Privacy Policy

Personal Information, Records, and Cookie Usage

We collect personal data about our customers and users of our website when you register as a user, subscribe to our newsletter, make purchases in our online store, or otherwise use our services. We also collect data when you participate in our campaigns, competitions, or customer and opinion surveys, register for events organised by Lautapelit.fi, provide feedback, or contact our customer service. In social media, we process personal data only when you actively share, post, or send us a message, for example in connection with customer service. We may also process contact details of representatives of business customers and other stakeholders when they communicate with us on behalf of their organisation.

The personal data we collect depends on how you use our services and what information you choose to provide. Most of the information is received directly from you, for example when you place an order in our online store, subscribe to our newsletter, register an account, participate in a campaign, or contact our customer support. We also collect information through cookies and similar technologies to understand how our website is used and to improve our services. We process contact information such as your name, address, email address, and telephone number when needed to handle orders, deliveries, customer communication, or other services. When you make purchases, we process payment and billing information to the extent required to complete the transaction and to fulfil legal obligations. Information related to the customer relationship—such as orders, feedback, complaints, and related communication—is stored to ensure proper service and accurate handling. If you interact with us as a representative of a company or organisation, we also process information related to your professional role and your organisation’s contact details when necessary for cooperation or contractual purposes. In connection with campaigns or competitions, we process the information you provide when participating. Technical data gathered through cookies, such as browser behaviour, website usage, and visitor statistics, helps us maintain and develop our online services, but is not used to identify individual users without your consent. In most cases, you may decide what information you share with us, but certain services—such as placing an order or handling a complaint—require specific personal data so that we can provide the service properly.

We collect information about the use of our website through cookies and similar technologies. A cookie is a small file stored in your browser that allows the site to function correctly and recognise the browser between visits. We use cookies primarily to ensure the technical operation of the website, enable the shopping cart and user session, and support the usability and development of our services. We also use cookies to analyse website traffic and better understand how our services are used. Cookies may be necessary for the website to function, or used for analytics. For any cookies that are not strictly necessary, we request your consent, which you may accept or decline at any time. You can also manage cookies through your browser settings. Blocking cookies may affect the functionality of the website and the operation of the shopping cart.

We process personal data primarily to provide our online store and other services, as well as to fulfil orders and contractual obligations. Your data is needed, for example, to deliver products, handle payments, provide customer service, and communicate in connection with your orders. We also process data when necessary for the development of our business, to maintain the functionality and security of our services, or based on our legitimate interests. In some situations, processing is required to comply with legal obligations, such as accounting or consumer protection laws. In some cases, we may request your consent—for example, when sending newsletters or other electronic direct marketing. You may withdraw your consent at any time, but this does not affect the lawfulness of processing carried out before the withdrawal. We also process information in customer service situations, such as handling feedback and complaints, to respond to your inquiries and resolve issues appropriately. We use the data we collect to maintain and develop our services, analyse website performance, and plan our business activities. Technical information collected via cookies is used for purposes such as monitoring website performance and compiling visitor statistics, but not for identifying individual users without consent. We combine data only when necessary for providing our services or managing the customer relationship, and we ensure that processing remains appropriate and limited to the purposes we have described.

We retain personal data only for as long as necessary to fulfil the purposes described in this privacy notice. Retention periods depend on the type of data collected and the purpose for which it is used. For example, order and payment-related information is retained for the period required by accounting legislation, while customer service communications are stored only as long as needed to handle the relevant matter. When data is no longer required, we delete it or anonymise it so that it can no longer be linked to an identifiable person. In some cases, longer retention may be necessary to manage legal claims or comply with other statutory obligations, and in such cases data is processed only for those specific purposes.

Your personal data is processed within Lautapelit.fi Oy and, when necessary, also by other companies within our corporate group when required for our operations or to provide our services. We also use external service providers for technical operation, such as payment and logistics partners, IT service providers, and marketing communication providers. These partners process personal data only according to our instructions and solely for the purposes for which the data has been provided. We ensure through agreements that partners do not use data for their own purposes and that they comply with applicable data protection laws. We may disclose data to authorities when required by law or official order, for example to investigate crime or fulfil legal obligations. If our business is subject to a corporate transaction, personal data may be transferred to parties involved, always in accordance with data protection legislation. We ensure that all disclosures are handled confidentially and only to the extent necessary. We do not sell personal data to third parties, nor do we disclose it unnecessarily or for purposes unrelated to our services or legal obligations.

Personal data may be processed outside the EU or EEA when we use service providers whose servers or technical support are located in so-called third countries, such as the United States. This may occur in connection with electronic communications, technical website maintenance, or payment services. Such transfers always take place only when necessary to provide the service. If personal data is transferred outside the EU or EEA, we ensure that the safeguards required by the GDPR are in place, such as the use of European Commission Standard Contractual Clauses or the existence of an adequacy decision. We guarantee that your data is processed securely and confidentially regardless of where it is technically handled.

You have several rights that allow you to influence how your personal data is processed. You may at any time prohibit the use of your data for direct marketing, such as newsletters, and withdraw previously given consent by contacting us. A direct marketing opt-out does not affect necessary customer communication related to, for example, orders placed in our online store. You have the right to know what personal data we process, to request access to your data, or to receive confirmation of whether we process it at all. You may request the correction of inaccurate or incomplete data, and in certain situations you may request restriction of processing—for example, while we verify the accuracy of the data. You may also request the deletion of your data when it is no longer needed for the purposes for which it was collected, or when processing is based on consent and you wish to withdraw it. We cannot, however, delete data that is still required for fulfilling your orders or complying with legal obligations. In some cases, you may also have the right to receive the data you have provided in a structured, commonly used and machine-readable format for transfer to another controller, where legally applicable. If we process your data based on legitimate interest, you have the right to object to the processing due to reasons relating to your particular situation, and such requests will be assessed case by case. You can exercise your rights by contacting us at info@lautapelit.fi

The controller responsible for processing your personal data is Lautapelit.fi Oy (Helsinki, Finland). Distribution and orders for customers in other Nordic countries are handled by Lautapelit.fi Oy’s subsidiary Spilbraet.dk (Denmark). If you interact with us from outside the Nordic countries or through Spilbraet.dk, your personal data may also be processed by Spilbraet.dk when necessary for providing the service. All processing of personal data is carried out in accordance with our established data protection practices.