GDPR – privacy policy
Updated October 2026
Data controller
Kaplin Creative Oy / Business ID 2541495-5
Lupiinikatu 14, Järvenpää, Finland
+358 40 556 9069
Contact person: Kaisu Kaplin
What data do we collect?
We only process data that is necessary to provide our services:
Webshop: name, address, email, phone number, order details, payment method and delivery method. For business customers, also the company name, business ID and VAT number.
Newsletter: email address.
Enquiries and quote requests: name, contact details and the content of the message.
Courses and workshops: participant's name and contact details.
Photo shoots: the client's contact details and the photographs taken during the shoot. If a shoot concerns a sensitive subject, such as health, I process the data only with the client's explicit consent.
Website use: data collected by cookies and analytics, such as browser, device and pages visited.
What is the data used for, and on what legal basis?
Handling orders, photo shoots and courses, and maintaining the customer relationship.
Accounting and invoicing. The legal basis is a statutory obligation.
Sending the newsletter and marketing. The legal basis is consent, which you can withdraw at any time.
Developing the website and collecting statistics.
Who is the data shared with?
Data is never sold. We share data only with partners necessary for providing the service:
Website and webshop platform: Wix.com
Payment providers: Klarna, Visa, MasterCard
Shipping companies: Posti, Matkahuolto, DHL
Accountant
Analytics and cookie management: TWIPLA, Usercentrics
Some service providers may process data outside the EU and EEA. In such cases, the transfer is carried out in accordance with the General Data Protection Regulation, for example on the basis of standard contractual clauses approved by the European Commission or adequacy decisions.
How long is the data stored?
Accounting data is stored in accordance with the Finnish Accounting Act: receipts and vouchers for six years and financial statements for ten years.
Newsletter subscriber data is stored until the subscription is cancelled.
Enquiries and quote requests are stored for 2 years unless they lead to a customer relationship.
Cookies
The website uses cookies to ensure that the site works properly and to collect visitor statistics. You can accept or reject non-essential cookies in the cookie banner and change your choice at any time.
Your rights
You have the right to:
know what data has been stored about you
request the correction of inaccurate data
request the deletion of your data, unless the law requires it to be retained
restrict or object to the processing of your data
transfer your data to another system
withdraw any consent you have given
You can send your requests to kaisu@kaisukaplin.com. I will respond within one month at the latest.
Data security
Data is stored in password-protected systems and can be accessed only by Kaplin Creative Oy and, where necessary, by partners involved in providing the service.
Changes
We update this policy when needed. The current version is always available on this page.