Privacy Policy

This Privacy Policy explains how Satula Cycle Oy ("Satula Cycle", "we", "us") processes personal data when you visit allumriapp.sbs, contact us, or purchase products and services at our shop in Tampere, Finland. We comply with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.

1. Data controller

Satula Cycle Oy
14 Hämeenkatu, 33100 Tampere, Finland
Business ID: FI2984567-1
Email: [email protected]
Phone: +358 3 212 4480

2. Personal data we collect

Depending on your interaction with us, we may process:

• Contact details (name, email address, phone number, postal address)
• Enquiry and order information (messages, bike model, service requests)
• Transaction and invoice data when you purchase products or services in store
• Technical data from website use (IP address, browser type, pages visited) when analytics cookies are accepted
• Cookie consent preferences stored in your browser

3. Purposes and legal bases

We process personal data for the following purposes:

• Responding to enquiries — legitimate interest in communicating with customers and prospects (Art. 6(1)(f) GDPR), or steps prior to a contract (Art. 6(1)(b)).
• Sales and workshop services — performance of a contract (Art. 6(1)(b)) and legal obligations such as accounting (Art. 6(1)(c)).
• Website operation — legitimate interest in providing a functional website (Art. 6(1)(f)).
• Analytics — only with your consent via our cookie banner (Art. 6(1)(a)).
• Marketing — only with your explicit consent where applicable (Art. 6(1)(a)).

4. Data retention

We retain personal data only as long as necessary for the purpose collected:

• Customer enquiries: up to 24 months after last contact
• Transaction records: 6 years as required by Finnish accounting law
• Cookie consent records: 12 months
• Analytics data: 14 months (when enabled)

5. Recipients and transfers

We may share data with trusted processors who assist us, such as email hosting and accounting software providers. All processors are bound by data processing agreements and process data within the EU/EEA unless adequate safeguards are in place. We do not sell personal data.

6. Your rights

Under the GDPR you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data where legally permitted ("right to be forgotten")
• Restrict or object to processing in certain circumstances
• Data portability for data processed by automated means based on consent or contract
• Withdraw consent at any time without affecting prior lawful processing

To exercise your rights, contact us at [email protected]. We respond within one month.

7. Supervisory authority

If you believe we have processed your data unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu):

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi
Email: [email protected]

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

9. Changes

We may update this Privacy Policy from time to time. The current version is always published on this page with the date above.

10. Contact

For privacy-related questions: [email protected]. See also our Cookie Policy and Terms of Use.