Privacy policy

Last updated: March 2026

1. Data controller

HNKO tmi
Business ID: 3353251-3
VAT: FI33532513
00400, Helsinki, Maria Jotunin tie 10-101
Email: info (at) hnko.fi
Country of establishment: Finland

We act as the data controller for personal data collected through this website.

2. What personal data we collect

We may collect and process the following categories of personal data:

Name
Billing and shipping address
Email address
Phone number
Payment information (processed by payment providers)
Order history
IP address
Device and browser information
Marketing preferences
Website usage data (via cookies and analytics tools)

3. Purpose and legal basics for processing

We process personal data for the following purposes:

Order Processing

Legal basis: Performance of a contract

Processing orders
Payment handling
Delivery
Customer support

Legal Compliance

Legal basis: Legal obligation

Accounting and tax obligations

Marketing Communications

Legal basis: Consent

Newsletter and promotional emails
You may withdraw consent at any time.

Website Analytics and Improvement

Legal basis: Legitimate interest and/or consent

Improving website performance
Measuring marketing effectiveness

4. Payment processing

Payments are processed by third-party payment service providers such as:

Shopify Payments
Klarna
PayPal

These providers act as independent data controllers for payment data and process personal data in accordance with their own privacy policies.

5. Shopify hosting

Our store is hosted by Shopify Inc.

Shopify processes personal data in order to provide the e-commerce platform. Personal data may be transferred outside the European Economic Area (EEA), including to Canada and the United States, subject to appropriate safeguards such as Standard Contractual Clauses where required by applicable law.

6. Analytics and tracking

We use:

Google Analytics
Meta (Facebook) Pixel

These tools collect information about website usage, device data, and browsing behavior.

Where required, cookies are used only with your consent.

7. Data retention

We retain personal data only for as long as necessary:

Order data: as required by accounting and tax laws
Marketing data: until consent is withdrawn
Analytics data: according to tool-specific retention settings

8. Your right under GDP

You have the right to:

Access your personal data
Rectify inaccurate data
Request erasure (“right to be forgotten”)
Restrict processing
Object to processing
Data portability
Withdraw consent at any time

You may exercise your rights by contacting: info@hanko.fi

If you believe your rights have been violated, you may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

9. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction.