Privacy policy
Last updated: October 10, 2026
Privacy policy
1. Data Controller
• Name: T:mi Art Studio Elise (Business ID: 1360805-8)
• Address: Ruukinrannantie 19, 02600 Espoo, Finland
• Email: info@artstudioelise.com
• Phone: +358 503377569
2. Contact Person for Register Matters
• Name: Elise Perttula
• Contact details: Same as the data controller above.
3. Name of the Register
• Art Studio Elise Customer Register
4. Legal Basis and Purpose of Processing Personal Data
In accordance with the EU General Data Protection Regulation (GDPR), the legal basis for processing personal data is the legitimate interest of the data controller (customer relationship management).
The purpose of processing personal data is to communicate with customers and maintain customer relations.
5. Data Content of the Register
The following information may be stored in the register:
• Person's name and contact details (phone number, email address, physical address)
• Usernames/profiles on social media services
• Information regarding ordered services and changes to them
• Billing and invoicing details
• Other data related to the customer relationship and orders
6. Regular Sources of Information
The data stored in the register is obtained directly from the customer when they place an order via the online store, email, or social media platforms.
7. Regular Disclosures and Transfer of Data Outside the EU or EEA
Data is not disclosed to third parties, except when required by official authority requests.
Data is not transferred outside the EU or the EEA, except when required by official authority requests.
8. Principles of Register Protection
The processing of the register is carried out with due diligence, and data processed through information systems is appropriately secured. When register data is stored on internet servers, the physical and digital security of the hardware is managed appropriately.
The data controller ensures that stored data, server access rights, and other information critical to the security of personal data are handled confidentially and only by employees whose job description requires it. Digitally processed data is protected by firewalls, passwords, and other technical security methods. Manually maintained materials are kept in locked premises with access restricted to authorized personnel only.
9. Data Retention Period
Personal data is retained in the register for as long as it is necessary for managing the customer relationship or fulfilling orders. Data required for accounting purposes (such as invoicing details) is retained for the period mandated by the Finnish Accounting Act (6 years from the end of the calendar year in which the financial year ends).
10. Rights of the Data Subject
In accordance with the GDPR, you have the following rights regarding your personal data:
• Right of access: You have the right to request a report on what personal data we have stored about you.
• Right to rectification or erasure: You can request the correction of incorrect or outdated data, or the deletion of your data ("right to be forgotten"), unless legal obligations (such as accounting laws) prevent us from doing so.
• Right to restrict or object to processing: You have the right to limit or object to the processing of your data when the processing is based on legitimate interest.
• Right to lodge a complaint: If you believe your data is being processed in violation of data protection laws, you have the right to file a complaint with the Data Protection Ombudsman (Tietosuojavaltuutettu).
All requests regarding these rights must be sent in writing to the data controller's email address listed in Section 1.