Privacy Policy

1. Data Controller

Data Controller: Studio Mustikka Bombo / Blueberry Bombo

Business ID: 2926254-9

Address: Kosamontie 50, 93390 Pudasjärvi, Suomi, Finland

Email: mustikkabombo@gmail.com

2. What data is processed

Data is primarily obtained from the user themselves in connection with registering for the service, subscriptions, contacts, or use of the service.

• Basic account and contact information, such as name, email, username, and possible phone number
• Information related to membership, subscription, billing, and customer relationship
• Possible online store order information, such as ordered products or services, billing and delivery information, and order history
• Information related to downloadable products or content, such as download rights and download history
• Technical and administrative information related to the payment transaction, such as payment status, event ID, and billing country
• Technical data related to the use of the service (e.g., IP address, device information, browser type, and log data), which are processed to determine the functionality, security, and error situations of the service
• Information provided in support requests, feedback, and contacts

The service contains content aimed at children, but any user accounts and subscriptions are intended for guardians or other adults. We do not knowingly collect personal data from children without the guardian's participation in using the service.

3. Why and on what basis data is processed

• Providing the service and managing user accounts (contract)
• Handling membership, subscriptions, deliveries, and payments (contract)
• Customer service (contract or legitimate interest related to maintaining the service)
• Prevention of fraud, abuse, and technical disruptions (legitimate interest related to the secure maintenance of the service)
• Developing the service and visitor statistics on the adult-oriented pages of the site (consent)
• Fulfilling statutory obligations (legislation)

4. Data retention

Personal data is generally retained for the duration of the user account. After that, data is retained only as long as necessary due to statutory obligations (e.g., accounting) or legitimate interests. Data is not kept longer than necessary.

If an online store or other ordering function is in use, order data may be retained for the period required by accounting, taxation, and contractual obligations. Retention periods may vary by data type.

5. Data disclosures and transfers

Data may be processed through reliable service providers only to the extent required to provide the service (e.g., hosting, membership management, payment services, and possible delivery services).

We use the Stripe payment service for membership billing. For example, the value of the purchase, order ID, billing information, and other information necessary to complete the payment can be forwarded to it. Online store payments are processed through the payment service currently in use. If delivery methods are implemented in the online store, necessary information for delivery may be forwarded to the delivery service.

Membership billing is managed in the Stripe customer portal. The online store order history, downloads, and address information are saved in the site's Account view.

We use the Google Analytics service on the adult-oriented pages of the site for visitor statistics based on the cookie consent given by the user. In this case, data may also be processed on servers located outside the European Union or the European Economic Area. Possible transfers are based on appropriate safeguards (e.g., contract clauses approved by the EU).

On the children's side (Bombo's Cabin / app), Google Analytics visitor tracking or other similar visitor analytics are not used.

6. Rights of the data subject

• Right to inspect one's own data
• Right to rectify incorrect data
• Right to request deletion of data
• Right to restrict or object to processing within the limits allowed by law
• Right to withdraw consent (e.g., visitor statistics)
• Right to transfer data from one system to another where applicable

Requests to exercise rights: mustikkabombo@gmail.com

The implementation of requests may be limited if data must be retained due to a statutory obligation, an open payment transaction, accounting, or a legal claim.

The data subject has the right to file a complaint with the Data Protection Ombudsman.

7. Cookies and analytics

Further information about cookies and analytics can be found on the Cookie Policy page.

If online store features are used, the site may also use strictly necessary cookies or other browser memory related to the shopping cart, checkout, login, or user account maintenance.

8. Changes to this policy

We will update this policy as necessary. The latest version is always available on this page.