Last updated: 1 June 2025
GDPR Compliance
Oninfitie Oy processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act. This page explains our commitments and your rights.
1. Data Controller
Oninfitie Oy (Business ID: 3456789-1), Urho Kekkosen katu 4–6, 00100 Helsinki, Finland is the data controller for personal data processed on the platform.
2. Legal Basis for Processing
We process your data based on: (1) Contract — to fulfil your delivery orders; (2) Legitimate interest — to prevent fraud and improve our services; (3) Legal obligation — for tax and accounting records; (4) Consent — for optional communications and analytics.
3. Right of Access
You may request a copy of all personal data we hold about you by contacting privacy@oninfitie.fi. We will respond within 30 days.
4. Right to Rectification
If any data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most data directly in account settings.
5. Right to Erasure
You may request deletion of your personal data where there is no legitimate reason for us to continue processing it. Some data must be retained for legal compliance (e.g., tax records for 6 years).
6. Right to Data Portability
You may request your data in a structured, machine-readable format (JSON) to transfer to another service. Submit a request to privacy@oninfitie.fi.
7. Right to Object
You may object to processing based on legitimate interests, including profiling for service improvement. We will cease processing unless we can demonstrate compelling legitimate grounds.
8. Data Transfers
Where data is transferred outside the EEA, we ensure adequate safeguards are in place (Standard Contractual Clauses). Our infrastructure is primarily EU-based.
9. Supervisory Authority
If you believe your data rights have been violated, you may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
Questions about this policy? Contact us at legal@oninfitie.fi