Privacy Policy
We openly describe how we process your personal data securely and in accordance with GDPR.
Data Controller
Company: Willit Oy
Business ID: 3570240-8 / FI35702408
Address: Löytökyläntie 311, 91310 Arkala
Contact Person: Risto Holappa
Phone: 044 285 4421
Email: risto@viher.it
All personal data is stored in Finland and within the EU.
What Data We Collect
We only collect data that is necessary to provide the service and fulfill legal obligations.
Data You Provide
We request basic information to manage customer relationships and enable marketplace functionality:
- Identification and contact details, such as name, email address, phone number, and billing address.
- Marketplace settings, subscription choices, and communication preferences that you select yourself.
- Orders, listings you create, payment references, and support requests.
Automatically Collected Data
When using the service, we collect limited technical metadata to protect and develop the service:
- Usage statistics, such as pages visited, actions taken, timestamps, and error messages.
- Search terms and phrases you enter, which we use to improve search relevance.
- Technical data, such as IP address, device and browser type, operating system, and language settings.
- Cookie identifiers and approximate location based on IP address.
How We Use Your Data
We use collected data for clearly defined purposes. We never sell personal data to third parties.
- Sending launch notifications, transaction, and customer communications according to your preferences.
- Developing the service, fixing bugs, and improving user experience.
- Recommending product categories, producers, and content suitable for you.
- Protecting the service from abuse and detecting fraud.
- Fulfilling legal, tax, and regulatory obligations.
Legal Basis for Processing
Willit processes personal data in accordance with EU General Data Protection Regulation (GDPR) Articles 6 and 13. Each processing activity has one or more of the following bases:
- Performance of a contract or pre-contractual measures at your request (e.g., account creation, order delivery).
- Your consent for voluntary communications, marketing, or analytics. You can withdraw your consent at any time.
- Willit Oy's legitimate interest in maintaining a secure and reliable marketplace.
- Compliance with legal obligations, such as accounting, taxation, and fraud prevention.
Data Protection
We use administrative, technical, and organizational safeguards to protect your data. Personal data is stored within the EU/EEA (primarily in Finland), access rights are limited to authorized personnel, and all processors are bound by GDPR-compliant agreements. Data transfers are encrypted using TLS 1.3 protocol.
Data Retention Periods
We retain personal data only as long as necessary to fulfill the purposes described here or to comply with legal obligations.
- Account and marketplace data is retained as long as your account is active. After closure, data is deleted or anonymized within 12 months, unless law requires longer retention.
- Billing, contract, and accounting data is retained for 6–10 years according to Finnish accounting legislation.
- Aggregated analytics and search data is pruned and anonymized within 18 months.
Trusted Processors and Transfers
We work with carefully selected EU and EEA service providers. They process personal data only according to our documented instructions.
Processor Categories
- Cloud infrastructure, content delivery, and security services that store data encrypted within the EU/EEA.
- Payment service provider (Paytrail Oyj), which securely processes payment transactions.
- Analytics and product experience tools that collect aggregated usage data without individual profiles.
- Customer support and communication services that help us respond to inquiries quickly.
If a processor is located outside the EU/EEA, we ensure appropriate safeguards, such as EU Standard Contractual Clauses and ongoing risk assessment before transfers.
Cookies
We use necessary cookies to ensure service functionality. Analytics cookies are used only with your consent. You can manage your cookie settings through your browser settings or via the cookie banner.
Automated Decision-Making
We do not make decisions about you that are based solely on automated processing and have legal or similarly significant effects. Recommendations are based on your search history and profile settings but do not have legal consequences.
Minors
Our service is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors. If we discover that we have collected such data, we delete it immediately.
Your Rights
You can exercise the following rights by contacting us using the information below:
- Access personal data stored about you.
- Rectify incorrect or incomplete data.
- Request deletion of data when it is no longer needed or has been processed unlawfully.
- Receive your data in a structured, commonly used format and transfer it to another controller.
- Request restriction of processing, for example during handling of rectification or objection requests.
- Object to processing based on legitimate interest or prohibit direct marketing at any time.
- File a complaint with the data protection authority if you believe processing violates GDPR.
Data Breaches
We report data breaches to the supervisory authority and, if necessary, to data subjects in accordance with GDPR within 72 hours of discovering the breach.
Contact Us
If you have questions about data protection or wish to exercise your rights, contact our data protection officer:
We respond to verified data requests within 30 days and will notify you if we need additional time.