FIN ENG

Privacy Policy

This privacy notice describes how Vegepörssi Oy processes personal data in connection with its website https://www.vegeporssi.fi and the related forms and online store. This notice has been prepared in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection legislation.

Updated: 4 August 2026

1. Data Controller

Vegepörssi Oy, Business ID: 3413192-2. Address: Vanha Talvitie 18, 00580 Helsinki.
Email: vegeporssi@vegeporssi.fi, phone: 09 8621 0100

2. Contact Person for Data Protection Matters

Markus Ulfstedt, tel. 0405015578, markus.ulfstedt@vegeporssi.fi

3. Data Subjects

  • Website users and visitors
  • Persons who have contacted us via the contact or feedback form
  • Contact persons of B2B contract customers who use the online store

4. Purposes of Processing Personal Data and Legal Basis

Purposes

  • Responding to contact requests and feedback
  • Managing contractual customer relationships and processing orders and invoicing in the online store
  • Ensuring the functionality and security of the website
  • Developing the website using information collected through cookies
  • Complying with statutory obligations (e.g. accounting)

Legal bases

  • Contract — online store orders and management of the contractual customer relationship
  • Legitimate interest — responding to contacts/feedback, and website security and development
  • Consent — non-essential cookies (managed via CookieYes)
  • Statutory obligation — e.g. accounting legislation

5. Personal Data Processed

  • Name, email address, phone number
  • Company name and position within the company (B2B contact persons)
  • Content of the contact or feedback
  • Online store order and invoicing information
  • Technical data relating to website use (e.g. IP address, information collected via cookies)

No special categories of personal data (e.g. health data) are collected through the website.

6. Regular Sources of Information

Data is generally obtained from the data subject when filling out forms and making contact, and from contractual customers when entering into B2B customer agreements. Technical data is collected automatically via cookies when the website is used.

7. Retention Period

Personal data is retained only for as long as necessary for the purpose of processing or as required by statutory obligations.

8. Disclosure and Transfer of Data

Data is not disclosed to external parties, except:

  • To service providers who process data on behalf of Vegepörssi Oy under data processing agreements (DPAs) (e.g. website maintenance/hosting, the e-commerce platform, email service)
  • To authorities where required by law

Data is generally not transferred outside the EU/EEA. Where transfers do occur, an adequate level of protection is ensured.

9. Cookies

The website uses cookies to enable its functionality, analyze usage, and improve the user experience. The use of cookies is managed via the CookieYes consent tool, through which visitors can accept or reject non-essential cookies and later change their consent via the website’s cookie settings.

10. Online Store and B2B Contractual Customer Relationship

The online store is intended solely for Vegepörssi Oy’s contractual customers, and its use is subject to the terms separately defined in the customer agreements. This privacy notice, however, covers all processing of personal data relating to online store users, e.g. the contact persons of customer companies.

11. Data Security

Personal data is processed carefully and securely. Access to data is restricted to individuals who need it to perform their job duties, and information systems are protected with appropriate technical and organizational measures.

12. Rights of the Data Subject

The data subject has the right to, among other things:

  • Access their own data
  • Request correction of inaccurate data
  • Request erasure of data under the conditions provided by law
  • Object to or restrict processing
  • Transfer data from one system to another (data portability)
  • Withdraw given consent at any time

Requests should be sent to [email].

13. Right to Lodge a Complaint with the Supervisory Authority

Office of the Data Protection Ombudsman www.tietosuoja.fi

14. Changes to This Privacy Notice

This notice may be updated as legislation or operations change. Changes will be announced on this page.