Antaisin.fi
Cart
Menu

Privacy policy

In effect from 16 September 2026.

This English version is a translation of the Finnish privacy statement. The Finnish version is the original version.

This statement describes what personal data the Antaisin.fi online shop processes, for what purpose, for how long, and to whom data is disclosed.

Controller and contact

Antaisin Oy
Y-tunnus 3180375-4
Viereläntie 4 A
90630 Oulu
asiakaspalvelu@antaisin.fi
+358 44 280 9861

We have not appointed a data protection officer. In data protection matters you can contact customer service at the email address above.

What data we process and why

Order and delivery. Name, email address, phone number, company, delivery and billing address, the contents and amounts of the order, and any gift wrapping message and order note. These are needed to process and deliver the order, for customer service, and for handling withdrawals and returns.

Payment. Payment confirmation, the chosen payment method and the payment service's transaction reference. We neither receive nor store card details: payment takes place in the Visma Pay service.

Consent for digital content. If the order contains digital products delivered immediately, we store the text of the consent as it was shown, its version, the order lines and product names it covered, the time, and the IP address. This is the evidence that delivery began at your request and that you accepted the ending of the right of withdrawal.

Country information for taxation. The order stores the billing country, the delivery country when the order has a delivery address, and a country code derived from the IP address. The raw IP address is not stored with this information.

Download links and gift cards. The identifiers of download links and gift card codes are stored only in one-way protected form. The readable value exists only in the message sent to you. In the sending queue such messages are encrypted.

Customer account. If you create an account, we process your email address, login links and the orders linked to the account. The account has no password: logging in uses a single-use link valid for 15 minutes.

Back-in-stock notice. When you ask to be told about a product that has run out, we store your email address, the product and the language of the page. We send one message when the product is available again and delete the request at the same time.

Contact and quote request forms. Name, email address and the content of the message.

Marketing permission. If you permit marketing messages, we store the permission, its terms version and the time. The permission is not pre-selected and is not a condition of purchase, and a withdrawal is stored as new data.

Order reminder. The shop has a feature that can send one reminder about an unfinished order to the address given in the order. The feature is not in use.

We do not carry out automated decision-making or profiling.

Performance of the contract: processing the order, delivery, delivering digital content, the customer account, and handling withdrawals and returns.

Legal obligation: accounting and taxation, and consumer-law evidence such as the digital delivery consent and withdrawal notices.

Consent: marketing messages, the click map which requires analytics consent, and the video embed which requires marketing consent. Consent can be withdrawn at any time.

Legitimate interest: cookieless visitor statistics and preventing misuse. The balancing: the statistics use no cookies and the identifier cannot be connected to you for longer than a day, the data is not disclosed to third parties and is not used to target marketing, and improving how the shop works is not possible without knowing where buying is interrupted. You can object by contacting customer service, and a Global Privacy Control or Do Not Track signal from your browser prevents recording automatically.

Visitor statistics and the click map

Visitor statistics are server-side and cookieless. No third-party analytics script is placed on a public page.

The statistics record the pages and actions of a visit, such as adding to the cart, a checkout field that was left invalid (the name of the field, not its contents) and a search that found nothing. They also record the language of the page, the device type (phone, tablet or computer) and whether you came from a search engine, social media, email or directly, and the source tag of a campaign link (utm_source) if you arrived through one. The referring address is not stored, only its class.

Your IP address and browser details are not stored. The server derives an identifier for the visit from them that changes when the day changes, and the random value used to derive it is destroyed after a few days. The same person therefore cannot be recognised from one day to the next. Events are kept for 25 months.

If you give analytics consent, we may also record where on the page you click: the position is stored as a percentage of the page width and height together with the address of the page. We do not store cursor movement or the element you pressed, and we do not record your visit. Without consent there is no such script on the page at all. The feature is also switched off by default.

If your browser sends a Global Privacy Control or Do Not Track signal, your visit is not recorded. Visits by search robots and staff are not recorded.

To whom data is disclosed

Visma Payments Oy processes the data needed for payment in order to provide the payment service.

Mailgun delivers the shop's email: order confirmations, download links, gift cards, withdrawal acknowledgements, and seller and staff messages.

A seller who sends the product directly. If an order line is sent directly by the seller, we pass on for delivery the order number, the order date, those order lines, your name, any company, the delivery address, the phone number and the gift wrapping message. No amounts of money are passed on.

Teeri ERP reads order data for settling seller commissions. The connection is a read-only interface: the system cannot write to the shop.

Google (Gemini). We use a language model to translate and draft product texts. Only catalogue text, such as the product name and description, is sent to the service. No customer, order or payment data is sent.

Location of data and transfers

The shop's server and database are located in Finland. Customer and order data is not transferred outside the EEA.

The only recipient outside the EEA is Google, and only the catalogue text described above is sent to it.

Retention periods

  • Paid orders: for the period required by the Accounting Act.
  • Unpaid orders (failed or cancelled): personal data is removed after 90 days. The order row and the amounts remain.
  • Withdrawal notices: personal data is removed 3 years after the notice. The fact of the withdrawal and its time remain.
  • IP addresses in the order log: 6 months, after which they are cleared. The rest of the log remains.
  • Visitor statistics: 25 months.
  • Back-in-stock notices: deleted when sent; an unsent request after a year.
  • Download rights and gift cards: kept with the order, because they are rights you bought.
  • Data protection requests and the reasons for handling them: kept for as long as demonstrating our obligations requires.

Your rights

Depending on the situation, you have the right to access your own personal data, to ask for incorrect data to be corrected, to ask for data to be deleted or its processing restricted, to object to certain processing, and to have the data you provided transferred from one system to another.

Deletion is carried out in practice by replacing identifying data: we cannot delete accounting records because of the statutory retention obligation. If we cannot carry out a request, we tell you the reason in writing.

You can make a request to the customer service email address or with the shop's data protection form. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman.

Cookies

The shop sets only its own cookies that are necessary for it to work:

  • antaisin_suostumus: your choice regarding optional cookies. Valid for six months.
  • antaisin_kieli: the language you chose. Valid for a year.
  • Cookies for the shopping cart, the session and form protection, without which buying does not work.

No advertising or profiling cookies are set. A video embed is not loaded onto the page at all without marketing consent, so your browser makes no request to the video service before consent. You can change your choice at any time in the cookie settings.