Privacy policy

Last updated 26 December 2025.

We process personal data in accordance with the EU General Data Protection Regulation and Finnish legislation. This page explains what data we collect, for what purposes and on what legal grounds it is used, to whom data is disclosed, and what rights you have.

Data controller
World Heroes. Business ID 3408872-5. VAT ID FI34088725.
Veljestie 7, 44500 Viitasaari, Finland.
Data protection contact: info@toninverkkokauppa.com

Personal data processed
Customer information that you provide when placing an order or contacting us. Name, address, phone number, email address. Order, payment, and delivery details. Customer feedback and communications. Technical data generated during use through cookies and similar technologies, based on your consent. We do not store full payment card details in our own systems.

Purposes and legal bases
Processing and fulfilling orders and contracts. Compliance with legal obligations such as accounting and product safety. Legitimate interest in protecting the service, preventing misuse, and developing operations. Consent for analytics, targeted advertising, and newsletters. Consent can be withdrawn at any time.

Sources of data
Primarily data provided by the customer. Technical transaction data from payment service providers. Tracking information from delivery companies. Cookie based usage metrics in accordance with cookie settings.

Recipients and transfers
We use trusted service providers for order processing, payments, deliveries, customer communications, analytics, and marketing. Data is disclosed only as necessary to provide the service. Payments are processed via Shopify Payments. Deliveries are handled by Posti. Analytics and advertising may involve Google, Meta, and similar partners. Data may be transferred outside the EU or EEA. We use EU standard contractual clauses or the Data Privacy Framework and, where necessary, additional safeguards.

Retention
Order data is generally retained for 6 to 10 years. Customer service communications for up to 5 years. Cookie based data for the duration of the relevant cookies. We retain only what is necessary.

Cookies and consent management
Essential cookies are always enabled to ensure the store functions properly. Analytics and marketing cookies are enabled only with your consent. You can change your choices via the cookie settings at the bottom of the page. Cookies can also be deleted through your browser settings.

Automated decision making
We do not make decisions with legal effects concerning you without human involvement. Product recommendations and advertising targeting are based on your consent and can be disabled at any time.

Data subject rights
You may request access to your data, request correction or deletion, restrict processing, object to processing based on legitimate interest, and request data portability when processing is based on consent or a contract and is carried out by automated means. Requests can be sent to info@toninverkkokauppa.com. We require sufficient information to verify your identity. You have the right to lodge a complaint with the Data Protection Ombudsman.