Privacy policy.
Privacy Policy
Last updated: 13/4/2025
This Privacy Policy explains how Jenni-Maria Kouch ("we", "our", or "us") collects, uses, and protects your personal data when you visit our website and purchase artworks from our webshop, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Finnish data protection laws.
1. Who is the data controller?
The data controller is:
Artist Jenni-Maria Kouch
jennimariakouch@gmail.com
2. What personal data do we collect?
We collect the following types of personal data when you use our webshop or contact us:
Name
Email address
Phone number (if provided)
Shipping address
Payment details (handled securely through third-party payment providers; we do not store your card information)
Order details and purchase history
Communication or feedback you send us
3. Why do we collect and use your data?
We collect and use your personal data for the following purposes:
To process and deliver your orders
To provide customer service and respond to inquiries
To send order confirmations, shipping updates, and important service-related information
To improve our webshop and user experience
To comply with legal obligations (e.g. accounting and tax reporting)
4. Legal basis for processing
We process your personal data based on:
Performance of a contract – to fulfill your order and provide customer service
Legal obligation – to meet legal requirements such as tax laws
Legitimate interest – to improve our services and prevent fraud
Consent – if you subscribe to our newsletter or marketing updates
5. How is your data stored and protected?
We store your data securely using industry-standard measures to protect it from unauthorized access, alteration, disclosure, or destruction. Only authorized personnel have access to your data.
6. How long do we keep your data?
We retain your data only as long as necessary:
For orders: up to 6 years for accounting purposes (as required by Finnish law)
For customer service: up to 2 years after last contact
For newsletter subscribers: until you unsubscribe
7. Third-party services
We use trusted third-party providers for services such as:
Payment processing (e.g., PayPal, Stripe)
Website hosting and analytics
Shipping services
These providers process your data according to GDPR and only as necessary to perform their services.
8. Your rights under GDPR
You have the following rights:
Access – to request a copy of the data we hold about you
Correction – to request correction of incorrect data
Erasure – to request deletion of your data (unless legally required to keep it)
Restriction – to request limited use of your data
Objection – to object to processing based on legitimate interest
Data portability – to receive your data in a structured, machine-readable format
To exercise your rights, contact us at jennimariakouch@gmail.com
9. Cookies
Our website uses cookies to ensure proper functionality and improve user experience. You can manage your cookie preferences in your browser settings.
10. Changes to this Privacy Policy
We may update this Privacy Policy occasionally to reflect changes in legal or operational requirements. Please review it regularly.
11. Contact us
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact:
Jenni-Maria Kouch
jennimariakouch@gmail.com
Supervisory authority in Finland: Office of the Data Protection Ombudsman (tietosuoja.fi)