Privacy Policy

Helkama Velox is committed to protecting the privacy of its customers. This privacy policy explains how we process our customers’ personal data.

This privacy policy applies to our website, marketing, customer relationship management, and the products and services we offer, including the processing of personal data related to the omaHelkama service. The information we collect can be divided into data provided by the user, data observed from the use of online services, and data derived through analytics.

We use the data:

• Providing an easy-to-use and secure service
• Delivering a good customer experience
• Improving product recommendations and marketing
• Developing customer service and our online store

Data Controller and Contact Information

TThe controller responsible for the processing of personal data is:

Helkama Velox Oy (Business ID: 2277209-5)
Santalantie 22
10960 Hanko, Finland

For any questions regarding privacy or the processing of personal data, please contact: info@helkamavelox.fi

What Data May Be Collected?

Data Provided by the User or Identifiable Personal Information

• Identification data, such as name
• Personal identity code (when required for credit agreements)
• Contact details such as address, email address, and phone number
• Payment information, including credit agreements and other billing details
• Location data (with customer’s consent) used to indicate the nearest retailer
• Information required to log in to the omaHelkama service, such as an email address
• Data Observed From Services and Derived Through Analytics
  • Purchase history, including ordered products (e.g., model, size, color, and frame number of a bicycle) and pricing information
  • Delivery details such as chosen delivery method and delivery address
  • Product reviews
  • Online store usage and browsing data and device identifiers
  • Data and identifiers used for product recommendations and targeted content

Providing identification, contact, and payment details is mandatory when purchasing from www.helkamavelox.fi.

The primary source of information is the user. We may also receive additional information from our partners, such as credit service providers. We inform customers of any personal data received from third parties in accordance with GDPR, either upon first contact or within one month of receiving the data.

How Is Personal Data Used?

Personal data is processed for the following purposes based on the legal grounds indicated in parentheses:

• Maintaining the customer relationship (legitimate interest)
• Delivering, processing, and archiving orders (contract)
• Billing, credit decisions, and debt collection (legitimate interest)
• Developing the functionality and services of www.helkamavelox.fi and omaHelkama (legitimate interest; cookies require consent)
• Improving customer experience (legitimate interest)
• Analytics and statistical purposes (legitimate interest; cookies require consent)
• Customer service, communication, and customer satisfaction surveys (legitimate interest, contract)
• Producing more personalized and targeted content and marketing (legitimate interest, consent)
• Internal reporting and administrative procedures (legal obligation)
• Managing warranty and defect liability matters, complaints, legal processes, and authority requests (legal obligation)
• Fulfilling statutory obligations (e.g., accounting and taxation requirements)
• Preventing misuse (legitimate interest)
• Providing better customer service (legitimate interest)

When processing personal data based on legitimate interest, we balance benefits against potential risks to the data subject and ensure that the rights of individuals do not override the legitimate interest. Further information is available upon request.

Automated Decision-Making and Profiling

Helkama Velox does not use automated decision-making.
We collect data on customer purchasing behavior and reactions to our communications. This information is used for content targeting and service development.

How Is Data Stored and Protected?

All personal data is protected against unauthorized access and against accidental or unlawful destruction, alteration, disclosure, transfer, or any other unlawful processing.

The register is not disclosed to external parties. Access to the register requires internal access rights to the Helkama Velox network. The register is stored on a password-protected server.

All access to personal data is monitored in accordance with best practices.

Who Processes Personal Data?

Only Helkama Velox employees have access to customer data, and each employee may access data only insofar as it is necessary for performing their duties.

We use trusted contractual partners, and information may be transferred to third parties. All contracts comply with GDPR and other applicable legislation.

Helkama Velox Oy (Business ID: 2277209-5)
Santalantie 22
10960 Hanko, Finland

How Long Is Data Stored?

We store personal data as long as necessary to fulfill the purposes described in this policy. We delete or anonymize data if you have not read our content or otherwise interacted with our communications within two years.

Some data must be retained longer due to legal obligations, such as accounting or consumer sales responsibilities.

Upon customer request, we can delete personal data from Helkama Velox systems. Deletion is irreversible.

Certain data must be stored longer due to legal requirements, including:

• Accounting Act retention periods
• Consumer sales liability obligations
• System logs required by law to ensure a lawful and secure online store
• Backup data for system recovery, error correction, and security

What Rights Do I Have?

As a customer, you have the right to:

• Access your personal data, including the right to receive a copy
• Request rectification or deletion of your personal data
• Under certain conditions, request restriction of processing or object to processing
• Withdraw consent at any time (this does not affect processing carried out before withdrawal)

To exercise your rights, please contact our customer service. Your request must be sufficiently specific so that we can verify your identity.

We will inform you if we cannot fully fulfill your request—for example, if we must retain certain data due to legal obligations (such as credit information).

If you suspect unlawful processing, you have the right to file a complaint with the data protection authority.

How Can I Obtain My Stored Data?

You can request a copy of your personal data stored in Helkama Velox systems by emailing info@helkamavelox.fi

Is Personal Data Disclosed to Third Parties?

We may disclose certain necessary data to third parties for delivery and marketing purposes. Your data is also transferred to credit providers for credit decisions.

We also disclose data to authorities when necessary. When permitted by law, we will inform the customer of such requests.

Data may be transferred to:

• Analytics and statistics partners
• Product recommendation and personalization partners
• Email marketing partners (if the customer has subscribed to newsletters)
• Delivery companies
• Payment service providers
• Credit providers (when using invoice or installment payment)

Helkama Velox ensures a high level of data security during transfers and processing, in accordance with GDPR. Approved mechanisms may include:

• EU Commission Standard Contractual Clauses
• Binding Corporate Rules (BCR)
• EU-US Data Privacy Framework
• Other GDPR-compliant safeguards

Cookies on www.helkamavelox.fi

Helkama Velox uses cookies and similar technologies such as local storage. Cookies are small text files exchanged between the browser and the server. Cookie settings can be managed through the cookie banner on the site. Users can accept, reject, or modify their settings at any time.

Functional cookies and local storage are used for:

• Customer identification
• Maintaining login sessions
• Shopping cart functionalities

These cookies are mandatory for operating the service.

We use Google Analytics, Google Tag Manager, and Google AdWords for analytics and sales performance. Data sent to Google is anonymized.

Users can opt out of marketing cookies through browser settings, such as Do Not Track and blocking third-party cookies.

Changes to This Privacy Policy

Due to service development and changes in legislation, we reserve the right to update this privacy policy. Significant changes will be communicated to registered customers when terms are updated.