Privacy and cookie policy

Privacy statement

The data protection statement details how personal data is collected and what the data is used for.



1.1 How personal data is used

  • To maintain the customership
  • For shipping, processing and archiving of orders
  • For the development of operations and services of
  • To improve the customer experience
  • For analytics and statistics
  • To produce more personalized targeted content and marketing
  • To prevent abuses
  • To provide better customer service

Information is processed based on the customer relationship between the customer and, the contract, the use of the site, the customer's separate express consent or legal obligations.

1.1.2 Disclosure of information

Personal data is not sold on to third parties. We share personal data only with our partners who help provide our services.

We collect and store information about the location of your device, browser type, search results and other information regarding the use of our website. Information is collected to develop our site, our product offering, and to analyze our site visitors' preferences, demographic location and other information relevant to the development of services. Information about the number of individual visitors to our site, the frequency of visits, the value of orders, and so on is kept for statistical reasons. You can read more about our cookie policy below. We apply the aforementioned procedures based on our legitimate interests to develop our company and our website.

1.1.3 Targeted marketing

We may collect and use your personal data for targeted marketing purposes. You have the right to request the restriction of the processing of personal data for that purpose at any time, including direct marketing.

We may store cookies when you browse our website in order to analyze your preferences, to offer you targeted marketing either on our site or on the platforms of our partners, based on your interests. We apply the aforementioned procedures based on our legitimate interests to develop our company and our website.

We also hand over your email address to our partner when you shop in our online store to ask you to evaluate your purchase and customer experience. You can always cancel receiving such messages or e-mails if you do not want to receive messages for marketing purposes. When canceling receipt, you must contact the sender to cancel marketing messages.

We apply the aforementioned procedures based on our legitimate interests to develop our company and website and to provide our customers with unique and relevant content and offers.

If you do not wish to receive targeted advertising, this does not mean that you will not see advertisements on our website or other platforms or sites from our company in the future

It should be noted that when you ask us to refrain from contacting a certain email address by email, we will keep the address regarding the ban request in the list of emails that sent the ban request.


2 Legitimate Interest

Some of the functions of the online store are based on the legitimate interest of the controller, so that we can offer the best possible service experience. Such functions include the customized content of the online store, surveys and product review requests, as well as customer-based reminders. With these functions, we offer e.g.

  • Products and offers that match the customer's preferences
  • We ask our customers' opinions about our service
  • Better and more transparent product reviews for our customers
  • Content related to guiding our new customers in using the service
  • Useful content and additional services related to your previous purchase history
  • Reminders about renewing the wear parts of previously purchased products to improve the life of the products
  • Information about current services and changes in transactions, if it has been a while since our customers' previous transactions

The personal data processed includes our customers' contact information for possible communication, as well as information about their behavior based on purchase or browsing history or information entered by customers.


3. What information is collected

  • Information provided by the user himself or information that identifies the person
    • Identifying information such as name
      • Personal ID to identify the customer when entering into a credit agreement
      • Passport information or similar information required by Customs when ordering products or services tax-free from outside Finland
    • Contact information, such as address, email address and phone number
    • Payment information, including credit agreements and other billing information
    • With the customer's consent, location data that is used to estimate the delivery time
    • The email address and certificate used for Google, Facebook or Microsoft login
  • Data observed about the use of the services and derived with the help of analytics
    • Purchase history, e.g. ordered products and their price information
    • Delivery information, such as the selected delivery method and delivery address
    • Product reviews
    • Online store usage and browsing data as well as identification data of the terminal device
    • Information and identifiers used for product recommendation and other targeted content

Providing identification, contact and payment information is mandatory when you buy via the Internet.

The main source of information is the user himself, in addition to which we may receive additional information from our partners, for example from a credit service provider. In accordance with the provisions of the Data Protection Regulation, we inform you about the personal data we receive from third parties in the first contact with the customer or within one month of receiving the personal data at the latest. 


4 How is my data stored and protected?

All personal data is protected against unauthorized access and against accidental or illegal data destruction, alteration, transfer, transfer or other illegal processing. stores customer data in the EU region. The company uses an information security management system based on ISO 27001. The servers are protected against data breaches and denial of service attacks.

In the processing of personal data and technical solutions, we follow good data protection practices, e.g. data consolidation, minimization, pseudonymization, anonymization and encryption. In the processing of personal data, the requirements of the EU data protection regulation applicable from 25 May 2018 have been taken into account.

All access to personal data is monitored in accordance with good practices.

5 Who processes my personal data?

Only's own employees have access to customer data, and our staff is trained to use data safely and ethically. Each of our staff sees customer data only to the extent that it is necessary for the performance of work tasks.

We use trusted contractual partners, in which case information can be transferred to a third party. The agreements with all partners take into account the requirements set by the EU data protection regulation and other legislation. 

5.1 When and how we share information with third parties

We share your personal data in situations where it is necessary for providing our services or completing a payment transaction.

In order to manage the operation of our website or to process your order, we may pass on your necessary personal data to our partners (for example, companies assisting in the administration of our loyalty program and newsletter or the administrative services of our system).

The third-party companies we choose apply the valid data protection policy when processing your personal data.

5.2 Third party

Yeppo's data protection principles do not apply to personal data that you hand over to a third party, for example through payment services.

Third-party links on our website may apply the privacy policies, practices or different rules of those parties. Please also familiarize yourself with them carefully.

We may also present your personal data to third parties if we have strong reasons to suspect that the sharing, access, use or retention of the data is necessary for the following reasons:

  • Complying with a legal decision, government order or decision or other legal obligation,
  • The enforcement or application of our Agreement,
  • Administering and maintaining the security of our products, including preventing or stopping an attack on our computer systems and network; and
  • To protect the rights, property, or safety of Yeppo, its customers, licensees, or others.

The third-party companies we choose apply the valid data protection policy when processing your personal data.


6 How long will my data be stored?

We only keep your personal data for the time necessary to fulfill the purposes described in this statement. In addition, some information may be kept longer to the extent that it is necessary to fulfill the obligations set by law, such as accounting and consumer trade responsibilities, and to demonstrate their proper implementation.

At the customer's request, personal information about him can be deleted or anonymized from the systems. The deletion and anonymization procedure is irreversible, and we cannot restore deleted customer accounts. If necessary, contact 

For some information, legislation imposes obligations on the longer-term storage of information, e.g. for the following purposes:

  • The Accounting Act defines longer retention periods for information, regardless of whether the material contains personal data or not
  • Fulfilling responsibilities regarding consumer trade
  • System log data is collected and stored as required by law, so that we can offer legal and safe online shopping to our customers
  • Taking sufficient backups of the shop's databases and systems in order to secure data, correct error situations and ensure data security and continuity

7 What rights do I have?

As a customer, you have the right to:

  • Get access to your personal data, including the right to receive a copy of your personal data
  • Requests correction or deletion of personal data about you
  • Under certain conditions, request restriction of processing or object to the processing of personal data

7.1 Right to object in accordance with Article 21 of the GDPR data protection

  • You have the right at any time to demand the restriction of the processing of your personal data based on your individual situation in accordance with Article 6 (1) f) of the GDPR.
  • When you submit a rectification claim, we will stop processing your personal data if we cannot present essential legal reasons for processing personal data that override your own interests, rights and freedoms, or if the processing of personal data takes place for the preparation, implementation or defense of legal claims.


Cookie Policy

We use cookies on our website to ensure that our pages serve you as well as possible. With the help of cookies, we can develop the website and offer better customer experiences, when it is possible to customize the website according to wishes, choices and interests. We modify the site by tracking, for example, products added to shopping carts.

Permanent cookies are used e.g. to save personal settings in the online store so that you do not have to make the same choices every time you visit the online store. Cookies are also used to modify information and marketing to make them as relevant as possible to you. Temporary cookies are used, for example, to store statistical information about the use of the website.

By accepting the terms of use and this privacy policy and by using the website, you accept the use of cookies. If you do not accept the use of cookies, you can disable cookies in the security settings of your web browser. You can also set your web browser to ask you every time when website wants to set a cookie on your computer. You can also delete previously saved cookies from your web browser. You can get more information from the help pages of your web browser. You can also manually delete cookies from your hard drive at any time.

If you do not accept the use of cookies, please note that the functionality of the site may be limited, and the online store may not work as intended.