Privacy Policy
1. Data Controller
ThePesula Oy
Website: www.thepesula.fi
Email: privacy@thepesula.fi
Business ID: (Y-tunnus)
ThePesula Oy acts as the data controller for all personal data collected through our Website and
Services.
2. Data We Collect
We collect the following categories of personal data:
• Identity Data: Full name
• Contact Data: Email address, phone number, delivery address
• Order Data: Service type, item descriptions, order history, special instructions
• Payment Data: Transaction references (we do not store full card details; payments processed via Paytrail or Revolut Business)
• Technical Data: IP address, browser type, device information, cookies (see Cookie Policy)
• Communications: Emails, chat messages, or feedback submitted to us
3. Legal Basis for Processing
We process your data under the following legal bases (GDPR Article 6):
• Contract Performance (Art. 6(1)(b)): To fulfil your laundry service order.
• Legal Obligation (Art. 6(1)(c)): Tax records, consumer protection compliance.
• Legitimate Interests (Art. 6(1)(f)): Service improvement, fraud prevention.
• Consent (Art. 6(1)(a)): Marketing emails and non-essential cookies (you may withdraw at any time).
4. How We Use Your Data
• Process and fulfil your orders (pickup scheduling, delivery coordination)
• Send order confirmations, updates, and receipts
• Respond to customer inquiries and complaints
• Comply with Finnish accounting and tax laws (retention: 7 years per Kirjanpitolaki)
• Improve our website and service offerings
• Send marketing communications (only with your explicit consent)
5. Data Sharing
We share data only with:
• Payment processors (Paytrail Oyj, Revolut Ltd) — for secure payment handling
• Logistics/delivery partners — address and contact details only
• IT service providers (hosting, email) — under data processing agreements
• Legal authorities — only when required by Finnish or EU law
We do not sell your personal data to third parties.
6. International Transfers
If data is transferred outside the EEA, we ensure adequate safeguards are in place (Standard
Contractual Clauses per GDPR Chapter V).
7. Data Retention
• Order and customer data: 3 years after last transaction
• Financial records: 7 years (Finnish Accounting Act)
• Marketing consent records: Until consent is withdrawn + 1 year
• Technical/log data: 12 months
8. Your Rights (GDPR)
You have the right to:
• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure (“Right to be Forgotten”) — Request deletion (subject to legal obligations)
• Restriction — Limit how we process your data
• Portability — Receive your data in machine-readable format
• Object — To direct marketing or legitimate interest processing
• Withdraw Consent — At any time, without affecting prior lawful processing
To exercise your rights, email: privacy@thepesula.fi. We respond within 30 days.
9. Supervisory Authority
If you believe we have violated your data rights, you may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu :
Website: www.tietosuoja.fi
Email: tietosuoja@om.fi
10. Children's Privacy
Our Services are for persons aged 18 and over. We do not knowingly collect personal data from children under 13 without verified parental consent. If such data is discovered, it will be deleted promptly.
11. Contact
Data Protection Inquiries:
Email: privacy@thepesula.fi
ThePesula Oy, Finland
Address: Washington Ave. Manchester, Kentucky