Privacy policy

Privacy Policy


Controller of the register

Smaku Events Oy, Rintamamiehentie 14, 06100 Porvoo

Company ID 2946825-6



Contact person

Laura Pulkkinen



Name of the register

Smaku Events Oy’s website and online store customer and marketing register.



Purpose of the register

Maintaining Smaku Events Oy’s customer register, archiving and processing customer orders, managing and maintaining customer relations, informing about our services and developing and managing the online store. The information can be used for operational development and for statistical purposes. Personal data is processed within the limits permitted and required by the Personal Data Act. We do not use the data for automatic decision-making or profiling.



Basis for keeping the register

The person has registered in Smaku Events Oy’s online store ( or, bought products there or joined the mailing list.



The register contains at most the following information:

-customer’s first and last name


-telephone number

-email address

– information about orders

-answers to questions asked of the data subject in various campaigns or polls


The register contains only the information that the person himself has given us.



Registry protection

The information in Smaku Events Oy’s customer register can only be accessed by the company’s own staff or other persons who have the right to do so due to their work. All users of the register are bound by a duty of confidentiality. The register is in electronic form, and the related databases are protected against external data breaches by firewalls, passwords and other technical means.



Right of inspection, prohibition and correction



Right of inspection

The registered person can check the personal data we have stored.



Right to rectification of data

The registered person can ask to correct incorrect or incomplete information about him.


Right to object

The registered person can object to the processing of personal data if he feels that the personal data has been processed unlawfully.


Ban on direct marketing

The registrant has the right to prohibit the use of data for direct marketing.



Right of deletion

The registered person has the right to request the deletion of data if data processing is not necessary. We process the deletion request, after which we either delete the data or provide a justified reason why the data cannot be deleted.

It should be noted that the controller may have a statutory or other right not to delete the requested information. The registrar is obliged to keep the accounting material in accordance with the period (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, accounting-related material cannot be deleted before the deadline expires.



Withdrawal of consent

If the processing of the data subject’s personal data is based only on consent, and not on e.g. customership or membership, the data subject can withdraw the consent.

The registered person can appeal the decision to the Data Protection Commissioner

The registered person has the right to demand that we limit the processing of disputed data until the matter is resolved.



Right of appeal

The registered person has the right to file a complaint with the data protection commissioner if he feels that we violate the current data protection legislation when processing personal data.

Contact information of the data protection officer:



Regular data transfers

As a general rule, information is not disclosed outside of Smaku Events Oy for marketing purposes.

We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers:

– accounting office

– payment service broker Bambora PayForm

-web design company Haven Porvoo

Data is not transferred outside the EU.



Duration of processing

As a general rule, personal data is processed as long as the customership is valid.