Privacy policy

Ehasa Oy, Company ID 3585069-7, Ruonasalmentie 8 A, 00830 Helsinki, Finland. Contact: info@ehasa.org.

2. Data processed

We process contact, order, payment, communications and technical log data needed for orders, customer service, events and website operation. Full payment-card details are not stored in Ehasa systems.

3. Purposes and legal bases

Data is used to perform contracts, manage orders and event participation, provide support, meet legal obligations, prevent misuse and send marketing based on consent.

4. Recipients and transfers

Data is available only to personnel who need it and necessary providers such as payment, delivery, hosting and communications services. PayPal may process data outside the EU/EEA under its own terms and applicable safeguards.

5. Retention

Data is retained only as long as needed for its purpose and legal obligations. Accounting material is kept for the statutory period; unnecessary customer and marketing data is deleted or anonymised.

6. Your rights

You may have rights to access, correct or erase data, restrict or object to processing, receive portable data and withdraw consent. Contact info@ehasa.org. You may also lodge a complaint with the Finnish Data Protection Ombudsman.

7. Cookies

Necessary cookies support the cart, login, language choice and security. Non-essential cookies are set only with applicable consent.

Updated 30 August 2026.