Privacy Policy

Privacy Policy

This page explains how RUF Second Hand collects and processes personal data of its customers and users of its online services, and how you can influence the processing of your personal data.

1. Data controller

RUF Second Hand (reuseful Oy)
Business ID: 3265679-2
Mannerheiminkatu 2
21100 Naantali, Finland
Email: moi@rufsecondhand.fi
Phone: +358 40 353 2029

2. What data we collect

We only collect data necessary for the service when you place an order, contact us, or subscribe to our newsletter.

We may collect, for example:

  • name

  • email address

  • phone number

  • shipping and billing details

  • order details

  • messages and inquiries

  • company information (Business ID, contact person details)

We also collect technical data related to website usage, such as IP address, browser information, and usage data.

3. How we use the data

We use the data for the following purposes:

  • operation of the online store (processing and delivering orders)

  • customer communication and marketing

  • service development

  • compliance with legal obligations

4. Legal basis for processing

Processing of personal data is based on:

  • contract (online store order)

  • legal obligations (e.g. accounting)

  • legitimate interest (customer relationship management and service development)

Newsletter subscriptions are based on consent, which can be withdrawn at any time.
The use of cookies is partly based on consent requested separately on the website.

5. Disclosure of data

Data collected in the registers will not be disclosed outside the company for marketing, sales, or contact purposes. Personal data may be disclosed to authorities in accordance with Finnish law when required.

We only disclose personal data to the extent necessary for operating the online store.

Data is processed by:

  • payment service providers for processing payments

  • delivery and logistics companies for fulfilling orders

  • accounting and financial service providers to meet legal obligations

  • the e-commerce platform as well as analytics and marketing services for maintaining, developing, and marketing the online store

Data is not disclosed to other parties without a legal basis.

6. Transfer of data outside the EU/EEA

The online store operates on the Shopify platform, through which personal data may be processed outside the EU/EEA.

RUF Second Hand does not otherwise transfer or process data outside the European Union or European Economic Area as a rule. If data is exceptionally transferred outside the EU/EEA, an adequate level of data protection is ensured in accordance with applicable legislation.

7. Data retention

We retain data only as long as necessary:

  • for the duration of the customer relationship

  • in accordance with accounting legislation (e.g. 6 years)

  • to fulfill legal obligations and handle claims

8. Your rights

You have the right to:

  • access your personal data

  • request correction of inaccurate data

  • request deletion of data where permitted by law

  • object to processing

  • restrict processing

  • transfer data from one system to another (data portability)

  • withdraw consent (e.g. for marketing)

You can exercise your rights by contacting us.

If you have questions about the processing of personal data, you can contact:
moi@rufsecondhand.fi

You also have the right to lodge a complaint with the supervisory authority:
Office of the Data Protection Ombudsman

9. Cookies

We use cookies to improve the functionality and user experience of the website. Some cookies are necessary for the operation of the site and are used without consent.

The use of other cookies (such as analytics and marketing) is based on user consent, which is requested separately on the website.

You can manage cookie settings in your browser or through the cookie banner.

10. Data security

We protect personal data with appropriate technical and organizational measures.

Access to data is restricted to persons who need it for their work tasks.

11. Automated decision-making

We do not use personal data for automated decision-making or profiling that would have significant effects on individuals.

12. Changes to the privacy policy

We may update this privacy policy when necessary. The latest version is always available on our website.