Privacy Notice
Register Description in accordance with Section 10 of the Personal Data Act (523/1999).
Updated: 4 December 2025
DATA CONTROLLER
Fodelia Oyj
Business ID: 3012268-2
Maustetie 2, 92930 Pyhäntä, Finland
CONTACT PERSON RESPONSIBLE FOR THE REGISTER
Fodelia Oyj, parent company of Feelia
NAME OF THE REGISTER
Customer Register, Suomen Oikia Oy ja Feelia Oy
JOINT CONTROLLERS
Suomen Oikia Oy ja Feelia Oy
PURPOSE OF PERSONAL DATA PROCESSING
The register is used to record information for receiving, processing, delivering orders, managing and administering customer relationships, and for any potential product recalls. The information may also be used for marketing purposes.
CONTENTS OF THE REGISTER
The register may contain:
Job title
Name
Phone number
Email address
LEGAL BASIS FOR PROCESSING
Contract
Legal obligation
WHAT INFORMATION IS INCLUDED
Contact details (name, address, phone number, email), order history, complaints, necessary logistics data, and given marketing consents.
SOURCES OF DATA
Information is collected directly from the customer when establishing the relationship, placing orders, and providing feedback.
IS PROVIDING PERSONAL DATA MANDATORY?
Contact details are necessary for delivering products and for potential follow-up communications. They are also legally required for product recall purposes.
DATA RETENTION PERIOD
Suomen Oikia Oy and Feelia Oy retain personal data only as long as permitted by law and as necessary for providing services under the contract or as required by law. After the customer relationship ends, data may be retained for up to 10 years or as required by law.
REGULAR DISCLOSURES OF DATA
Feelia may provide data to partners with whom it has cooperation agreements for maintaining customer relationships. Partners will not disclose data to third parties nor use it for other purposes. Personal data may also be disclosed if required by law or authorities.
TRANSFERS OF DATA OUTSIDE THE EU/EEA
es — information may be transferred to India by the service provider on the basis of the European Commission’s standard contractual clauses for transfers to third countries.
AUTOMATED DECISION-MAKING
No automated decisions are made based on the registered data.
PRACTISES RELATED TO DATA DISCLOSURE
When data is disclosed to authorities, a disclosure record is created and stored in customer-specific data repositories, and the registered person is informed in advance unless otherwise ordered by the authority.
SECURITY PRINCIPLES
The register is stored electronically. Data is stored in the order system, Fodelia Group’s shared ERP system, and databases accessible only by authorized personnel with individual credentials.
RIGHTS OF THE DATA SUBJECT
Registered individuals have the right to:
Delete data
Restrict processing
Access their personal data
Rectify data
HOW TO EXECISE YOUR RIGHTS
Registered individuals can exercise their rights by contacting the data controller in writing. See the controller’s contact details in this notice.
RIGHT TO LODGE A COMPLAINT
Anyone believing their personal data has been processed in violation of the GDPR may file a complaint with the supervisory authority in the member state of their residence, workplace, or where the alleged infringement occurred.
CHANGES TO THE NOTICE
The privacy notice is published on the company website, and Suomen Oikia Oy and Feelia Oy reserve the right to make changes.
USE OF COOKIES
The website uses cookies to collect user behaviour data for improving usability and marketing (e.g., Google Analytics, Hotjar, Facebook, Google Ads) consistent with the user’s browser settings. Users can manage cookies via their browser.
With regard to such data, we comply with the terms and conditions of the respective social media provider. We encourage you to familiarize yourself with what data is collected through social media plugins and for what purposes. You can disable social media plugins in your browser settings.
Cookies are not harmful and do not cause damage to your computer, files, or internet usage. Cookies may collect, among other things, the following information about website users:
- the user’s IP address
- time of access
- pages visited
- browser type
- the web address from which the user accessed the website
- the server from which the user accessed the website
- the domain from which the user accessed the website