Privacy Policy
1. Data Controller
MH-Commerce Oy
Mäkikyläntie 80
36120 Suinula, Finland
Business ID: FI33157987
Email: info@berfet.com
2. The information we collect
We may collect the following information:
- First name and last name
- Address
- Email address
- Phone number
- Order History
- Login credentials (password protected)
- IP address
- Usage and analytics data
3. Purpose of the processing
Personal data is processed for the following purposes:
- Order Processing and Shipping
- Customer Service
- Payment Processing
- Legal obligations (accounting)
- Marketing (if consent has been given)
- Website Development and Analytics
4. Legal basis for processing
The processing is based on:
- Contract (order fulfillment)
- Legal obligation (Accounting Act)
- Legitimate interest (improving the service)
- Consent (marketing, cookies)
5. Data Retention
Data is retained only for as long as necessary:
- contractual obligations
- statutory requirements
- legitimate business purposes
Accounting records are retained in accordance with Finnish law.
6. Sharing of Information
Personal data may be shared with the following parties:
- Payment service providers
- Logistics Partners
- IT service providers
- Accounting Services
Data will not be sold or transferred outside the EU unless it is necessary for technical reasons and appropriate safeguards have been put in place.
7. Cookies and Analytics
This website uses cookies and analytics tools.
Cookies are used for the following purposes:
- website functionality
- analytics
- for marketing purposes (if consent has been given)
Users can manage their cookie settings via the cookie banner or their browser settings.
8. Rights of the Data Subject
Customers have the right to:
- access their own information
- correct incorrect information
- request the deletion of data (if legally possible)
- restrict the processing of data
- object to the processing of data
- withdraw their consent
- file a complaint with the supervisory authority
Requests can be sent to: info@berfet.com
9. Information Security
Personal data is stored on password-protected and secure servers.
Appropriate technical and organizational measures are used to protect the data.
