Privacy policy

Updated: 1.6.2026

This privacy policy explains how Olivo Company Oy processes the personal data of its customers and website users in the online shop, customer service, order processing and marketing.

1. Data controller

Olivo Company Oy
Business ID: 3167422-7
Address: Munkkiniemen puistotie 7, 00330 Helsinki
Website: www.olivo.fi
Email: info@olivo.fi
Phone: +358400848178

2. What personal data do we process?

We only process personal data that is necessary for running the online shop, customer service, delivering orders, processing payments, marketing and fulfilling statutory obligations.

We may process, for example, the following data:

• name
• email address
• phone number
• billing and delivery address
• order details and purchase history
• information related to the payment method
• communication with customer service
• newsletter subscription details and marketing consents
• technical website data, such as data related to cookies and analytics

We do not process full payment card details ourselves in the online shop; payments are processed by payment service providers.

3. For what purposes is personal data used?

Personal data is used for the following purposes:

• receiving, processing and delivering orders
• processing payments
• customer service and customer communication
• handling complaints, returns and other customer service matters
• maintaining the customer relationship
• sending newsletters and other marketing, if the customer has given consent
• developing the online shop, analytics and ensuring security
• fulfilling accounting and other statutory obligations

4. Legal basis for processing personal data

We process personal data on the following grounds:

Contract: When a customer places an order in the online shop, personal data is needed to process, pay for and deliver the order.

Legal obligation: We retain data, for example, for accounting and regulatory obligations.

Legitimate interest: We use this basis, for example, for managing the customer relationship, customer service, preventing misuse and developing the business. We ensure that our legitimate interest does not override the rights and freedoms of the data subject.

Consent: Electronic direct marketing, such as newsletters, is based on the customer's consent. Consent can be withdrawn at any time.

5. Where do we get the data?

We receive personal data mainly from the customers themselves, for example when a customer:

• places an order in the online shop
• creates a customer account
• subscribes to the newsletter
• contacts customer service
• takes part in a campaign or event
• gives consent to marketing

In addition, the website may collect technical data using cookies and analytics tools.

6. Payment services

Online shop payments are processed through payment service providers. These include, for example:

• Paytrail
• Stripe
• Klarna
• Walley
• MobilePay
• Pivo
• online bank payments
• card payments

Payment service providers process the data needed for payment in accordance with their own privacy policies and terms of service. Payment-related data is used to carry out the payment transaction, verify the payment, and for refunds and any investigations.

7. Disclosure of data and processors

We may use trusted service providers to process personal data. These may include, for example:

• the e-commerce platform provider
• payment service providers
• transport and logistics companies
• email and text message marketing service providers
• analytics and cookie services
• IT and maintenance services
• accountants and financial administration service providers
• authorities, where required by law

Service providers may only process personal data to the extent necessary to provide the service. We have concluded a data processing agreement (DPA) in accordance with the General Data Protection Regulation (GDPR) with all our service providers that process personal data.

8. Transfers of data outside the EU or EEA

Some of the service providers we use may process personal data outside the EU or EEA. In such cases we ensure that the transfer of personal data has an appropriate basis under data protection law, such as the EU standard contractual clauses or another approved safeguard.

9. Retention period

We retain personal data only for as long as necessary to fulfil the purposes described in this policy or as required by law.

Examples of retention periods:

• order data is retained for as long as required by the customer relationship, complaints, returns and accounting
• accounting records are retained in accordance with accounting legislation for 6 years from the end of the financial year
• data concerning marketing consent is retained for as long as the consent is valid
• customer service communication is retained for as long as handling the matter requires

Unnecessary data is deleted or anonymised when there is no longer a basis for retaining it.

10. Cookies

The Olivo.fi website uses cookies for the website's functionality, the shopping cart, analytics, user experience and marketing.

Essential cookies are necessary for the website and online shop to function. Non-essential cookies, such as analytics and marketing cookies, are used on the basis of consent.

Users can manage their cookie settings via the website's cookie settings or in their browser settings. More information about cookies can be found in our separate cookie policy.

11. Rights of the data subject

The customer has the right to:

• know whether we process their personal data
• request access to their personal data
• request rectification of inaccurate or incomplete data
• request erasure of data if there is no basis for retaining it
• request restriction of processing
• object to the processing of personal data in certain situations
• withdraw marketing consent at any time
• request that their data be transferred from one system to another, where the conditions are met

Requests can be sent by email to: info@olivo.fi

We respond to requests as required by data protection law within one month of receiving the request. If necessary, this period may be extended by up to two months, in which case we will notify you separately.

12. Right to lodge a complaint

If a customer considers that their personal data has been processed unlawfully, they have the right to lodge a complaint with the supervisory authority.

In Finland, the supervisory authority is:
Office of the Data Protection Ombudsman
www.tietosuoja.fi

13. Data security

We protect personal data with appropriate technical and organisational measures. Only those persons and service providers who need access for their work or to provide the service have access to personal data.

14. Changes to the privacy policy

We may update this privacy policy as necessary, for example when services, systems or legislation change. The current version is always available on our website.