Privacy policy

This Privacy and Data Protection Statement has been prepared by Brinkhall Sparkling Oy (hereinafter referred to as "Brinkhall" or "we"), in accordance with the Personal Data Act (Sections 10 and 24) and the European Union's General Data Protection Regulation (GDPR). The statement outlines how we handle the personal data that you provide when you use our website and online store. We at Brinkhall Sparkling Oy are committed to ensuring your privacy is respected.

1. Data Controller

Brinkhall Sparkling Oy

Vaskiontie 418

24800 HALIKKO

Business ID 2726453-2

If you have any questions regarding data protection or the processing of personal data, please contact us at myynti@bsp.fi.

2. Register Name

BRINKHALL SPARKLING customer register

3. What Information Does Brinkhall Collect?

We collect user-provided and personally identifiable information such as:

Identification information (e.g. name, phone number, email address, postal address)

Billing information

Email address and digital certificate for Google or Facebook login

Marketing permissions

Localization data (delivery methods, delivery time, tax information)

Products on your wishlist

Payment information

Information shared during contact with Brinkhall, for example during a customer service interaction via phone, email or chat

Information inferred from the use of our services such as delivery details (delivery address, delivery method, selected payment method), purchase history (products ordered, complaints, price information, delivery method), website usage and browsing data, device identification information, online store usage (e.g. items added to shopping cart), and product recommendations based on browsing and purchase history.

We primarily obtain this information from the users of our website, but we may also receive additional information from select partners, like credit service providers. You can access your personal data through your customer account, and, if desired, you may request the deletion of your personal data by contacting our customer service.

When you make a purchase through our online store, our ecommerce platform Shopify collects your personal information (name, email address, delivery and billing address, payment information) for the purposes of order processing, delivery, and customer service. Shopify is committed to compliance with the GDPR and other relevant data protection laws. You can read more about Shopify's data protection policy here.

4. What Do We Use Your Information For?

We use the collected data for various purposes:

To maintain customer relations and communicate with customers

To process, deliver, archive, and manage orders

To improve and develop Brinkhall's operations

To develop our online store and website

To enhance customer experience and improve our services

For analytics and statistics

To manage operations

To prevent misuse

To ensure legal age for alcohol delivery and to prevent and investigate misuse and problem situations

To create more personalized content and targeted marketing.

5. Who Processes The Data?

The data in the customer register can only be accessed by Brinkhall Sparkling Oy employees. They only have access to customer data to the extent required for their work. All employees processing customer data have been trained on proper data usage.

Third parties receive data only when necessary, for instance, for transportation, logistics, storage, analytics, or marketing. We only use trusted partners for these purposes, and we have established comprehensive data protection and data processing agreements with them. Each partner only receives the essential data required for their service, and the service providers are not permitted to use the data for any other purposes.

We share data with the following third parties:

Analytics and statistical partners

Marketing automation system partners when a customer subscribes to a newsletter, gives marketing consent, or allows the sending of SMS messages

Payment service providers when paying with a payment card

Credit providers if the customer chooses a credit company invoice or installment payment as the payment method

Debt collection agencies when invoices become due and are handed over for collection

Transport companies that deliver orders to recipients or pickup points (upcoming)

Logistics partners that handle order picking and packaging.

6. Data Storage

Brinkhall stores personal data within the European Union's economic area. We do not transfer data outside of the EU.

We use administrative, organizational, technical, and physical security measures to protect the data we collect and process. These measures include, for example, firewalls, two-step authentications, as well as locked premises and systems protected by passwords and limited access. These security measures are designed to maintain and ensure the safety and storage of data at a level that meets the requirements.

We retain data for as long as necessary to fulfill the purposes mentioned in this statement. Legislation or unpaid debts may in some cases oblige Brinkhall to retain some of the customer data, even if the customer would like to anonymize their customer information.

Shopify, which provides our e-commerce platform, however, may transfer data outside of the EU. Shopify is committed to complying with the EU's General Data Protection Regulation (GDPR) and it uses the EU's standard contractual clauses for transferring data outside of the EU. We do not transfer any other data outside of the EU.

7. Use of Cookies and Social Media Plugins

Brinkhall's websites use various technologies and tracking tools to collect data, such as cookies, browser memory, and pixel tags.

Cookies are small text files that are stored between a user's browser and the server. Cookies and other identifiers have a specified lifespan, after which the browser removes the identifier. Cookies are used to enable personalized features for the online store and marketing purposes.

Our websites are tracked by Google, and Facebook, among others. Cookies allow us to analyze and improve our website and develop our operations. Cookies and tracking technologies also enable us to target advertising content.

Cookies are used to collect information about your visit to our website, including customer identification, IP address and device type identification, maintaining login sessions, estimating delivery methods and times, and functioning of the shopping cart. Accepting cookies is mandatory for these functions. You can delete cookies through your browser settings, but they will be reloaded when you visit our website.

Read more about the cookies we use and the cookie policy related to social media plugins.

8. Marketing

In order to continuously inform our customers about our evolving services and products, we process personal data for direct marketing purposes. We may contact you via email, text messages, or other communication channels, such as social media.

Customers have the right to object to the use of their personal data for direct marketing by contacting the addresses provided above or by using the unsubscribe option provided in direct marketing messages.

We may use your contact information (e.g., email address or phone number) or technical identifiers (e.g., cookies) to create target audiences for marketing our products on social media services or online platforms. Such services include Facebook, Google, and LinkedIn.

In this process, we ensure that your contact information is not disclosed to third parties and is only processed for the purposes determined by Brinkhall.

9. Right to Access and Request Data Correction

Every individual listed in the register has the right to access their stored data in the register and request the correction of any incorrect information or completion of incomplete information.

If a person wishes to access their stored data or request corrections, the request should be sent by email to myynti@bsp.fi.

The data controller may request the requesting individual to provide proof of their identity if necessary. The data controller will respond to requests within the timeframe provided in the EU General Data Protection Regulation (usually within one month).

10. Other Rights Related to Personal Data Processing

Individuals listed in the register have the right to request the deletion of their personal data from the register ("right to be forgotten"). Additionally, individuals have other rights as provided by the EU General Data Protection Regulation, such as the right to restrict the processing of personal data in certain situations. Requests should be sent in writing by email to myynti@bsp.fi.

11. Right to Amend the Privacy Statement

Due to the development of our services and changes in legislation, we have the right to amend the privacy statement if necessary. In significant changes, we will notify registered customers of the updated terms.

12. Links to Privacy Policies for Marketing, Payment Processing, and Data Handling

Google Analytics:

https://policies.google.com/privacy/partners

Untappd:

https://untappd.com/privacy