Privacy policy

This is the register and data protection statement of Santa’s Gift Bag Oy in accordance with the EU General Data Protection Regulation (GDPR).

The statement was prepared on April 9, 2026. The latest update was made on April 9, 2026.

1. CONTROLLER:

Santa’s Gift Bag Oy (Business ID 3465649-7)
Koskikatu 18–20, 96200 Rovaniemi
info@santasgiftbag.fi

2. CONTACT PERSON FOR MATTERS RELATED TO THE REGISTER:

Timo Hietala
Santa’s Gift Bag Oy
Koskikatu 18–20, 96200 Rovaniemi
info@santasgiftbag.fi

3. NAME OF THE REGISTER:

Santa’s Gift Bag Oy website register.

4. LEGAL BASIS AND PURPOSE OF PROCESSING PERSONAL DATA:

The legal basis for processing personal data in accordance with the EU General Data Protection Regulation is the voluntary consent of the individual.

The collected personal data is used to develop a potential customer relationship.

5. DATA CONTENT OF THE REGISTER:

The data stored in the register includes all of the following information submitted by a potential customer via the contact form:

  • Name
  • Email address
  • Message

6. REGULAR SOURCES OF DATA:

santasgiftbag.fi contact forms.

7. REGULAR DISCLOSURES OF DATA AND TRANSFER OF DATA OUTSIDE THE EU OR EEA:

Data is not regularly disclosed outside the company. However, some external service or software providers used by the company may store data outside the EU or the European Economic Area.

8. PRINCIPLES OF DATA PROTECTION:

Due care is taken in processing the register, and the data processed using information systems is appropriately protected. When register data is stored on internet servers, the physical and digital security of the hardware is ensured appropriately. Electronically processed personal data is protected and stored in the company’s system, to which access is restricted only to persons who need the data to perform their duties.

Personal data is protected against external access. The workstations and storage media used are encrypted. There is no manual data.

9. RIGHT OF ACCESS AND RIGHT TO REQUEST CORRECTION OF DATA:

Every person in the register has the right to check the data stored about them and to request the correction of any incorrect data or completion of incomplete data. If a person wishes to review the data stored about them or request correction, the request must be sent in writing to the controller. The controller may, if necessary, request the person making the request to verify their identity. The controller will respond within the time specified in the EU General Data Protection Regulation (generally within one month).

10. OTHER RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA:

Every person in the register has the right to request the deletion of their personal data from the register (“right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, such as the restriction of processing in certain situations. Requests must be sent in writing to the controller. The controller may, if necessary, request the person making the request to verify their identity. The controller will respond within the time specified in the EU General Data Protection Regulation (generally within one month).

11. USE OF COOKIES:

We use cookies on our website. A cookie is a small text file that is sent to and stored on the user’s computer, enabling the website administrator to recognize frequent visitors, facilitate login, and compile aggregated information about users. This feedback allows us to continuously improve the content of our website. Cookies do not harm users’ computers or files. We use them to provide our customers with information and services tailored to their individual needs.

If a user visiting our website does not want us to obtain the above-mentioned information through cookies, they can disable the use of cookies. However, it is important to note that cookies may be necessary for the proper functioning of some parts of our website and services. The use of essential cookies cannot be disabled, and by browsing our website, the user accepts their use.

You can change your cookie settings to accept or block non-essential cookies by clicking the “Edit settings” button in the cookie notice. After accepting cookies, you can later modify your settings by clicking the “Change your settings” button.