General provisions

1. The controller of personal data, who complies with the GDPR regulation (hereinafter referred to as the "Regulation"), is Myraputre Oy, business ID 3228969-7, located at www.mysunco.fi (hereinafter referred to as the "Controller").
2. The contact information of the Controller is as follows: email: contact@mysunco.fi, phone: 0407785261.
3. Personal data refers to any information relating to an identified or identifiable natural person.

Source of personal data

1. The Controller processes personal data obtained with the customer's consent, which has been collected through the electronic order process on the website www.mysunco.fi for the purpose of acquiring and fulfilling the online store's orders.
2. The Controller processes only the customer's identification and contact information that is necessary for fulfilling the purchase agreement.
3. The Controller processes personal data for shipping and accounting purposes, as well as for transmitting necessary information between the parties to comply with legal obligations. Personal data will not be disclosed or transferred to other countries.

Purpose of data processing The Controller processes the customer's personal data for the following purposes:

1. Registration on the website www.mysunco.fi in accordance with Chapter 4, Section 2 of the GDPR;
2. Electronic order placed by the customer (name, address, email, phone number);
3. Compliance with the laws and regulations arising from the contractual relationship between the customer and the Controller;
4. Personal data is necessary for fulfilling the purchase agreement. The agreement cannot be made without personal information.

Retention period of personal data

1. The Controller retains personal data for as long as necessary to fulfill the rights and obligations arising from the contractual relationship between the Controller and the customer, and for a period of three years after the termination of the contractual relationship.
2. The Controller shall delete all personal data upon the expiration of the required data retention period.

Recipients and processors of personal data Third parties processing the customer's personal data are subcontractors of the Controller. The services provided by these subcontractors are necessary for the implementation of the contractual agreement between the Controller and the customer. The subcontractors of the Controller are:

• Webnode AG (e-commerce platform);
• Shipping company;
• Google Analytics (website analytics).

Customer's rights In accordance with the Regulation, the customer has the following rights:

1. The right to access personal data;
2. The right to rectify personal data;
3. The right to erase personal data;
4. The right to object to the processing of personal data;
5. The right to data portability;
6. The right to withdraw consent to the processing of personal data in writing or by email to the address: contact.mysunco@gmail.com;
7. The right to lodge a complaint with a supervisory authority if there is a suspected violation of the Regulation.

Security of personal data

1. The Controller commits to implementing all necessary technical and organizational measures to protect personal data.
2. The Controller has taken technical precautions to secure data storage facilities, including ensuring access to computers through passwords, using antivirus software, and regularly maintaining computers.

Final Provisions

1. By placing an electronic order on the website www.mysunco.fi, the customer confirms awareness of all personal data protection conditions and fully accepts them.
2. The customer accepts these terms by selecting the checkbox on the order form.
3. The Controller may update these Terms and Conditions at any time. The new, updated version must be published on this website.

These terms and conditions come into effect on May 16, 2023.