if the customer has consented to email and/or text message marketing, marketing messages may be sent.

Regular Sources of Information: The information entered into the register is regularly obtained from the data subject themselves.

Transfer of Personal Data: Personal data is not routinely disclosed. Therefore, personal data is not transferred outside the EU and the European Economic Area.

However, information may be disclosed to authorities, for example, based on a legal requirement.

Protection of Personal Data: Personal data is stored in the technical infrastructure of the online store, hosted in a cloud service protected by SSL encryption and user-specific credentials. The technical security of the cloud service is managed by Shopify Inc.

Data Retention Period: Data is retained in the online store's database indefinitely. Data is not routinely deleted.

Profiling: The following personal data may be used for targeted marketing: customer's name, customer's date of birth, customer's gender, customer's purchase history, customer's address information, customer's behavior in the online store (e.g., if the customer has abandoned the checkout process, a reminder of the abandoned cart may be sent, or if the customer has browsed certain products, marketing may be targeted for those products).

Rights of the Data Subject:

The data subject has the right to confirmation as to whether or not personal data concerning them is being processed, and, where that is the case, access to the personal data.

The data subject has the right to request the correction of inaccurate and incomplete personal data.

The data subject has the right to request the deletion of personal data when the data is no longer needed for its original purposes or if the processing is unlawful.

The data subject has the right to restrict the processing of their personal data under certain circumstances.

The data subject has the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

This does not apply if the decision is necessary for entering into or performing a contract between the data subject and the data controller or is based on the data subject's explicit consent.

The data subject has the right to receive the personal data concerning them, which they have provided to the data controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.

The national supervisory authority for personal data matters is the Data Protection Ombudsman, operating within the Ministry of Justice. The data subject has the right to lodge a complaint with the supervisory authority if they consider that the processing of their personal data violates applicable legislation.

Contact: For all questions related to the processing of personal data and situations involving the exercise of individual rights, the data subject should contact the person responsible for data protection matters via email at arttu@lehmusroastery.com or by mail at Lehmus Roastery Oy, Satamatie 6, 53900 Lappeenranta