Privacy policy

Updated on the 12 day of the March 2024

Laine Publishing Oy is committed to protecting the privacy of our customers and website visitors. It is important to us that you know what personal data we collect, how the collected data are used, and how you can influence the processing of personal data. In this privacy policy, we explain how Laine Publishing Oy (hereinafter referred to as "Laine") processes personal data. Below, you can find more detailed information, including:

  • What personal data do we collect?
  • For what purpose do we use personal data?
  • How long do we retain personal data?
  • Who can process personal data and to whom are they disclosed?
  • How are personal data protected?
  • How do we use cookies?
  • How can you influence the processing of personal data?
  • Changes to the privacy policy


Data Controller:
Laine Publishing Oy
Business ID: 2827203-2
Address: Finlaysoninkatu 7, 33210 Tampere, Finland
hello@lainepublishing.com

1. What personal data do we collect?

We process personal data only to the extent necessary to enable the purposes described in section 2 below.

We typically process the following information:

  • Customer information, such as name, address, email address, phone number.
  • Order information, such as order, delivery, and return details, and purchase history.
  • Registration information and information about customers logged into their accounts, such as registration date, username, login details, and other information related to customer accounts.
  • Behavioural information, such as data collected through cookies about the user's device and website usage, including activities on our website (browsing product pages, adding products to the shopping cart, selections made, and searches performed, as well as information about how and from where the user accessed our website), and device information such as the browser used and its settings, IP address, language settings, and geographical location of the device.
  • Information related to email marketing, such as data on the delivery, opening, clicking, or other actions related to email messages.
  • Permission and consent information, such as information about marketing permissions and other permissions and consents given for the processing of personal data.
  • Customer service information, such as communication with customer service.

2. For what purpose do we use personal data?

We process personal data for the following purposes:

  • Delivery of products and services and customer service: We use personal data for order processing and delivery. We cannot deliver products or services, or communicate with you regarding matters related to an agreement, enable logging into a customer account, or provide customer service without processing personal data. This processing is based on the agreement made with you.
  • Marketing: We use personal data for marketing purposes as described in more detail below:
  • If you have consented to marketing communication and provided us with your phone number, postal address, or email address, we will use this information to send marketing messages via text message, postal mail, or email.
  • If you have consented to email marketing, we will use personal data to send newsletters. You can unsubscribe from our newsletter using the unsubscribe link provided in the newsletter.
  • If you have added products to your shopping basket in our online store, we may send you a reminder via email about your incomplete order so that you can easily continue your shopping from where you left off. This processing is based on legitimate interest.
  • If you have consented to targeting cookies, we will display ads on other websites for our products that we believe may interest you based on your use of our website. We use partners and their publishing platforms for remarketing. Remarketing is based on cookies and similar technologies, which you can read more about in section 7.
  • Based on your purchases in the online store, we may recommend products to you, for example, via email. This processing is based on a legitimate interest based on the customer relationship.
  • Product development: Responses given in surveys and research are Laine's way of ensuring what features are desired in our services and which products and services interest you. This processing is based on Laine's legitimate interest, which you can oppose as described below.
  • Contests and giveaways: We may process personal data in the context of a contest or giveaway to draw or select a winner. This processing is based on your consent provided or Laine's legitimate interest.
  • Product reviews: We may ask you to review the products you have ordered. The review may be published with your first name and the initial of your last name alongside the product you ordered on our online store. The provided product reviews may be used in Laine's marketing communication. This processing is based on your consent, which you can withdraw at any time.
  • Business development: We process order information and website visitor data for business analysis and development purposes. We strive to ensure that individuals cannot be identified from the reports. This processing is based on legitimate interest.
  • Security and prevention of abuse: We process data to ensure security. From time to time, we need to use data for investigating abuses. This processing is based on legitimate interest.
  • Legal obligations: We process personal data to fulfil our mandatory legal obligations, such as in accounting.

To the extent that the processing is based on legitimate interest, we consider that the processing is beneficial both to us and to the data subjects. Considering the nature and purpose of the data, we believe that the processing is not in conflict with the fundamental rights and freedoms of the data subjects. You can oppose processing based on legitimate interest as described in section 8.

We do not make automated decisions that would have legal effects or otherwise significantly affect you.

3. How long do we retain personal data?

Personal data are processed only for as long as necessary to fulfil the processing purposes described in section 2 above. Typical retention periods are as follows:

  • We process personal data for 48 months from the date of the last order, newsletter opening, or login to the digital account;
  • We process information of new potential customers for marketing purposes as long as you have not prohibited or withdrawn consent to receive marketing messages or calls. However, we retain information about your marketing preferences and the contact details to which the prohibition applies to effectively comply with it.
  • We process information related to invoices for approximately seven years to comply with legal obligations.
  • We may retain information if we consider retention necessary for the preparation, prevention, or defence of a legal claim.


4. Who can process personal data and to whom are they disclosed?

At Laine, personal data are processed only by individuals who are authorized to do so as part of their job responsibilities. Third parties process your personal data in the following situations:
Transfers of personal data to service providers acting on behalf of Laine (data processors):

  • We use an external service provider, for example, for sending email marketing, presenting personalized offers, and enabling product reviews. The transfer and processing of personal data to third parties are governed by agreement.

Transfers of personal data to third parties (independent data controllers):

  • During order delivery, we may transfer the necessary personal data, such as the name, address, and phone number of the recipient, to the delivery company for the purpose of order delivery;
  • In processing payments for orders in the online store, we may use an external service provider based on your chosen payment method, in which case you will be redirected to a third-party website. In such cases, the terms of the third-party website apply. Laine does not store payment information, such as credit card details.
  • We may be required to disclose personal data to authorities based on laws or regulations.
  • We may disclose personal data in connection with corporate transactions, such as in the event of a sale, merger, or other restructuring of our business.
  • We may disclose your personal data to third parties if it is necessary to fulfil a contract, collect debts, investigate potential breaches, or prepare, present, or defend against legal claims.
  • With your consent, we may disclose personal data to selected partners of Laine.

Additionally, Laine may disclose personal data and/or act as a joint controller with a third party when, for example, it maintains a page on Facebook or utilizes functionalities of Meta or similar services, especially concerning targeted advertising. Users can obtain further information about the processing of personal data from Meta's privacy description.

  • Laine and Laine's suppliers and partners primarily process personal data within the EU/EEA area. Personal data transfers outside the EU/EEA are ensured with appropriate safeguards, such as commission-approved standard contractual clauses or through the EU-U.S. Data Privacy Framework.

5. How are personal data protected?

Laine ensures the protection of personal data through appropriate security measures. We have implemented protective measures such as restricted access rights, training for personnel involved in the processing of personal data, and careful selection of subcontractors to ensure that personal data is not altered, lost, or destroyed, and that unauthorized access is prevented.

6. How do we use cookies?

We may automatically collect information about the user's device through server logs and the use of cookies and similar technologies. Cookies are short text files that are stored in the user's browser when visiting a website. Cookies often contain an anonymous, unique identifier that allows us to identify and count the browsers visiting our site.

We automatically collect, among other things, the following information:

  • usage and browsing data of the service features
  • page from which the user has been redirected to our pages
  • device model
  • browser and browser version
  • IP address
  • session time and duration
  • screen resolution and operating system
  • unique device and/or cookie identifier

So-called first-party cookies are set by the website visible in the address bar. In addition to these, our services use so-called third-party cookies, such as those provided by measurement and tracking service providers, as well as social media services. Up-to-date information on the partners we currently use can be found in the website's cookie settings.

We use both session and persistent cookies. Session cookies expire when the user closes the web browser. Persistent cookies remain on the user's device for a certain period of time or until the user deletes them. The expiration period of persistent cookies typically varies from a few months to a few years.

Some cookies are essential for the operation of our website. They enable various functionalities such as login and making purchases in the online store. These cookies are always active.

In addition to essential cookies, we use cookies based on user consent for the following purposes:

  • Functional/personalization cookies: These cookies enable the website to improve functionality and personalization. We may set them ourselves or third-party service providers whose services we have added to our pages. If the user does not allow these cookies, some or all of these services may not function properly.
  • Performance cookies: These cookies allow us to track and improve the performance of our website. They enable us to, for example, count visits, identify traffic sources, and see which parts of the site are most popular. If the user does not allow these cookies, our ability to improve our service to better serve the user may be impaired.
  • Advertising targeting cookies: Third parties may set these cookies on our website. These companies may use them to build a profile of your interests and show you relevant ads on other sites. If the user does not allow these cookies, they may see less relevant advertising.

You can influence the processing of data through cookies in Laine's cookie settings, which can be found in the website's footer under "cookie settings". In the cookie settings, you can give consent to cookies, withdraw consent, or choose not to give consent.

We remind you that essential cookies are always active. By blocking essential cookies from your browser settings, our website will not function properly, and the user will not be able to log in or complete an online purchase.

7. How can you influence the processing of personal data?

Below, we describe how you can influence the processing of your personal data. You can exercise your rights by contacting Laine's customer service via email at hello@lainepublishing.com and providing sufficient information so that we can identify you personally.

Right to access information

  • You have the right to obtain confirmation of whether we process data concerning you and to access the information we process about you.
Right to rectification
  • You have the right to request us to complete or correct any inaccurate, incomplete, or outdated personal data.

Right to erasure

  • You have the right to request the deletion of your data in certain situations. In such cases, we will delete all personal data concerning you unless we have a legal obligation or other legitimate grounds for retaining the data.

Right to restriction of processing and right to object to data processing

  • You always have the right to object to marketing based on legitimate interest. Additionally, you can object to other processing based on legitimate interest on grounds relating to your particular situation. For example, in such a situation, the processing will be restricted while the grounds for objection are being assessed. Processing may also be restricted, for instance, when you dispute the accuracy of your personal data, in which case processing will be restricted until we can verify the accuracy of the data. If there is a significant and legitimate reason for processing that overrides the rights and freedoms of the data subject, or if processing is necessary for the establishment, exercise, or defence of legal claims, we will contact you to continue processing the data.

Right to data portability

  • If we process your personal data based on your consent or an agreement, you have the right to request the transfer of your data to another system. In this case, we will provide you with your personal data in a machine-readable format for yourself or a third party you specify.

Right to lodge a complaint with a supervisory authority

  1. You have the right to lodge a complaint with a supervisory authority if your personal data has been processed in violation of this privacy policy or legislation. The contact information for the supervisory authority can be found at www.tietosuoja.fi

Right to withdraw consent

  • If the processing of personal data is based on consent, you have the right to withdraw your consent at any time. For example, you can withdraw your consent for receiving newsletters by using the link provided in the newsletter or by contacting our customer service via email at hello@lainepublishing.com.

8. Changes to the privacy policy

As our services evolve or as legislation or regulatory guidelines change, we may update this privacy policy. We recommend reviewing our privacy policy from time to time.

We updated the privacy policy originally published on August 1, 2022, on March 12, 2024, among other things, by specifying the personal data processed by Laine and the purposes of data processing, the retention periods of personal data, cookie processing, and data transfers.