top of page

Privacy Policy

Date of drafting: September 12, 2025
Last updated: September 12, 2025

​

This Privacy Policy explains how Mirka Paajanen processes personal data of customers and website users in accordance with the EU General Data Protection Regulation (GDPR).

​

1. Data Controller

Mirka Paajanen
Email: chroniclesrabbitry@outlook.com

​

2. Name of the Register

Customer and Marketing Register

​

3. Purpose and Legal Basis for Processing Personal Data

Personal data is processed for the following purposes:

  • Sale and delivery of products and services, and customer relationship management (contract basis)

  • Payment processing and bookkeeping (legal obligation)

  • Customer communication and possible newsletters (consent or legitimate interest)

  • Monitoring website usage and developing services (legitimate interest, consent for cookies)

​​

4. Personal Data Collected

The following types of personal data may be processed:

  • Basic information: name, address, email address, phone number

  • Payment information: payment transaction details, method of payment, date of payment

  • Customer relationship data: orders, inquiries, customer communication

  • Technical information on website use: IP address, cookies and analytics data (e.g. page views, browser type)

​​

5. Regular Sources of Data

Personal data is collected from:

  • The customer directly, via payment transactions, forms, newsletter subscriptions, or other contact

  • Website usage through cookies and analytics

 

6. Disclosure and Transfer of Data

Personal data may be disclosed only in the following cases:

  • To payment service providers (e.g. PayPal) for processing payments

  • To accounting and auditing service providers

  • To authorities when required by law

Data will not be transferred outside the EU/EEA without ensuring appropriate data protection safeguards.

 

7. Cookies and Analytics

This website may use cookies to facilitate service use, track visitors, and enable targeted marketing. Users can manage cookies in their browser settings.

 

8. Data Retention

  • Payment transaction data is retained for the period required by accounting legislation (typically 6 years).

  • Marketing register data is retained as long as the customer subscribes to the newsletter or until consent is withdrawn.

  • Cookie and analytics data is retained according to the policies of each service provider.

 

9. Rights of the Data Subject

The data subject has the right to:

  • Access their personal data

  • Request rectification or deletion of data

  • Restrict or object to processing

  • Withdraw consent at any time

  • Transfer data to another controller (where processing is based on consent or contract)

  • Lodge a complaint with a supervisory authority (in Finland, the Office of the Data Protection Ombudsman)

 

10. Data Security

Personal data is protected with appropriate technical and organizational measures. Access to the data is limited to individuals who need it to perform their work duties.

 

11. Contact Information

If you have any questions regarding the processing of personal data or wish to exercise your rights, please contact:

Mirka Paajanen
Email: chroniclesrabbitry@outlook.com

bottom of page